last executing test programs: 2m45.620572382s ago: executing program 3 (id=14): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000040), 0x4) sendmsg$802154_dgram(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20004045}, 0x4000010) 2m45.557218743s ago: executing program 3 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x10, 0x7ffc1ffb}]}) setrlimit(0xf, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) close_range(r6, r7, 0x200000000000000) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 2m45.279979987s ago: executing program 3 (id=18): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xb8}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xd, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="180200000000000000000000ffffffff851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008b19200b703000000000000850000003100000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = epoll_create1(0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) close(0x3) r3 = epoll_create1(0x0) r4 = epoll_create(0x8000) accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80800) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000140)={0x2026}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000340)={0x140000001}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x441, 0x20) truncate(&(0x7f0000000080)='./file1\x00', 0xf000) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x800000009) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) fdatasync(r8) ftruncate(r7, 0x5) syz_open_pts(r7, 0x650000) 2m45.024553751s ago: executing program 3 (id=22): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48c5, &(0x7f0000000540)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c726f6469722c646973636172642c6e66733d6e6f7374616c655f726f2c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c3d302c757365667265652c646f733178666c6f7070792c756e695f786c6174653d312c757466383d302c73686f72746e616d653d77696e6e742c00f11a89805a9424b369df0795c475412e2e9597ded9b2124da9c913c8691486783f191cd1e9fcde9a9819bed32eb4d7ba"], 0x0, 0x274, &(0x7f0000000780)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000100)='\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x105c43, 0x0) 2m44.790709694s ago: executing program 3 (id=27): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r1, 0x2284, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, 0x1, 0x8, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c080}, 0x40000) 2m44.224197294s ago: executing program 3 (id=31): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbaf, &(0x7f0000002f00)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5mm6cwcE38/eHPe97wn8zxPTmfOe2BOA/jHms5+pBGHIuJsEjFZ359GxFC1NxKxWTvu/t3L81lLolJ5+7ckkoi4d/fyfOO1kvp2vD4YiYibryXx749a466ubyzPlcullfr46Nr5S0dX1zdeWTo/d650rnThxOyrJ2ZPzs52sdbbl9774pkf3nj+6vWPZ978/MB3SZyOifpccx3dMh3TW3+TZoWImOt2sJwM1OtprjMp5JgQAAAdpU1ruP/GZAzEw8XbZHz7Y67JAQAAAF1RGYioAAAAAPtc4v4fAAAA9rnG9wDu3b0832j5fiOhv+6ciYipWv2N55trM4XYrG5HYjAixn5Povmx1qT2a09tOov09felrEWPnkPuZPNKRPx/u/OfVOufqj7F3Vp/GhEzXYg//ch4L9V/ugvxn6z+4S5EBICIG2dqF7LW61+6tf6Jba5/hW2uXbuR9/W/sf6737L+e1j/QJv131s7jHH4wUs32801r//e/eTnhSx+tn2qop7AnSsRhwvb1Z9s1Z+0qf/sDmOMz9++1m4uqz+rt9H6XX/lesSR6mqutf6GpNP/T3R0calcmqn93Ob11092jt98/rOWxW/cC/RDdv7HYnfn/9IOY0z979dD7eYeX3/6y1DyTrU3VN/z4dza2sqxiKHk9db9xzvn0jim8RpZ/S8+1/n9v1392WfCZv3vkP3ruVLfZuOrj8QcP3L8q93X31tZ/Qu7PP+f7jDGl99ce7/dXN71AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALA3pBExEUla3OqnabEYMR4R/4mxtHxxde3lxYsfXFjI5iKmYjBdXCqXZiJisjZOsvGxav/h+Pgj49mIOBgRn02OVsfF+YvlhbyLBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYMt4RExEkhYjIo2IPybTtFjMOysAAACg66byTgAAAADoOff/AAAAsP+13P8X/jIa6WcuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7EsHn71xK4mIzVOj1ZYZqs8N5poZ0Gvpzg4b63UeQP8N5J0AkJtCU79SqVRyTAXoM/f4QPKY+ZG2M8NdzwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAv68XDt24lUTE5qnRassM1ecGc80M6LU07wSA3Ax0mkweuwPYwwp5JwDkxj0+UFvZP6jUtM6PtP3N4aeOCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeMVFtSVqMiLTaT9NiMeJfETEVg8niUrk0ExEHIuKnycHhbHws76QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoutX1jeW5crm0oqOj08XOaPQt1mj9zdzmmOH2Ux06OX8wAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQi9X1jeW5crm0spp3JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDeVtc3lufK5dJKDzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+DAAA///6CAm5") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x23, @loopback, 0x22}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="46f1", 0x2}], 0x1}}], 0x1, 0x4000001) r2 = dup(r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x244, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x170, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe1b72cc5f119c58e}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa0, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x244}}, 0x4004800) syz_genetlink_get_family_id$team(&(0x7f0000001ec0), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r5, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x74, r6, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80, 0x5a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3a}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xafd, 0x24}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4040044) r10 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x40140, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) fchown(r10, 0x0, 0xee01) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd600000ef00083a00fc01002804c2e8b984d0a8ac05b700fffe8000000000000000000000000000aa8100907800000000"], 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 2m44.178704614s ago: executing program 32 (id=31): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040), 0x1, 0xbaf, &(0x7f0000002f00)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x23, @loopback, 0x22}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="46f1", 0x2}], 0x1}}], 0x1, 0x4000001) r2 = dup(r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x244, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x170, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xb}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xe1b72cc5f119c58e}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0xa0, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}]}, 0x244}}, 0x4004800) syz_genetlink_get_family_id$team(&(0x7f0000001ec0), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r4}, 0x18) r5 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r5, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x74, r6, 0x20, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80, 0x5a}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x57}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0xa}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3a}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xafd, 0x24}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x40}, @NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x4040044) r10 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x40140, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) fchown(r10, 0x0, 0xee01) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd600000ef00083a00fc01002804c2e8b984d0a8ac05b700fffe8000000000000000000000000000aa8100907800000000"], 0x0) syz_open_dev$usbmon(&(0x7f0000000280), 0x80000000000000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') 54.764773565s ago: executing program 5 (id=2066): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r0, r0, 0x2f}, 0x20) unshare(0xc000400) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@cgroup=r0, r2, 0x2f, 0x18, 0x4, @void, @value=r0}, 0x20) 54.636239166s ago: executing program 5 (id=2070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0/../file0/file0\x00') 54.584402087s ago: executing program 5 (id=2074): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x490882, 0x0) 54.460026979s ago: executing program 5 (id=2079): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000008000000020000000400000000000000", @ANYRES32, @ANYBLOB="fcffffff000000000000000000cd0000f30000c7c05600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="1802000000000035000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b70300000000bdf20c4a8fd17ad5b48081820cbe6f7aff8085000400040000001811000079a7732227b81fd362b5ccc25d2e18722f8d4e48d7e8db45bb0ee0b956bd028121622f598db2961b3b26fe1561a5132ee9ce31b950eae85c5526b9a5b0452605d98183b6d7bffe8b325416bd81c254fe4aba5586245bf14b3573d3419597795aed457cd80163e4d1c62473d3a6c134907ee38bafdfeee554cd7e591b33afa19a298f8e995a81705ea8e0724e16d5a1797a3cef754feb98bf8105cea08af84e10453d136e9b440355b78ac1882096ef30cd3ce5da60c2b7a7e97efbc89e7dfc4f956c7100c28d59b8f1a334e45cb7b659ce9bd6e4155b00"/327, @ANYBLOB="98d84d073c4162c142555369a7092597fe5318cb90c2b7dff38f2be5e86b9ea484a8ce6a86100bd327a1f7b90c00deac64976e57111d3fd446b2a3b71fe5e38a", @ANYRES32=r0], &(0x7f0000000800)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000080000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES8=r1, @ANYRESOCT=0x0, @ANYBLOB="47590d4f22bae9a149f0a4c2a817e796d0fb6770e529ebf4558e544a80583d03eff9888d2cd8f324984a103496e80f2c8505600b27bf13a1ae7c9e2f8b4e1eb121bd10c4dbd5b1aa983308aedf006cfa8f115803b2251f946316180b26ac38dc9e2642", @ANYRES64=r2, @ANYBLOB="37bf5543c53d1ed265590d51e8454a683d32c60392256f7b7abfff6c72e43d8c322369869a2e49271cde744d32e59e2a41da72f55aca59a55917e36c11e273238c3480f9f3fa6281e799ec0819d87050ab099bc1ba1a03c77e994740ad3b49436beb9979ec6357872d64fa667b3131990e9ef0166c4c0eb017285fcc6f1e1c26ad14f15d923502794ed66aaf8feb423e9345ba168782ec6fbcf9239696645b5f27c5c1cd7d62e3709e8188721520e766d26e2ffcad6836f86c815f806d9506000903c1f4d5b1d12faa38a924d90759feaf210ca2886ce5030ae789d05fc7", @ANYBLOB="998621cf0dbcaf32a09a14a87164e261b3da639ea381c9e6b64f6ef8efed83b7e38c94c335794a19945c9c5a4a419eaa57fc44a1f954ba2787e18788e112fb2af5223ff7bfb43e51facbc8d0a3bb6da00b97538676bc47864529f1b1d9fc558f1e561cdbeb9a46741a8e90045ec1be87673a46a78c9ed30d5ec59f90f88585e0e6ecd65923033c4f28f98dc3355a354f6b08f7d5e202180c16b6f045ea19915d1ecbcbeb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r6 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x0, 0xa29e, 0x9, @mcast2, @private1, 0x7840, 0x80, 0xe, 0x1}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) bind$xdp(r6, &(0x7f0000000740)={0x2c, 0x8, r7, 0x22, r6}, 0x10) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) 53.993750727s ago: executing program 5 (id=2085): bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mbind(&(0x7f0000a80000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b"], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{0x0}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 52.965716942s ago: executing program 5 (id=2098): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000008000000020000000400000000000000", @ANYRES32, @ANYBLOB="fcffffff000000000000000000cd0000f30000c7c05600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/327, @ANYBLOB="98d84d073c4162c142555369a7092597fe5318cb90c2b7dff38f2be5e86b9ea484a8ce6a86100bd327a1f7b90c00deac64976e57111d3fd446b2a3b71fe5e38a", @ANYRES32=r0], &(0x7f0000000800)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000080000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES8=r1, @ANYRESOCT=0x0, @ANYBLOB="47590d4f22bae9a149f0a4c2a817e796d0fb6770e529ebf4558e544a80583d03eff9888d2cd8f324984a103496e80f2c8505600b27bf13a1ae7c9e2f8b4e1eb121bd10c4dbd5b1aa983308aedf006cfa8f115803b2251f946316180b26ac38dc9e2642", @ANYRES64=r2, @ANYBLOB="37bf5543c53d1ed265590d51e8454a683d32c60392256f7b7abfff6c72e43d8c322369869a2e49271cde744d32e59e2a41da72f55aca59a55917e36c11e273238c3480f9f3fa6281e799ec0819d87050ab099bc1ba1a03c77e994740ad3b49436beb9979ec6357872d64fa667b3131990e9ef0166c4c0eb017285fcc6f1e1c26ad14f15d923502794ed66aaf8feb423e9345ba168782ec6fbcf9239696645b5f27c5c1cd7d62e3709e8188721520e766d26e2ffcad6836f86c815f806d9506000903c1f4d5b1d12faa38a924d90759feaf210ca2886ce5030ae789d05fc7", @ANYBLOB="998621cf0dbcaf32a09a14a87164e261b3da639ea381c9e6b64f6ef8efed83b7e38c94c335794a19945c9c5a4a419eaa57fc44a1f954ba2787e18788e112fb2af5223ff7bfb43e51facbc8d0a3bb6da00b97538676bc47864529f1b1d9fc558f1e561cdbeb9a46741a8e90045ec1be87673a46a78c9ed30d5ec59f90f88585e0e6ecd65923033c4f28f98dc3355a354f6b08f7d5e202180c16b6f045ea19915d1ecbcbeb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r6 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x0, 0xa29e, 0x9, @mcast2, @private1, 0x7840, 0x80, 0xe, 0x1}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) bind$xdp(r6, &(0x7f0000000740)={0x2c, 0x8, r7, 0x22, r6}, 0x10) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r6, &(0x7f00000003c0)='(', 0x1) 52.959398233s ago: executing program 33 (id=2098): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000008000000020000000400000000000000", @ANYRES32, @ANYBLOB="fcffffff000000000000000000cd0000f30000c7c05600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/327, @ANYBLOB="98d84d073c4162c142555369a7092597fe5318cb90c2b7dff38f2be5e86b9ea484a8ce6a86100bd327a1f7b90c00deac64976e57111d3fd446b2a3b71fe5e38a", @ANYRES32=r0], &(0x7f0000000800)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000080000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES8=r1, @ANYRESOCT=0x0, @ANYBLOB="47590d4f22bae9a149f0a4c2a817e796d0fb6770e529ebf4558e544a80583d03eff9888d2cd8f324984a103496e80f2c8505600b27bf13a1ae7c9e2f8b4e1eb121bd10c4dbd5b1aa983308aedf006cfa8f115803b2251f946316180b26ac38dc9e2642", @ANYRES64=r2, @ANYBLOB="37bf5543c53d1ed265590d51e8454a683d32c60392256f7b7abfff6c72e43d8c322369869a2e49271cde744d32e59e2a41da72f55aca59a55917e36c11e273238c3480f9f3fa6281e799ec0819d87050ab099bc1ba1a03c77e994740ad3b49436beb9979ec6357872d64fa667b3131990e9ef0166c4c0eb017285fcc6f1e1c26ad14f15d923502794ed66aaf8feb423e9345ba168782ec6fbcf9239696645b5f27c5c1cd7d62e3709e8188721520e766d26e2ffcad6836f86c815f806d9506000903c1f4d5b1d12faa38a924d90759feaf210ca2886ce5030ae789d05fc7", @ANYBLOB="998621cf0dbcaf32a09a14a87164e261b3da639ea381c9e6b64f6ef8efed83b7e38c94c335794a19945c9c5a4a419eaa57fc44a1f954ba2787e18788e112fb2af5223ff7bfb43e51facbc8d0a3bb6da00b97538676bc47864529f1b1d9fc558f1e561cdbeb9a46741a8e90045ec1be87673a46a78c9ed30d5ec59f90f88585e0e6ecd65923033c4f28f98dc3355a354f6b08f7d5e202180c16b6f045ea19915d1ecbcbeb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r6 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0x0, 0xa29e, 0x9, @mcast2, @private1, 0x7840, 0x80, 0xe, 0x1}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x28) bind$xdp(r6, &(0x7f0000000740)={0x2c, 0x8, r7, 0x22, r6}, 0x10) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) write$binfmt_misc(r6, &(0x7f00000003c0)='(', 0x1) 42.661381924s ago: executing program 0 (id=2236): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1949000400f6ff07080000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000280), &(0x7f0000000200)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x5, 0x7ffc1ffb}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x7f8f, &(0x7f0000000400)={0x0, 0x284d, 0x4, 0x2, 0x3c8}, &(0x7f0000000380), &(0x7f0000000480)) syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1, 0x0, 0x0, r2}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000003c0)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000004c0)='./file0\x00', 0x101, 0x0, 0x1}) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x118, &(0x7f00000002c0), 0x0, 0x4) 42.559293995s ago: executing program 0 (id=2239): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0xe2, 0x8, 0x5, 0x2, 0x9, 0x9}, 0xc) syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080), &(0x7f0000000100)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0xe}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x1000, 0x2) 42.368236398s ago: executing program 0 (id=2243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000004000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000002fa77dbe03bef55400000100000000000ac80600000000000000e8faca7f6375ad797295cc4ba19f7d70eddfe7874d4d163f0c8cde6ff92846d73760fc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000400000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 42.310605699s ago: executing program 6 (id=2246): mq_open(&(0x7f0000000480)='!>f\b\xbb\xa4C\xc4\xac\xfasel8A\xce\xdd\xac\x94W\x87\x00\x02\x00\x10\x00\x00\x00\x00\xd7\\', 0x40, 0x5e, 0x0) 42.24996712s ago: executing program 6 (id=2248): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000140005771c2b5d2fb17580d4dc866a01"], 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x2005c840) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {r2, r3}}, './file0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000300)=0xe8) setreuid(r5, 0xee01) ftruncate(r0, 0x1) 42.188429901s ago: executing program 6 (id=2249): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0201f0020a00000000000000000000000300"], 0x50}}, 0x0) 42.154394071s ago: executing program 0 (id=2251): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000008000000020000000400000000000000", @ANYRES32, @ANYBLOB="fcffffff000000000000000000cd0000f30000c7c05600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/327, @ANYBLOB="98d84d073c4162c142555369a7092597fe5318cb90c2b7dff38f2be5e86b9ea484a8ce6a86100bd327a1f7b90c00deac64976e57111d3fd446b2a3b71fe5e38a", @ANYRES32=r0], &(0x7f0000000800)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000080000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES8=r1, @ANYRESOCT=0x0, @ANYBLOB="47590d4f22bae9a149f0a4c2a817e796d0fb6770e529ebf4558e544a80583d03eff9888d2cd8f324984a103496e80f2c8505600b27bf13a1ae7c9e2f8b4e1eb121bd10c4dbd5b1aa983308aedf006cfa8f115803b2251f946316180b26ac38dc9e2642", @ANYRES64=r2, @ANYBLOB="37bf5543c53d1ed265590d51e8454a683d32c60392256f7b7abfff6c72e43d8c322369869a2e49271cde744d32e59e2a41da72f55aca59a55917e36c11e273238c3480f9f3fa6281e799ec0819d87050ab099bc1ba1a03c77e994740ad3b49436beb9979ec6357872d64fa667b3131990e9ef0166c4c0eb017285fcc6f1e1c26ad14f15d923502794ed66aaf8feb423e9345ba168782ec6fbcf9239696645b5f27c5c1cd7d62e3709e8188721520e766d26e2ffcad6836f86c815f806d9506000903c1f4d5b1d12faa38a924d90759feaf210ca2886ce5030ae789d05fc7", @ANYBLOB="998621cf0dbcaf32a09a14a87164e261b3da639ea381c9e6b64f6ef8efed83b7e38c94c335794a19945c9c5a4a419eaa57fc44a1f954ba2787e18788e112fb2af5223ff7bfb43e51facbc8d0a3bb6da00b97538676bc47864529f1b1d9fc558f1e561cdbeb9a46741a8e90045ec1be87673a46a78c9ed30d5ec59f90f88585e0e6ecd65923033c4f28f98dc3355a354f6b08f7d5e202180c16b6f045ea19915d1ecbcbeb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) 42.136823022s ago: executing program 6 (id=2253): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000008000000020000000400000000000000", @ANYRES32, @ANYBLOB="fcffffff000000000000000000cd0000f30000c7c05600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/327, @ANYBLOB="98d84d073c4162c142555369a7092597fe5318cb90c2b7dff38f2be5e86b9ea484a8ce6a86100bd327a1f7b90c00deac64976e57111d3fd446b2a3b71fe5e38a", @ANYRES32=r0], &(0x7f0000000800)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000080000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES8=r1, @ANYRESOCT=0x0, @ANYBLOB="47590d4f22bae9a149f0a4c2a817e796d0fb6770e529ebf4558e544a80583d03eff9888d2cd8f324984a103496e80f2c8505600b27bf13a1ae7c9e2f8b4e1eb121bd10c4dbd5b1aa983308aedf006cfa8f115803b2251f946316180b26ac38dc9e2642", @ANYRES64=r2, @ANYBLOB="37bf5543c53d1ed265590d51e8454a683d32c60392256f7b7abfff6c72e43d8c322369869a2e49271cde744d32e59e2a41da72f55aca59a55917e36c11e273238c3480f9f3fa6281e799ec0819d87050ab099bc1ba1a03c77e994740ad3b49436beb9979ec6357872d64fa667b3131990e9ef0166c4c0eb017285fcc6f1e1c26ad14f15d923502794ed66aaf8feb423e9345ba168782ec6fbcf9239696645b5f27c5c1cd7d62e3709e8188721520e766d26e2ffcad6836f86c815f806d9506000903c1f4d5b1d12faa38a924d90759feaf210ca2886ce5030ae789d05fc7", @ANYBLOB="998621cf0dbcaf32a09a14a87164e261b3da639ea381c9e6b64f6ef8efed83b7e38c94c335794a19945c9c5a4a419eaa57fc44a1f954ba2787e18788e112fb2af5223ff7bfb43e51facbc8d0a3bb6da00b97538676bc47864529f1b1d9fc558f1e561cdbeb9a46741a8e90045ec1be87673a46a78c9ed30d5ec59f90f88585e0e6ecd65923033c4f28f98dc3355a354f6b08f7d5e202180c16b6f045ea19915d1ecbcbeb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) 41.794245827s ago: executing program 0 (id=2257): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0201f0020a00000000000000000000000300"], 0x50}}, 0x0) 41.792557187s ago: executing program 6 (id=2258): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r2, 0xffffffffffffffff, 0x0) 41.214726226s ago: executing program 6 (id=2268): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000008000000020000000400000000000000", @ANYRES32, @ANYBLOB="fcffffff000000000000000000cd0000f30000c7c05600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/327, @ANYBLOB="98d84d073c4162c142555369a7092597fe5318cb90c2b7dff38f2be5e86b9ea484a8ce6a86100bd327a1f7b90c00deac64976e57111d3fd446b2a3b71fe5e38a", @ANYRES32=r0], &(0x7f0000000800)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000080000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES8=r1, @ANYRESOCT=0x0, @ANYBLOB="47590d4f22bae9a149f0a4c2a817e796d0fb6770e529ebf4558e544a80583d03eff9888d2cd8f324984a103496e80f2c8505600b27bf13a1ae7c9e2f8b4e1eb121bd10c4dbd5b1aa983308aedf006cfa8f115803b2251f946316180b26ac38dc9e2642", @ANYRES64=r2, @ANYBLOB="37bf5543c53d1ed265590d51e8454a683d32c60392256f7b7abfff6c72e43d8c322369869a2e49271cde744d32e59e2a41da72f55aca59a55917e36c11e273238c3480f9f3fa6281e799ec0819d87050ab099bc1ba1a03c77e994740ad3b49436beb9979ec6357872d64fa667b3131990e9ef0166c4c0eb017285fcc6f1e1c26ad14f15d923502794ed66aaf8feb423e9345ba168782ec6fbcf9239696645b5f27c5c1cd7d62e3709e8188721520e766d26e2ffcad6836f86c815f806d9506000903c1f4d5b1d12faa38a924d90759feaf210ca2886ce5030ae789d05fc7", @ANYBLOB="998621cf0dbcaf32a09a14a87164e261b3da639ea381c9e6b64f6ef8efed83b7e38c94c335794a19945c9c5a4a419eaa57fc44a1f954ba2787e18788e112fb2af5223ff7bfb43e51facbc8d0a3bb6da00b97538676bc47864529f1b1d9fc558f1e561cdbeb9a46741a8e90045ec1be87673a46a78c9ed30d5ec59f90f88585e0e6ecd65923033c4f28f98dc3355a354f6b08f7d5e202180c16b6f045ea19915d1ecbcbeb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) 41.186244917s ago: executing program 34 (id=2268): r0 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000008000000020000000400000000000000", @ANYRES32, @ANYBLOB="fcffffff000000000000000000cd0000f30000c7c05600", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"/327, @ANYBLOB="98d84d073c4162c142555369a7092597fe5318cb90c2b7dff38f2be5e86b9ea484a8ce6a86100bd327a1f7b90c00deac64976e57111d3fd446b2a3b71fe5e38a", @ANYRES32=r0], &(0x7f0000000800)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000080000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'veth1_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYRESHEX, @ANYRES16, @ANYRESHEX, @ANYRES8=r1, @ANYRESOCT=0x0, @ANYBLOB="47590d4f22bae9a149f0a4c2a817e796d0fb6770e529ebf4558e544a80583d03eff9888d2cd8f324984a103496e80f2c8505600b27bf13a1ae7c9e2f8b4e1eb121bd10c4dbd5b1aa983308aedf006cfa8f115803b2251f946316180b26ac38dc9e2642", @ANYRES64=r2, @ANYBLOB="37bf5543c53d1ed265590d51e8454a683d32c60392256f7b7abfff6c72e43d8c322369869a2e49271cde744d32e59e2a41da72f55aca59a55917e36c11e273238c3480f9f3fa6281e799ec0819d87050ab099bc1ba1a03c77e994740ad3b49436beb9979ec6357872d64fa667b3131990e9ef0166c4c0eb017285fcc6f1e1c26ad14f15d923502794ed66aaf8feb423e9345ba168782ec6fbcf9239696645b5f27c5c1cd7d62e3709e8188721520e766d26e2ffcad6836f86c815f806d9506000903c1f4d5b1d12faa38a924d90759feaf210ca2886ce5030ae789d05fc7", @ANYBLOB="998621cf0dbcaf32a09a14a87164e261b3da639ea381c9e6b64f6ef8efed83b7e38c94c335794a19945c9c5a4a419eaa57fc44a1f954ba2787e18788e112fb2af5223ff7bfb43e51facbc8d0a3bb6da00b97538676bc47864529f1b1d9fc558f1e561cdbeb9a46741a8e90045ec1be87673a46a78c9ed30d5ec59f90f88585e0e6ecd65923033c4f28f98dc3355a354f6b08f7d5e202180c16b6f045ea19915d1ecbcbeb"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x100000001) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) close(r5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) 41.103703068s ago: executing program 0 (id=2271): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xf, 0xe}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x7, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x26, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff88a82900810015000004aaaab2a30bc288ca56297fa6a12b209b"], &(0x7f0000000080)={0x0, 0x4, [0x2b1, 0x107dc, 0xc26, 0x5a3]}) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001050000030e800006"], 0x9a) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28008000}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x5, 0x0}) 41.069317709s ago: executing program 35 (id=2271): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xf, 0xe}, {0xe, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x7, &(0x7f0000000000)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r3 = dup(r2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_ethernet(0x26, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaabbffffffffffff88a82900810015000004aaaab2a30bc288ca56297fa6a12b209b"], &(0x7f0000000080)={0x0, 0x4, [0x2b1, 0x107dc, 0xc26, 0x5a3]}) write$tun(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="0000080001050000030e800006"], 0x9a) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28008000}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000440)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x5, 0x0}) 6.579507888s ago: executing program 1 (id=2800): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x200000000003}, 0x18) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfe, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000010) 3.138379692s ago: executing program 1 (id=2801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000080)={r0, r0, 0x9, 0x0, &(0x7f0000000040), 0x3, 0x6, 0xffff, 0x9, 0xffff, 0x1, 0x1000, 'syz0\x00'}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) syz_open_dev$vcsa(&(0x7f0000000000), 0x100, 0x100) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r2, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b90ce64ad6a196b837992923a456e800000000000000000000000000196f173aaad8c3d40ce10c00c27e8b9e0e19767b0e6381dec9b4cb4cc2b3e6f9dadaab72814c386dd37b3fd7101b2645a2490bead1726574bc2d742e109a80ef722c4403a2328e345bafd26bb1792cddc44e23df1515036d06"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000"], 0x50) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000e0028e0f300d4e79181ec46001257cc476ba9cae8337377901450f2672b6d9b04706cd02655766eb394fbdc6150ef89857f591eedca2f5b175f45c704b9f02ece94ef144e5a7e88aa59ab4ecf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r5 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r5, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00'], 0x28}}], 0x1, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7ff, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_open_dev$evdev(0x0, 0x0, 0x173540) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 2.782670987s ago: executing program 1 (id=2852): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 2.59863776s ago: executing program 8 (id=2855): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e294aaf5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000a80)="d48c8225ddfdf23dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75200000000000000000000000000000000daf2eea77d37fde052788fed8f7db246f0be4929a5afc2222845e9008620c4535c6c2c96868c32b827ae4357bbccf7f99a1daa6d2e9ceca5ed14f752105d6499a3ea31ed4559fa7e44d418a8b0be76", 0xa2}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa8", 0xea}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.495366332s ago: executing program 8 (id=2857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x200000000003}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfe, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000010) 2.377793603s ago: executing program 8 (id=2858): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x369000, 0x1) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x2000, 0x388181348661b3e6) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000080)={0x2, 0x9, 0x5}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) recvmsg$can_j1939(r1, &(0x7f0000000380)={&(0x7f0000000100)=@l2tp, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/150, 0x96}, {&(0x7f0000000240)=""/113, 0x71}, {&(0x7f00000002c0)=""/62, 0x3e}], 0x3, &(0x7f0000000340)=""/37, 0x25}, 0x40000020) r2 = open(&(0x7f00000003c0)='./file0\x00', 0x40, 0x84) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000400)=""/94, 0x1000000, 0x1800, 0x10, 0x4}, 0x20) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000004c0), 0x103002, 0x0) timer_create(0x7, &(0x7f0000000500)={0x0, 0x15, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000540)=0x0) timer_settime(r4, 0x0, &(0x7f0000000580)={{0x77359400}, {0x0, 0x989680}}, &(0x7f00000005c0)) bind$rds(r2, &(0x7f0000000600)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000640)={0xa, [0xf, 0x800, 0x8000, 0x6a5, 0x0, 0x8, 0x0, 0x3, 0x3, 0x3]}, 0x18) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000680)=0x4d, 0x4) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f00000006c0), &(0x7f0000000700)=0x4) ioctl$HIDIOCSFLAG(r2, 0x4004480f, &(0x7f0000000740)=0x2) pwrite64(r3, &(0x7f0000000780)="f412b18be63ade5193cafd6c31b8e0e94a3c21bd708c54a966d26abc4fefb9bb6b83d263e8779b309335d7abe3e0fdfed249e76770f1cc929e4a5d732b06cf12c1283f951b9b8c27b30ddad4d781c4ed0c8c162cdc", 0x55, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000800)={0x0, 0x2}, &(0x7f0000000840)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000880)={r6}, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r1, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa3, &(0x7f0000000b80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x68, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x20, &(0x7f00000008c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff6c}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ldst={0x3, 0x3, 0x3, 0x1, 0xa, 0x2, 0x4}], &(0x7f00000009c0)='syzkaller\x00', 0xff, 0x49, &(0x7f0000000a00)=""/73, 0x40f00, 0x42, '\x00', r7, 0x0, r1, 0x8, &(0x7f0000000dc0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x3, 0xf, 0x9, 0x10}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000e40)=[{0x4, 0x3, 0xe, 0x8}, {0x5, 0x2, 0x9, 0x5}, {0x4, 0x1, 0x6, 0x7}, {0x4, 0x4, 0xc, 0x6}, {0x2, 0x3, 0x3, 0x2}, {0x0, 0x5, 0x1, 0xc}, {0x1, 0x2, 0xd, 0xc}, {0x4, 0x1, 0x2, 0x2}], 0x10, 0xfff}, 0x94) fchdir(r8) clock_gettime(0x0, &(0x7f0000000f80)={0x0, 0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000fc0)={{r9, r10+10000000}, {0x77359400}}, &(0x7f0000001000)) readlink(&(0x7f0000001040)='./file0\x00', &(0x7f0000001080)=""/84, 0x54) write$binfmt_misc(r1, &(0x7f0000001100)="a9db71ba3bca32a61426326ffbc331c75942278d240b0067a14c0670668c579288b716494ba8a576d5a6e5773264aee4b0dda8d157704a339c8bd20af00cc8f8ef81dbac3566f16b3753ad4c2d22b536bceeb7a7f3e8ea92038bc365d2c4f9a857f74882a90b6d65643d73a7ce0e4b1677194c7717a6d79bf41b", 0x7a) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001180), 0x2000, 0x0) utimensat(r1, &(0x7f00000011c0)='./file0\x00', &(0x7f0000001200)={{0x77359400}, {0x77359400}}, 0x100) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001240)=@req={0xe8bc, 0xfffffffa, 0x9, 0x3ff}, 0x10) 2.331454584s ago: executing program 2 (id=2859): mknod(&(0x7f00000000c0)='./file0\x00', 0x100, 0xfff) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r2, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80000001}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40010) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) socket$netlink(0x10, 0x3, 0x0) unlink(&(0x7f00000003c0)='./file0\x00') 2.295923775s ago: executing program 4 (id=2861): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 2.295386355s ago: executing program 8 (id=2862): setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r5, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 1.97147744s ago: executing program 4 (id=2864): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="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"]) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000020cbd5d1f8ffffff00000800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000b96be2a1c140664cbd", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r6 = socket$inet_sctp(0x2, 0x97bf49cd51b1f0da, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r10, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e24, @rand_addr=0x5}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='^', 0x1}], 0x1, 0x0, 0x0, 0x20004811}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010100}]}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) shutdown(r10, 0x1) setsockopt$inet_sctp_SCTP_MAXSEG(r10, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x17}, 0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000200)={r9, 0x7f}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={r9, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f00000000c0)=0x10) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 1.871377462s ago: executing program 2 (id=2865): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e294aaf5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000a80)="d48c8225ddfdf23dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75200000000000000000000000000000000daf2eea77d37fde052788fed8f7db246f0be4929a5afc2222845e9008620c4535c6c2c96868c32b827ae4357bbccf7f99a1daa6d2e9ceca5ed14f752105d6499a3ea31ed4559fa7e44d418a8b0be76", 0xa2}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa8", 0xea}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="6a422a90b49aff66e6d57061f85cd63d581d6e27741be92c4a9081cd661ab03e82ca5e1169e5bf91b0dd79cde0d1789dffbea8280cf8c7439d10e62b2b84f99180da2c85fec3", 0x46}, {&(0x7f0000001980)="f2fe84e07da72d5be0eee26e6693cc950e7080ba2901a53b969dc13369b90492865a9fb8d25a00b9c2d8e52e23e3267d15c4aeea5918add6f28e302868e1d4500b073ac1a7c72c4e805ff1fce9c5e0273d0ea144b6999eb15d1fed8ddba6250af47fde6e4225f438528b6660d8b67812526721f6b755bb37ca116f51e2f239675ff38126c1d6816304f28e8a5fe57757f47708f267844018e27b4ad806ad910c7e6e8f58d26d097154539d34b5e5b044044d1d613c4658514b81c0e3b6bb8a489a45004e332ac5a9", 0xc8}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.830960022s ago: executing program 2 (id=2866): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dd9a) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r3}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000001ec0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="7c7694fe35e6cbd4de25e6e32afac02ed022a3fbb3ba7ebf03ac91f35f944a92f666efe510604ea267f108fb8a1b75a3f416d2c056fb97b987fe40e9f4cb88739d4d50bda2dfe71d7b3a1df4b73effb686c34a15abbb6b8c5106b5557af9ccfc8d16f47b8654e1789071e6f68d08baa75a1ae425c250facb54b55c46b20895af0ba107280f", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) preadv2(r4, &(0x7f0000001bc0)=[{&(0x7f0000000580)=""/146, 0x92}, {&(0x7f00000007c0)=""/179, 0xb3}, {&(0x7f00000008c0)=""/71, 0x47}, {&(0x7f0000000640)=""/56, 0x38}, {&(0x7f0000000940)=""/112, 0x70}, {&(0x7f0000000b40)=""/123, 0x7b}, {&(0x7f0000000bc0)=""/4096, 0x1000}], 0x7, 0x62, 0x8, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000001c40)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x12020, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xd, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xe3, 0x6, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461"], 0x118}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x100, 0x71, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f00000000001400010000000000000000000000ffffac14142d50bbad6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf2348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc07600000100000000009d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a4013b168194875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be820400e90073237c098ef9cf932d265609634e4b42d98e4c2472ab5b0a870800"/302], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.3078112s ago: executing program 7 (id=2870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000002380)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="81", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0xdc, 0xcd, 0x8000, 0x1ff, 0xfffffffe, 0x40, 0x139, 0x5e}, &(0x7f0000000340)=0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r5, &(0x7f0000000a40)={0x2, 0x4e22, @remote}, 0x24) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 1.184534242s ago: executing program 1 (id=2871): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000002380)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="81", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0xdc, 0xcd, 0x8000, 0x1ff, 0xfffffffe, 0x40, 0x139, 0x5e}, &(0x7f0000000340)=0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r5, &(0x7f0000000a40)={0x2, 0x4e22, @remote}, 0x24) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 1.183371962s ago: executing program 2 (id=2872): prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000580)='fd/3\x00') prlimit64(r0, 0xd, &(0x7f0000000180)={0x0, 0x100000000}, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) close(r5) accept4(r2, 0x0, 0x0, 0x400000000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100006, 0x220104, 0xe2a4, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r8}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r8}, 0x38) 1.045966314s ago: executing program 4 (id=2873): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 901.825967ms ago: executing program 7 (id=2874): socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001580), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r3, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400040002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 886.818177ms ago: executing program 4 (id=2875): lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 721.352539ms ago: executing program 1 (id=2876): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000ffec0000000000a549af88826cf3de22713187abad604d34a57cd9970957d87dca42c1fe95ddb2849e6a8eea1faa3c95a2b61be4548340e4cf73e197ed6cb74841e555177d6605c085", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x22, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe9b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x200220, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x200, 0x70bd2d, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x4e, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r3, 0x2285, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000780)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x8, &(0x7f0000000000), 0x1, 0x51a, &(0x7f0000000a40)="$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") r4 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) syslog(0x2, &(0x7f0000000580)=""/75, 0x4b) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f00000002c0)='GPL\x00', 0xa, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000005000000020000000200000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000418ad17b3ea5721c935b005b14ff0000000000000000002976539512712031d2000020000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1808400000000000ffff00000000faa9b3a00000000000000017000000", @ANYRESHEX=r5, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='sched_switch\x00'}, 0x18) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) 720.576689ms ago: executing program 4 (id=2877): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0xfff1, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="7961000000a00bfef5007e00000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000e998048d9caa3727e1b70155601e952ea5358dd6d455fe4091519daab49a81ca2daa3ac54aec9caedd06437ab5fcf590903d743962fc480ed4db5805449b0553c85a3ee9da93c9b559b76762d71ab58f76abc2b4a3221a5b084f7da53cb6cdc402e44a9e0ae81096f2ed511e873c27cb88556cffafe72d0e279c554f37ef67fc4b3f36a4cdd3fb8a35d33006afc520cc80bee7f28f996f32868704090000009c9c45cbae6334e080d5c03559db3d65c6a14233207f225a02e24427459a", @ANYRES32, @ANYBLOB="0400"/20, @ANYRESOCT=r3, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000004000000080000000800001e00000000d4d20384b695930b03e7a16886f9a4d662aa1c79555ca7885500f76072", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRESOCT=r0, @ANYRESHEX=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="21fb7a010000000000000000000000000000000300000000000000006aba7706bdaad3c89793ca04cf9b826b4b9f47d21dfec432273e4761c82c2f04dc41e213b80524e4511cd44018ee6242748ebedfc335eb60e9ef799c40a3c8aa29e696daa59fe35bee146be9b3eb9240816a87d50250acea9783d8a69112a6a3ec5201aabc03776d5a9ff22128b54136c5eacca46072c05734ce6b2505eac7f75885ba9a6028dd9458f5a2e8dfe82b99564d1dbc9f7492fde580c9d50000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0de", 0x80}, {0x0}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f00000025c0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86", 0xc47}, {&(0x7f00000006c0)}, {0x0}], 0x6, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/26], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',cache=head,']) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp6\x00') connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 655.19655ms ago: executing program 7 (id=2878): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb28bd7000fddbdf25670000000c009940020000002a0000000800c400020000000800c300"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x0) (fail_nth: 3) 559.126962ms ago: executing program 2 (id=2879): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x238, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000580)={0x3, &(0x7f00000004c0)=[{0xfff, 0x8, 0x7, 0x4}, {0x8, 0x3, 0x2, 0x7}, {0x8, 0x5, 0x4, 0x9936}]}) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50000004) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000006c0)={{{@in=@multicast2, @in6=@private1}}, {{@in=@broadcast}, 0x0, @in=@private}}, &(0x7f0000000200)=0xe8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff000000000000080045040033000000000001907864010107001e010104009078e00000e0450000000000000000110000ac14144397244b9930cb01e3e33cbc86dc62bcaa00000000341517"], 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) r6 = creat(&(0x7f0000000040)='./file0\x00', 0x81) close(r6) r7 = socket$caif_stream(0x25, 0x1, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="74a69ab25bb6c21a5c6f3d", @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB=',\x00']) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) write(r2, &(0x7f0000000400)='R:', 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 558.750062ms ago: executing program 7 (id=2880): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x18) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xff, 0x1, 0x7ffe}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 469.937543ms ago: executing program 7 (id=2881): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000240), 0x242300, 0x0) recvfrom$phonet(r0, &(0x7f0000000380)=""/1, 0x1, 0x40002000, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xffffffff}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400), 0x1cb081, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) recvmsg$kcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/182, 0xb6}, {&(0x7f0000000c00)=""/4096, 0x1000}], 0x2}, 0x1) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r6, &(0x7f0000000480)=[{&(0x7f0000000280)='\b\x00\x00\x00', 0x4}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r4, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "e80c857b65087dea03da4c290569c738c3"}}]}, 0x198}}, 0x0) fchdir(r7) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x20) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) 419.912514ms ago: executing program 2 (id=2882): r0 = getpgrp(0x0) r1 = perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x80, 0x80, 0xa, 0xa9, 0x7, 0x0, 0x100, 0x30, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x800, 0x8, 0x10, 0x0, 0x8000000000000000, 0x800, 0x4, 0x0, 0x1, 0x0, 0x6691}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x36, 0x1, 0xfd, 0x0, 0x0, 0x4, 0x4118, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xd}, 0x10400, 0x10000, 0x0, 0x3, 0x3, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x9}, r0, 0xffffffffffffffff, r1, 0x2) r3 = socket$unix(0x1, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180900000023008100001d00fe000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xffffffffffffffff}, 0x18) r5 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0x1, 0x3c0}) syz_emit_ethernet(0x32, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa000800450000240000000000849078ac2414bbac1414bbf2dfbc81cfe0ca1b3683fff0380bc51364befe5bfff630cfd67075f8609779985680c119339ec27e3dcf98820bedce7f0a8d8f4f583bac0207602a3acdef7325066e8f3ea141a3f693e947f045fc4acd1bf0e4baeeafa514be44d3555da0100ea2f4b5cfe914f2cb0066d5a85e232a07b128329ee61866b5acd47e08a545d0a876ea5ef080f600d98bf40a19daf97a11ae74611cdc79ea8e32cae6e61f0c4f972d544acc7e8c095b230da9cea2"], 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f00000007c0)=ANY=[@ANYRES8=r4, @ANYRESHEX, @ANYRES8=r7, @ANYRES16=r2, @ANYRES64, @ANYRESOCT=r5, @ANYRESDEC=r6], &(0x7f0000000480)='syzkaller\x00', 0x746, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x2}, 0x506bb4f0112bca40) bind$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r6, 0x4) close_range(r5, r6, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="2c756e616d653dd0"]) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRESDEC=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00'}, 0x18) ioctl$USBDEVFS_IOCTL(r9, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r12, 0x0, 0x2000000000000}, 0x18) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x1000080, &(0x7f00000004c0)={[{@clone_children}, {@subsystem='blkio'}, {@nofavordynmods}, {@favordynmods}, {@none}, {@favordynmods}, {@release_agent={'release_agent', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}, {@clone_children}, {@subsystem='io'}, {@cpuset_v2_mode}, {@cpuset_v2_mode}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@seclabel}]}) ioctl$KDSKBENT(r11, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) connect$unix(r10, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 413.235924ms ago: executing program 4 (id=2883): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000000000003000000000300000002000000fdffffff00000000000000010500000010000001000000000000000902"], 0x0, 0x4e}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc458, 0x80, 0x3, 0xb8}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, 0x0, 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="2800000004060104000000000000000007000005050001000700000009000100"], 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) r7 = msgget$private(0x0, 0x10a) msgctl$IPC_STAT(r7, 0x2, 0x0) setgid(0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaabaaa769363e412930800454e0014006700000232907800000000ffffffff"], 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r9, &(0x7f0000004200)='t', 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0b000000050000000400000032a9f00009"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r11}, 0x10) rt_sigpending(0x0, 0x0) sendfile(r9, r8, 0x0, 0x7ffff000) 382.941104ms ago: executing program 8 (id=2884): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xd, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0xe2, 0x8, 0x5, 0x2, 0x9, 0x9}, 0xc) syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080), &(0x7f0000000100)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x64, 0x1, 0x0, 0x0, 0x0, 0x210e, 0xc0002, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_bp={0x0, 0xe}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0xb) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x1000, 0x2) 94.081409ms ago: executing program 7 (id=2885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000002380)=ANY=[], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000a40)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="81", 0x1}], 0x1}}], 0x2, 0x0) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000180)={0xdc, 0xcd, 0x8000, 0x1ff, 0xfffffffe, 0x40, 0x139, 0x5e}, &(0x7f0000000340)=0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x200000000000006}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r4, &(0x7f0000000a40)={0x2, 0x4e22, @remote}, 0x24) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 2.02566ms ago: executing program 8 (id=2886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x9, 0xa4, 0x1ff, 0x31c3257003797fd5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0xe}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'veth1\x00', {0x1}, 0x2}) unshare(0x22020600) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x116003d, &(0x7f0000001fc0)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=000000000000000000000J6,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYBLOB="7d75aefbe901e9bcf8a06bbcf587b96062ba5fa26ecce7d3b460b4533df9c5505d473a09f17b71071b625aea47d260a63cc3ddddfab8bb6e6f64c704809835d7fa60abb8f326edfee27cf1f97c3cf2ec38176700d962de683b0a5cba8fd5e59ed8caf43ae4946391d3c6b1ffe6fbfc2329a46df8a47f40e40e5572d4f0e37c8a", @ANYBLOB="2c756e695f786c6174653d302c757466383d312c636865636b3d7374726963742c6e6f6e756d7461696c3d302c726f6469722c6572726f72733d636f6e74696e75652c73686f72746e616d653d6c6f7765722c756d61516b3d30303030303030303030303030303030303030303030372c726f6469722c7379735f696d6d757461626c652c00e938dc09f7faaa1367021238080df6946f8a6d4aa4aa9c9cce337d8377e3", @ANYRES64=r1, @ANYBLOB="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"], 0x80, 0x2bb, &(0x7f0000001240)="$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") ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x20000000008) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") mkdir(&(0x7f0000000000)='./control\x00', 0xa2) socket(0x1d, 0x2, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f0000000000)={0xb196fc36f595ee27, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa2f}, 0x0, 0xf, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) 0s ago: executing program 1 (id=2887): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e294aaf5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000a80)="d48c8225ddfdf23dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75200000000000000000000000000000000daf2eea77d37fde052788fed8f7db246f0be4929a5afc2222845e9008620c4535c6c2c96868c32b827ae4357bbccf7f99a1daa6d2e9ceca5ed14f752105d6499a3ea31ed4559fa7e44d418a8b0be76", 0xa2}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa8", 0xea}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="6a422a90b49aff66e6d57061f85cd63d581d6e27741be92c4a9081cd661ab03e82ca5e1169e5bf91b0dd79cde0d1789dffbea8280cf8c7439d10e62b2b84f99180da2c85fec394e95872", 0x4a}], 0x1}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): tors = 4 limit=0 [ 158.556794][ T37] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 158.566065][ T12] EXT4-fs (loop6): I/O error while writing superblock [ 158.573453][ T9992] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.591266][ T37] EXT4-fs (loop0): I/O error while writing superblock [ 158.599379][ T7469] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.608602][ T9992] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 158.618100][ T9992] EXT4-fs (loop6): I/O error while writing superblock [ 158.625636][T10445] Buffer I/O error on dev loop6, logical block 12, lost sync page write [ 158.626146][ T7469] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 158.670258][ T7469] EXT4-fs (loop0): I/O error while writing superblock [ 158.724397][T10441] Buffer I/O error on dev loop0, logical block 12, lost sync page write [ 158.745584][T10467] netlink: 'syz.2.2264': attribute type 1 has an invalid length. [ 158.832734][ T31] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.944188][ T31] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.977418][ T31] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.047372][ T31] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.194365][ T31] bridge_slave_1: left allmulticast mode [ 159.200261][ T31] bridge_slave_1: left promiscuous mode [ 159.206039][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.221427][ T31] bridge_slave_0: left allmulticast mode [ 159.228033][ T31] bridge_slave_0: left promiscuous mode [ 159.234235][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.290711][T10500] loop1: detected capacity change from 0 to 1024 [ 159.309034][T10500] EXT4-fs: quotafile must be on filesystem root [ 159.345731][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.359749][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.379813][ T31] bond0 (unregistering): Released all slaves [ 159.465541][ T31] tipc: Disabling bearer [ 159.470614][ T31] tipc: Left network mode [ 159.530314][ T31] hsr_slave_0: left promiscuous mode [ 159.543138][ T31] hsr_slave_1: left promiscuous mode [ 159.559312][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.567807][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.590684][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.598877][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.630059][ T29] kauditd_printk_skb: 1858 callbacks suppressed [ 159.630074][ T29] audit: type=1326 audit(1752745030.778:30898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a5e0058e7 code=0x7ffc0000 [ 159.661442][ T29] audit: type=1326 audit(1752745030.778:30899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a5dfaab19 code=0x7ffc0000 [ 159.685056][ T29] audit: type=1326 audit(1752745030.778:30900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f7a5e00e929 code=0x7ffc0000 [ 159.708811][ T29] audit: type=1326 audit(1752745030.798:30901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a5e0058e7 code=0x7ffc0000 [ 159.732521][ T29] audit: type=1326 audit(1752745030.798:30902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a5dfaab19 code=0x7ffc0000 [ 159.756264][ T29] audit: type=1326 audit(1752745030.798:30903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f7a5e00e929 code=0x7ffc0000 [ 159.779910][ T29] audit: type=1326 audit(1752745030.798:30904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a5e0058e7 code=0x7ffc0000 [ 159.803554][ T29] audit: type=1326 audit(1752745030.798:30905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7a5dfaab19 code=0x7ffc0000 [ 159.827155][ T29] audit: type=1326 audit(1752745030.798:30906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f7a5e00e929 code=0x7ffc0000 [ 159.850803][ T29] audit: type=1326 audit(1752745030.798:30907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10499 comm="syz.1.2277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7a5e0058e7 code=0x7ffc0000 [ 159.890268][ T31] veth1_macvtap: left promiscuous mode [ 159.900762][ T31] veth0_macvtap: left promiscuous mode [ 159.915151][ T31] veth1_vlan: left promiscuous mode [ 159.926299][ T31] veth0_vlan: left promiscuous mode [ 160.069377][ T31] team0 (unregistering): Port device team_slave_1 removed [ 160.096857][ T31] team0 (unregistering): Port device team_slave_0 removed [ 160.329166][T10481] chnl_net:caif_netlink_parms(): no params data found [ 160.429338][T10481] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.436570][T10481] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.452443][T10481] bridge_slave_0: entered allmulticast mode [ 160.459135][T10481] bridge_slave_0: entered promiscuous mode [ 160.467289][T10481] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.474546][T10481] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.481828][T10481] bridge_slave_1: entered allmulticast mode [ 160.488422][T10481] bridge_slave_1: entered promiscuous mode [ 160.540716][T10481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.573610][T10481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.594202][ T31] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.639964][T10531] SELinux: Context system_u:object_r:usr_t:s0 is not valid (left unmapped). [ 160.640737][T10491] chnl_net:caif_netlink_parms(): no params data found [ 160.700198][ T31] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.733645][T10481] team0: Port device team_slave_0 added [ 160.755857][T10481] team0: Port device team_slave_1 added [ 160.780357][ T31] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.865916][ T31] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.889752][T10481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.896940][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.923224][T10481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.959598][T10481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.966670][T10481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.992895][T10481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.007931][T10558] netlink: 'syz.2.2290': attribute type 3 has an invalid length. [ 161.022357][T10491] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.029471][T10491] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.051352][T10491] bridge_slave_0: entered allmulticast mode [ 161.069542][T10491] bridge_slave_0: entered promiscuous mode [ 161.089869][T10491] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.097152][T10491] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.105372][T10491] bridge_slave_1: entered allmulticast mode [ 161.112228][T10491] bridge_slave_1: entered promiscuous mode [ 161.149340][T10491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.162282][T10563] FAULT_INJECTION: forcing a failure. [ 161.162282][T10563] name failslab, interval 1, probability 0, space 0, times 0 [ 161.174993][T10563] CPU: 0 UID: 0 PID: 10563 Comm: syz.1.2292 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 161.175028][T10563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.175066][T10563] Call Trace: [ 161.175072][T10563] [ 161.175079][T10563] __dump_stack+0x1d/0x30 [ 161.175099][T10563] dump_stack_lvl+0xe8/0x140 [ 161.175120][T10563] dump_stack+0x15/0x1b [ 161.175161][T10563] should_fail_ex+0x265/0x280 [ 161.175196][T10563] should_failslab+0x8c/0xb0 [ 161.175217][T10563] kmem_cache_alloc_noprof+0x50/0x310 [ 161.175241][T10563] ? security_inode_alloc+0x37/0x100 [ 161.175312][T10563] security_inode_alloc+0x37/0x100 [ 161.175394][T10563] inode_init_always_gfp+0x4b7/0x500 [ 161.175435][T10563] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 161.175470][T10563] alloc_inode+0x58/0x170 [ 161.175500][T10563] new_inode+0x1d/0xe0 [ 161.175654][T10563] shmem_get_inode+0x244/0x750 [ 161.175689][T10563] ? __se_sys_memfd_create+0x1cc/0x590 [ 161.175721][T10563] __shmem_file_setup+0x113/0x210 [ 161.175749][T10563] shmem_file_setup+0x3b/0x50 [ 161.175803][T10563] __se_sys_memfd_create+0x2c3/0x590 [ 161.175903][T10563] __x64_sys_memfd_create+0x31/0x40 [ 161.175945][T10563] x64_sys_call+0x122f/0x2fb0 [ 161.176023][T10563] do_syscall_64+0xd2/0x200 [ 161.176061][T10563] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.176087][T10563] ? clear_bhb_loop+0x40/0x90 [ 161.176114][T10563] ? clear_bhb_loop+0x40/0x90 [ 161.176158][T10563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.176184][T10563] RIP: 0033:0x7f7a5e00e929 [ 161.176202][T10563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.176271][T10563] RSP: 002b:00007f7a5c66ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 161.176294][T10563] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007f7a5e00e929 [ 161.176309][T10563] RDX: 00007f7a5c66eef0 RSI: 0000000000000000 RDI: 00007f7a5e091634 [ 161.176324][T10563] RBP: 0000200000000600 R08: 00007f7a5c66ebb7 R09: 00007f7a5c66ee40 [ 161.176338][T10563] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 161.176353][T10563] R13: 00007f7a5c66eef0 R14: 00007f7a5c66eeb0 R15: 00002000000002c0 [ 161.176372][T10563] [ 161.417084][T10491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.429211][T10481] hsr_slave_0: entered promiscuous mode [ 161.435458][T10481] hsr_slave_1: entered promiscuous mode [ 161.443057][T10481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.450648][T10481] Cannot create hsr debugfs directory [ 161.456979][ T31] bridge_slave_1: left allmulticast mode [ 161.462897][ T31] bridge_slave_1: left promiscuous mode [ 161.468682][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.487399][ T31] bridge_slave_0: left allmulticast mode [ 161.493123][ T31] bridge_slave_0: left promiscuous mode [ 161.498935][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.728139][T10588] FAULT_INJECTION: forcing a failure. [ 161.728139][T10588] name failslab, interval 1, probability 0, space 0, times 0 [ 161.740924][T10588] CPU: 0 UID: 0 PID: 10588 Comm: syz.1.2304 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 161.741019][T10588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 161.741054][T10588] Call Trace: [ 161.741063][T10588] [ 161.741070][T10588] __dump_stack+0x1d/0x30 [ 161.741095][T10588] dump_stack_lvl+0xe8/0x140 [ 161.741120][T10588] dump_stack+0x15/0x1b [ 161.741138][T10588] should_fail_ex+0x265/0x280 [ 161.741228][T10588] should_failslab+0x8c/0xb0 [ 161.741256][T10588] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 161.741291][T10588] ? sidtab_sid2str_get+0xa0/0x130 [ 161.741367][T10588] kmemdup_noprof+0x2b/0x70 [ 161.741443][T10588] sidtab_sid2str_get+0xa0/0x130 [ 161.741515][T10588] security_sid_to_context_core+0x1eb/0x2e0 [ 161.741547][T10588] security_sid_to_context+0x27/0x40 [ 161.741572][T10588] selinux_lsmprop_to_secctx+0x67/0xf0 [ 161.741600][T10588] security_lsmprop_to_secctx+0x43/0x80 [ 161.741628][T10588] audit_log_task_context+0x77/0x190 [ 161.741706][T10588] audit_log_task+0xf4/0x250 [ 161.741737][T10588] audit_seccomp+0x61/0x100 [ 161.741821][T10588] ? __seccomp_filter+0x68c/0x10d0 [ 161.741896][T10588] __seccomp_filter+0x69d/0x10d0 [ 161.741922][T10588] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 161.742017][T10588] ? vfs_write+0x75e/0x8e0 [ 161.742053][T10588] ? __rcu_read_unlock+0x4f/0x70 [ 161.742079][T10588] ? __fget_files+0x184/0x1c0 [ 161.742231][T10588] __secure_computing+0x82/0x150 [ 161.742258][T10588] syscall_trace_enter+0xcf/0x1e0 [ 161.742288][T10588] do_syscall_64+0xac/0x200 [ 161.742310][T10588] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 161.742349][T10588] ? clear_bhb_loop+0x40/0x90 [ 161.742369][T10588] ? clear_bhb_loop+0x40/0x90 [ 161.742395][T10588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.742487][T10588] RIP: 0033:0x7f7a5e00e929 [ 161.742502][T10588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.742520][T10588] RSP: 002b:00007f7a5c66f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 161.742537][T10588] RAX: ffffffffffffffda RBX: 00007f7a5e235fa0 RCX: 00007f7a5e00e929 [ 161.742549][T10588] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 161.742564][T10588] RBP: 00007f7a5c66f090 R08: 0000000000000000 R09: 0000000000000000 [ 161.742578][T10588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.742649][T10588] R13: 0000000000000000 R14: 00007f7a5e235fa0 R15: 00007fff4bfd56a8 [ 161.742674][T10588] [ 162.053214][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.063114][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.073061][ T31] bond0 (unregistering): Released all slaves [ 162.082457][ T31] bond1 (unregistering): Released all slaves [ 162.126052][T10491] team0: Port device team_slave_0 added [ 162.152196][ T31] tipc: Disabling bearer [ 162.157375][ T31] tipc: Left network mode [ 162.163878][T10491] team0: Port device team_slave_1 added [ 162.192805][ T31] hsr_slave_0: left promiscuous mode [ 162.198484][ T31] hsr_slave_1: left promiscuous mode [ 162.218147][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.225938][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.234289][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.241914][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.252033][ T31] veth1_macvtap: left promiscuous mode [ 162.257546][ T31] veth0_macvtap: left promiscuous mode [ 162.281130][T10602] __nla_validate_parse: 5 callbacks suppressed [ 162.281145][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 162.296964][T10602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2308'. [ 162.337654][ T31] team0 (unregistering): Port device team_slave_1 removed [ 162.347733][ T31] team0 (unregistering): Port device C removed [ 162.397145][T10608] SELinux: syz.4.2310 (10608) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 162.461089][T10612] loop4: detected capacity change from 0 to 512 [ 162.470945][T10491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.478028][T10491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.504175][T10491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.535663][T10491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.542718][T10491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.568828][T10491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.581582][T10612] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.595371][T10612] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.657682][T10491] hsr_slave_0: entered promiscuous mode [ 162.666467][T10491] hsr_slave_1: entered promiscuous mode [ 162.742678][T10481] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 162.754851][T10481] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 162.765431][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.769639][T10481] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 162.794955][T10626] loop1: detected capacity change from 0 to 1024 [ 162.823090][T10481] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 162.835270][T10626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.857743][T10626] FAULT_INJECTION: forcing a failure. [ 162.857743][T10626] name failslab, interval 1, probability 0, space 0, times 0 [ 162.871167][T10626] CPU: 1 UID: 0 PID: 10626 Comm: syz.1.2315 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 162.871196][T10626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.871245][T10626] Call Trace: [ 162.871251][T10626] [ 162.871259][T10626] __dump_stack+0x1d/0x30 [ 162.871290][T10626] dump_stack_lvl+0xe8/0x140 [ 162.871310][T10626] dump_stack+0x15/0x1b [ 162.871371][T10626] should_fail_ex+0x265/0x280 [ 162.871401][T10626] ? __se_sys_mount+0xef/0x2e0 [ 162.871453][T10626] should_failslab+0x8c/0xb0 [ 162.871475][T10626] __kmalloc_cache_noprof+0x4c/0x320 [ 162.871575][T10626] ? memdup_user+0x99/0xd0 [ 162.871646][T10626] __se_sys_mount+0xef/0x2e0 [ 162.871677][T10626] ? fput+0x8f/0xc0 [ 162.871700][T10626] ? ksys_write+0x192/0x1a0 [ 162.871778][T10626] __x64_sys_mount+0x67/0x80 [ 162.871810][T10626] x64_sys_call+0xd36/0x2fb0 [ 162.871861][T10626] do_syscall_64+0xd2/0x200 [ 162.871878][T10626] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.871904][T10626] ? clear_bhb_loop+0x40/0x90 [ 162.871974][T10626] ? clear_bhb_loop+0x40/0x90 [ 162.871996][T10626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.872017][T10626] RIP: 0033:0x7f7a5e00e929 [ 162.872031][T10626] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.872057][T10626] RSP: 002b:00007f7a5c66f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.872080][T10626] RAX: ffffffffffffffda RBX: 00007f7a5e235fa0 RCX: 00007f7a5e00e929 [ 162.872093][T10626] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 162.872105][T10626] RBP: 00007f7a5c66f090 R08: 0000200000000400 R09: 0000000000000000 [ 162.872117][T10626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.872129][T10626] R13: 0000000000000000 R14: 00007f7a5e235fa0 R15: 00007fff4bfd56a8 [ 162.872149][T10626] [ 163.080640][T10632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2317'. [ 163.098322][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.187051][T10632] 9p: Unknown Cache mode or invalid value head [ 163.218842][T10491] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 163.252508][T10491] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 163.263311][T10491] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 163.272370][T10491] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 163.287455][T10481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.316760][T10481] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.350893][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.358052][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.377999][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.385295][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.402917][T10656] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2322'. [ 163.500990][T10491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.518581][T10661] SELinux: syz.4.2324 (10661) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 163.533106][T10491] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.560442][T10665] loop1: detected capacity change from 0 to 1024 [ 163.574640][ T3440] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.581778][ T3440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.603270][T10665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.619751][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.626939][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.673791][T10677] loop4: detected capacity change from 0 to 1024 [ 163.678176][T10481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.816769][T10683] raw_sendmsg: syz.4.2330 forgot to set AF_INET. Fix it! [ 163.819373][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.898858][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2332'. [ 164.006850][T10491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.097888][T10694] 9pnet_fd: Insufficient options for proto=fd [ 164.161496][T10481] veth0_vlan: entered promiscuous mode [ 164.178006][T10481] veth1_vlan: entered promiscuous mode [ 164.256113][T10481] veth0_macvtap: entered promiscuous mode [ 164.288510][T10481] veth1_macvtap: entered promiscuous mode [ 164.328224][T10481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.350642][T10481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.398076][T10481] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.407004][T10481] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.416617][T10481] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.425452][T10481] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.619335][T10491] veth0_vlan: entered promiscuous mode [ 164.630478][ T29] kauditd_printk_skb: 1240 callbacks suppressed [ 164.630532][ T29] audit: type=1400 audit(1752745035.781:32145): avc: denied { prog_load } for pid=10747 comm="syz.4.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 164.656890][ T29] audit: type=1400 audit(1752745035.791:32146): avc: denied { bpf } for pid=10747 comm="syz.4.2347" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.678025][ T29] audit: type=1400 audit(1752745035.791:32147): avc: denied { perfmon } for pid=10747 comm="syz.4.2347" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 164.696723][T10491] veth1_vlan: entered promiscuous mode [ 164.718696][ T29] audit: type=1400 audit(1752745035.871:32148): avc: denied { create } for pid=10747 comm="syz.4.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.740196][ T29] audit: type=1400 audit(1752745035.871:32149): avc: denied { write } for pid=10747 comm="syz.4.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.760786][ T29] audit: type=1400 audit(1752745035.871:32150): avc: denied { read } for pid=10747 comm="syz.4.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.782299][ T29] audit: type=1400 audit(1752745035.871:32151): avc: denied { read } for pid=10747 comm="syz.4.2347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 164.803029][ T29] audit: type=1400 audit(1752745035.871:32152): avc: denied { read write } for pid=10481 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.828669][ T29] audit: type=1400 audit(1752745035.871:32153): avc: denied { read write open } for pid=10481 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.838952][T10750] syzkaller0: entered promiscuous mode [ 164.854907][ T29] audit: type=1400 audit(1752745035.871:32154): avc: denied { ioctl } for pid=10481 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 164.859581][T10750] syzkaller0: entered allmulticast mode [ 164.948019][T10491] veth0_macvtap: entered promiscuous mode [ 165.072589][T10491] veth1_macvtap: entered promiscuous mode [ 165.083346][T10491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.092855][T10491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.121022][T10491] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.130018][T10491] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.138989][T10491] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.147903][T10491] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.047736][T10780] loop7: detected capacity change from 0 to 256 [ 166.200320][T10780] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 166.250883][T10798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.261180][T10798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.274422][T10798] netlink: 'syz.1.2364': attribute type 10 has an invalid length. [ 166.287031][T10798] team0: Device dummy0 failed to register rx_handler [ 166.307237][T10798] netlink: 'syz.1.2364': attribute type 10 has an invalid length. [ 166.402958][T10801] 9p: Unknown Cache mode or invalid value head [ 166.426438][T10802] loop8: detected capacity change from 0 to 1024 [ 166.531233][T10805] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 166.626968][T10812] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2370'. [ 166.690929][T10815] loop4: detected capacity change from 0 to 256 [ 166.700192][T10815] msdos: Bad value for 'gid' [ 166.704832][T10815] msdos: Bad value for 'gid' [ 166.726426][T10817] FAULT_INJECTION: forcing a failure. [ 166.726426][T10817] name failslab, interval 1, probability 0, space 0, times 0 [ 166.739228][T10817] CPU: 1 UID: 0 PID: 10817 Comm: syz.7.2372 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 166.739261][T10817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 166.739276][T10817] Call Trace: [ 166.739282][T10817] [ 166.739290][T10817] __dump_stack+0x1d/0x30 [ 166.739317][T10817] dump_stack_lvl+0xe8/0x140 [ 166.739339][T10817] dump_stack+0x15/0x1b [ 166.739356][T10817] should_fail_ex+0x265/0x280 [ 166.739386][T10817] should_failslab+0x8c/0xb0 [ 166.739413][T10817] kmem_cache_alloc_noprof+0x50/0x310 [ 166.739439][T10817] ? mas_alloc_nodes+0x265/0x520 [ 166.739460][T10817] mas_alloc_nodes+0x265/0x520 [ 166.739485][T10817] mas_preallocate+0x33e/0x520 [ 166.739531][T10817] __split_vma+0x240/0x650 [ 166.739563][T10817] ? mas_find+0x4ea/0x610 [ 166.739601][T10817] vms_gather_munmap_vmas+0x2a5/0x7a0 [ 166.739627][T10817] mmap_region+0x4ce/0x1580 [ 166.739653][T10817] ? perf_tp_event+0x9b3/0x9f0 [ 166.739709][T10817] do_mmap+0x9b3/0xbe0 [ 166.739759][T10817] vm_mmap_pgoff+0x17a/0x2e0 [ 166.739795][T10817] ksys_mmap_pgoff+0xc2/0x310 [ 166.739827][T10817] ? __x64_sys_mmap+0x49/0x70 [ 166.739852][T10817] x64_sys_call+0x1602/0x2fb0 [ 166.739872][T10817] do_syscall_64+0xd2/0x200 [ 166.739887][T10817] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 166.739915][T10817] ? clear_bhb_loop+0x40/0x90 [ 166.739939][T10817] ? clear_bhb_loop+0x40/0x90 [ 166.739960][T10817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.739983][T10817] RIP: 0033:0x7f323854e929 [ 166.740001][T10817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.740023][T10817] RSP: 002b:00007f3236bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 166.740045][T10817] RAX: ffffffffffffffda RBX: 00007f3238775fa0 RCX: 00007f323854e929 [ 166.740060][T10817] RDX: 000000000000000a RSI: 0000000000fbe000 RDI: 0000200000000000 [ 166.740075][T10817] RBP: 00007f3236bb7090 R08: ffffffffffffffff R09: 00000000f2de1000 [ 166.740089][T10817] R10: 0000000000000031 R11: 0000000000000246 R12: 0000000000000001 [ 166.740103][T10817] R13: 0000000000000000 R14: 00007f3238775fa0 R15: 00007ffff8807a98 [ 166.740121][T10817] [ 167.060743][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2377'. [ 167.086856][T10831] loop2: detected capacity change from 0 to 512 [ 167.121871][T10831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.183811][T10842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2379'. [ 167.192904][T10842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2379'. [ 167.201978][T10842] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2379'. [ 167.211541][T10831] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.251936][T10842] netlink: 'syz.4.2379': attribute type 1 has an invalid length. [ 167.275518][T10830] 9p: Unknown Cache mode or invalid value head [ 167.354947][ T3782] kernel write not supported for file /1227/attr/exec (pid: 3782 comm: kworker/0:4) [ 167.379469][T10855] loop4: detected capacity change from 0 to 512 [ 167.388438][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.400219][T10855] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.418178][T10855] EXT4-fs (loop4): 1 truncate cleaned up [ 167.426727][T10855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.492174][T10855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.736454][T10860] __nla_validate_parse: 1 callbacks suppressed [ 167.736520][T10860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2384'. [ 167.752541][T10860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2384'. [ 167.761661][T10860] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2384'. [ 168.148543][T10874] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 168.156513][T10874] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2384'. [ 168.373064][T10866] loop4: detected capacity change from 0 to 2048 [ 168.424944][T10866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.428312][T10893] FAULT_INJECTION: forcing a failure. [ 168.428312][T10893] name failslab, interval 1, probability 0, space 0, times 0 [ 168.449687][T10893] CPU: 0 UID: 0 PID: 10893 Comm: syz.1.2394 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 168.449719][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 168.449731][T10893] Call Trace: [ 168.449737][T10893] [ 168.449745][T10893] __dump_stack+0x1d/0x30 [ 168.449798][T10893] dump_stack_lvl+0xe8/0x140 [ 168.449820][T10893] dump_stack+0x15/0x1b [ 168.449835][T10893] should_fail_ex+0x265/0x280 [ 168.449866][T10893] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 168.449899][T10893] should_failslab+0x8c/0xb0 [ 168.449994][T10893] __kmalloc_cache_noprof+0x4c/0x320 [ 168.450027][T10893] bpf_prog_alloc_no_stats+0xc4/0x390 [ 168.450062][T10893] bpf_prog_alloc+0x3c/0x150 [ 168.450154][T10893] bpf_prog_create_from_user+0x7d/0x260 [ 168.450193][T10893] ? __pfx_seccomp_check_filter+0x10/0x10 [ 168.450223][T10893] do_seccomp+0x5ef/0xa40 [ 168.450250][T10893] __x64_sys_seccomp+0x40/0x50 [ 168.450309][T10893] x64_sys_call+0x2395/0x2fb0 [ 168.450336][T10893] do_syscall_64+0xd2/0x200 [ 168.450430][T10893] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 168.450462][T10893] ? clear_bhb_loop+0x40/0x90 [ 168.450552][T10893] ? clear_bhb_loop+0x40/0x90 [ 168.450579][T10893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.450602][T10893] RIP: 0033:0x7f7a5e00e929 [ 168.450619][T10893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.450641][T10893] RSP: 002b:00007f7a5c66f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 168.450664][T10893] RAX: ffffffffffffffda RBX: 00007f7a5e235fa0 RCX: 00007f7a5e00e929 [ 168.450732][T10893] RDX: 00002000000000c0 RSI: 000000000000000c RDI: 0000000000000001 [ 168.450748][T10893] RBP: 00007f7a5c66f090 R08: 0000000000000000 R09: 0000000000000000 [ 168.450761][T10893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.450800][T10893] R13: 0000000000000000 R14: 00007f7a5e235fa0 R15: 00007fff4bfd56a8 [ 168.450824][T10893] [ 168.661346][T10895] loop2: detected capacity change from 0 to 256 [ 168.708078][T10901] netlink: 'syz.1.2398': attribute type 27 has an invalid length. [ 168.730333][ T3310] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 168.747200][ T3310] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 168.768394][T10901] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.775618][T10901] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.791372][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.843026][T10909] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2398'. [ 168.884242][T10901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.902789][T10901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.935394][T10901] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.944639][T10901] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.953063][T10901] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.961543][T10901] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.005598][T10904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.014339][T10904] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.191265][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2403'. [ 169.208061][T10904] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 169.412059][T10921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10921 comm=syz.8.2403 [ 169.615909][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2405'. [ 169.645403][T10913] @: renamed from vlan0 (while UP) [ 169.653338][ T29] kauditd_printk_skb: 853 callbacks suppressed [ 169.653355][ T29] audit: type=1400 audit(1752745040.813:33008): avc: denied { read } for pid=10926 comm="syz.1.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 169.700717][ T29] audit: type=1400 audit(1752745040.853:33009): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.725813][ T29] audit: type=1400 audit(1752745040.853:33010): avc: denied { open } for pid=3310 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.750872][ T29] audit: type=1400 audit(1752745040.853:33011): avc: denied { ioctl } for pid=3310 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.786015][ T29] audit: type=1400 audit(1752745040.933:33012): avc: denied { create } for pid=10928 comm="syz.4.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.807237][ T29] audit: type=1400 audit(1752745040.933:33013): avc: denied { write } for pid=10928 comm="syz.4.2406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.828712][ T29] audit: type=1400 audit(1752745040.943:33014): avc: denied { read write } for pid=3310 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.853314][ T29] audit: type=1400 audit(1752745040.943:33015): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.877839][ T29] audit: type=1400 audit(1752745040.943:33016): avc: denied { read write open } for pid=3310 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.903163][ T29] audit: type=1400 audit(1752745040.943:33017): avc: denied { ioctl } for pid=3310 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 169.964098][T10933] loop4: detected capacity change from 0 to 512 [ 169.987761][T10934] loop2: detected capacity change from 0 to 1024 [ 169.998432][T10927] 9p: Unknown Cache mode or invalid value head [ 170.010418][T10934] journal_path: Non-blockdev passed as './file0' [ 170.017018][T10934] EXT4-fs: error: could not find journal device path [ 170.057644][T10933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.088008][T10933] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.166885][T10933] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 170.201042][T10933] EXT4-fs (loop4): Remounting filesystem read-only [ 170.354694][T10951] loop1: detected capacity change from 0 to 256 [ 170.386836][T10951] FAT-fs (loop1): unable to read block(1760291558858) for building NFS inode [ 170.450744][T10963] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2417'. [ 170.542149][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.791979][T10979] loop7: detected capacity change from 0 to 512 [ 170.827104][T10981] 9pnet_fd: Insufficient options for proto=fd [ 171.067010][T10979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.099725][T10979] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.175922][T10974] loop8: detected capacity change from 0 to 128 [ 171.384418][T10481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.562207][T11027] futex_wake_op: syz.4.2436 tries to shift op by 32; fix this program [ 171.763649][T11043] loop1: detected capacity change from 0 to 1024 [ 171.784881][ T1035] hid-generic 0000:0000:0000.0028: unknown main item tag 0x0 [ 171.795601][ T1035] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz0] on syz0 [ 171.810971][T11043] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.834478][T11048] xt_bpf: check failed: parse error [ 171.839945][T11054] tap0: tun_chr_ioctl cmd 1074025678 [ 171.840045][T11054] tap0: group set to 0 [ 171.850790][T11054] tap0: tun_chr_ioctl cmd 1074025677 [ 171.857013][T11054] tap0: linktype set to 821 [ 171.911902][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.010539][T11061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2452'. [ 172.020332][T11061] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2452'. [ 172.239249][T11061] netlink: 'syz.1.2452': attribute type 1 has an invalid length. [ 172.767220][T11078] netlink: '+}[@': attribute type 1 has an invalid length. [ 172.783681][T11085] __nla_validate_parse: 2 callbacks suppressed [ 172.783696][T11085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2462'. [ 172.888894][T11090] loop8: detected capacity change from 0 to 128 [ 172.900540][T11095] FAULT_INJECTION: forcing a failure. [ 172.900540][T11095] name failslab, interval 1, probability 0, space 0, times 0 [ 172.913477][T11095] CPU: 1 UID: 0 PID: 11095 Comm: syz.1.2467 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 172.913568][T11095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.913584][T11095] Call Trace: [ 172.913591][T11095] [ 172.913600][T11095] __dump_stack+0x1d/0x30 [ 172.913636][T11095] dump_stack_lvl+0xe8/0x140 [ 172.913655][T11095] dump_stack+0x15/0x1b [ 172.913714][T11095] should_fail_ex+0x265/0x280 [ 172.913751][T11095] should_failslab+0x8c/0xb0 [ 172.913777][T11095] kmem_cache_alloc_noprof+0x50/0x310 [ 172.913896][T11095] ? getname_flags+0x80/0x3b0 [ 172.913917][T11095] getname_flags+0x80/0x3b0 [ 172.913941][T11095] do_sys_openat2+0x60/0x110 [ 172.913975][T11095] __x64_sys_openat+0xf2/0x120 [ 172.914009][T11095] x64_sys_call+0x1af/0x2fb0 [ 172.914096][T11095] do_syscall_64+0xd2/0x200 [ 172.914118][T11095] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.914177][T11095] ? clear_bhb_loop+0x40/0x90 [ 172.914200][T11095] ? clear_bhb_loop+0x40/0x90 [ 172.914246][T11095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.914270][T11095] RIP: 0033:0x7f7a5e00e929 [ 172.914288][T11095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.914310][T11095] RSP: 002b:00007f7a5c66f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.914332][T11095] RAX: ffffffffffffffda RBX: 00007f7a5e235fa0 RCX: 00007f7a5e00e929 [ 172.914349][T11095] RDX: 0000000000004001 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 172.914365][T11095] RBP: 00007f7a5c66f090 R08: 0000000000000000 R09: 0000000000000000 [ 172.914427][T11095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.914438][T11095] R13: 0000000000000000 R14: 00007f7a5e235fa0 R15: 00007fff4bfd56a8 [ 172.914456][T11095] [ 172.919344][T11090] loop8: detected capacity change from 0 to 128 [ 172.952717][ T3391] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 172.988742][T11090] vfat: Unknown parameter 'nodots' [ 173.034551][ T3391] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz0] on syz0 [ 173.128281][T11102] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2469'. [ 173.138491][T11102] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2469'. [ 173.147687][T11102] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2469'. [ 173.179156][T11105] netlink: 'syz.4.2471': attribute type 10 has an invalid length. [ 173.188250][T11105] geneve1: entered promiscuous mode [ 173.196916][T11105] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.205739][T11105] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.214570][T11105] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.223866][T11105] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.243321][T11102] netlink: 'syz.7.2469': attribute type 1 has an invalid length. [ 173.251237][T11102] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2469'. [ 173.262666][T11105] geneve1: entered allmulticast mode [ 173.274437][T11105] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 173.392870][T11119] random: crng reseeded on system resumption [ 173.466748][T11127] loop4: detected capacity change from 0 to 512 [ 173.524571][T11136] FAULT_INJECTION: forcing a failure. [ 173.524571][T11136] name failslab, interval 1, probability 0, space 0, times 0 [ 173.537939][T11136] CPU: 1 UID: 0 PID: 11136 Comm: syz.8.2484 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 173.537971][T11136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.537988][T11136] Call Trace: [ 173.537995][T11136] [ 173.538003][T11136] __dump_stack+0x1d/0x30 [ 173.538029][T11136] dump_stack_lvl+0xe8/0x140 [ 173.538121][T11136] dump_stack+0x15/0x1b [ 173.538140][T11136] should_fail_ex+0x265/0x280 [ 173.538269][T11136] ? request_threaded_irq+0x1ad/0x2c0 [ 173.538297][T11136] should_failslab+0x8c/0xb0 [ 173.538321][T11136] __kmalloc_cache_noprof+0x4c/0x320 [ 173.538355][T11136] ? __pfx_serial8250_interrupt+0x10/0x10 [ 173.538385][T11136] request_threaded_irq+0x1ad/0x2c0 [ 173.538448][T11136] ? __pfx_serial8250_interrupt+0x10/0x10 [ 173.538529][T11136] univ8250_setup_irq+0x28c/0x2e0 [ 173.538557][T11136] serial8250_do_startup+0xc6c/0x1eb0 [ 173.538609][T11136] serial8250_startup+0x41/0x50 [ 173.538634][T11136] uart_startup+0x465/0x8e0 [ 173.538659][T11136] uart_ioctl+0xc43/0xe40 [ 173.538692][T11136] ? do_vfs_ioctl+0x9df/0x11d0 [ 173.538743][T11136] ? tty_jobctrl_ioctl+0x29e/0x810 [ 173.538772][T11136] tty_ioctl+0x7db/0xb80 [ 173.538806][T11136] ? __pfx_tty_ioctl+0x10/0x10 [ 173.538843][T11136] __se_sys_ioctl+0xcb/0x140 [ 173.538870][T11136] __x64_sys_ioctl+0x43/0x50 [ 173.538900][T11136] x64_sys_call+0x19a8/0x2fb0 [ 173.538920][T11136] do_syscall_64+0xd2/0x200 [ 173.538942][T11136] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 173.538972][T11136] ? clear_bhb_loop+0x40/0x90 [ 173.539034][T11136] ? clear_bhb_loop+0x40/0x90 [ 173.539062][T11136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.539087][T11136] RIP: 0033:0x7fbb85c8e929 [ 173.539106][T11136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.539174][T11136] RSP: 002b:00007fbb842f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.539197][T11136] RAX: ffffffffffffffda RBX: 00007fbb85eb5fa0 RCX: 00007fbb85c8e929 [ 173.539209][T11136] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 173.539220][T11136] RBP: 00007fbb842f7090 R08: 0000000000000000 R09: 0000000000000000 [ 173.539313][T11136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.539327][T11136] R13: 0000000000000000 R14: 00007fbb85eb5fa0 R15: 00007ffe2efa7588 [ 173.539415][T11136] [ 173.582551][T11139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2485'. [ 173.716261][T11149] netlink: 'syz.2.2485': attribute type 1 has an invalid length. [ 173.728147][T11139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2485'. [ 173.728171][T11139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2485'. [ 173.817239][T11149] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2485'. [ 173.912154][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2495'. [ 174.007637][T11162] 9p: Unknown Cache mode or invalid value head [ 174.056411][T11170] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 174.068206][ T10] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 174.087297][ T10] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 174.132565][T11177] netlink: 'syz.4.2501': attribute type 3 has an invalid length. [ 174.140510][T11177] netlink: 'syz.4.2501': attribute type 4 has an invalid length. [ 174.186999][T11179] bond0: entered promiscuous mode [ 174.192200][T11179] bond_slave_0: entered promiscuous mode [ 174.198112][T11179] bond_slave_1: entered promiscuous mode [ 174.216482][T11179] batadv0: entered promiscuous mode [ 174.249862][T11179] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 174.259900][T11179] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 174.270550][T11179] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 174.294746][T11187] FAULT_INJECTION: forcing a failure. [ 174.294746][T11187] name failslab, interval 1, probability 0, space 0, times 0 [ 174.307534][T11187] CPU: 1 UID: 0 PID: 11187 Comm: syz.7.2504 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 174.307566][T11187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.307637][T11187] Call Trace: [ 174.307642][T11187] [ 174.307706][T11187] __dump_stack+0x1d/0x30 [ 174.307734][T11187] dump_stack_lvl+0xe8/0x140 [ 174.307752][T11187] dump_stack+0x15/0x1b [ 174.307767][T11187] should_fail_ex+0x265/0x280 [ 174.307822][T11187] ? flow_change+0x1bf/0xc80 [ 174.307862][T11187] should_failslab+0x8c/0xb0 [ 174.307889][T11187] __kmalloc_cache_noprof+0x4c/0x320 [ 174.307972][T11187] flow_change+0x1bf/0xc80 [ 174.308004][T11187] ? flow_init+0x31/0x80 [ 174.308047][T11187] ? __pfx_flow_change+0x10/0x10 [ 174.308132][T11187] tc_new_tfilter+0xde1/0x10a0 [ 174.308164][T11187] ? __pfx_tc_new_tfilter+0x10/0x10 [ 174.308183][T11187] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 174.308217][T11187] netlink_rcv_skb+0x120/0x220 [ 174.308314][T11187] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 174.308344][T11187] rtnetlink_rcv+0x1c/0x30 [ 174.308372][T11187] netlink_unicast+0x5a5/0x680 [ 174.308461][T11187] netlink_sendmsg+0x58b/0x6b0 [ 174.308485][T11187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.308502][T11187] __sock_sendmsg+0x145/0x180 [ 174.308532][T11187] ____sys_sendmsg+0x31e/0x4e0 [ 174.308613][T11187] ___sys_sendmsg+0x17b/0x1d0 [ 174.308673][T11187] __x64_sys_sendmsg+0xd4/0x160 [ 174.308760][T11187] x64_sys_call+0x2999/0x2fb0 [ 174.308787][T11187] do_syscall_64+0xd2/0x200 [ 174.308809][T11187] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 174.308841][T11187] ? clear_bhb_loop+0x40/0x90 [ 174.308894][T11187] ? clear_bhb_loop+0x40/0x90 [ 174.308920][T11187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.308946][T11187] RIP: 0033:0x7f323854e929 [ 174.309008][T11187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.309030][T11187] RSP: 002b:00007f3236bb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.309059][T11187] RAX: ffffffffffffffda RBX: 00007f3238775fa0 RCX: 00007f323854e929 [ 174.309074][T11187] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000004 [ 174.309090][T11187] RBP: 00007f3236bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 174.309104][T11187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.309119][T11187] R13: 0000000000000000 R14: 00007f3238775fa0 R15: 00007ffff8807a98 [ 174.309139][T11187] [ 174.636121][T11188] 9p: Unknown Cache mode or invalid value head [ 174.655150][ T29] kauditd_printk_skb: 1523 callbacks suppressed [ 174.655169][ T29] audit: type=1400 audit(1752745045.816:34541): avc: denied { name_bind } for pid=11199 comm="syz.4.2511" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 174.683566][ T29] audit: type=1400 audit(1752745045.816:34542): avc: denied { node_bind } for pid=11199 comm="syz.4.2511" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 174.704502][ T29] audit: type=1400 audit(1752745045.816:34543): avc: denied { create } for pid=11197 comm="syz.8.2509" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 174.726127][ T29] audit: type=1400 audit(1752745045.816:34544): avc: denied { map_create } for pid=11199 comm="syz.4.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.745639][ T29] audit: type=1400 audit(1752745045.816:34545): avc: denied { map_read map_write } for pid=11199 comm="syz.4.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.768902][ T29] audit: type=1400 audit(1752745045.826:34546): avc: denied { write } for pid=11197 comm="syz.8.2509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 174.789724][ T29] audit: type=1400 audit(1752745045.856:34547): avc: denied { prog_load } for pid=11199 comm="syz.4.2511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 174.809762][ T29] audit: type=1400 audit(1752745045.856:34548): avc: denied { bpf } for pid=11199 comm="syz.4.2511" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.830548][ T29] audit: type=1400 audit(1752745045.856:34549): avc: denied { perfmon } for pid=11199 comm="syz.4.2511" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.851640][ T29] audit: type=1400 audit(1752745045.866:34550): avc: denied { bpf } for pid=11199 comm="syz.4.2511" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 174.895534][T11196] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 174.898437][T11207] FAULT_INJECTION: forcing a failure. [ 174.898437][T11207] name failslab, interval 1, probability 0, space 0, times 0 [ 174.902093][T11196] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 174.915557][T11207] CPU: 1 UID: 0 PID: 11207 Comm: syz.7.2512 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 174.915600][T11207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 174.915617][T11207] Call Trace: [ 174.915625][T11207] [ 174.915634][T11207] __dump_stack+0x1d/0x30 [ 174.915662][T11207] dump_stack_lvl+0xe8/0x140 [ 174.915689][T11207] dump_stack+0x15/0x1b [ 174.915713][T11207] should_fail_ex+0x265/0x280 [ 174.915752][T11207] should_failslab+0x8c/0xb0 [ 174.915783][T11207] kmem_cache_alloc_noprof+0x50/0x310 [ 174.915812][T11207] ? vm_area_alloc+0x2c/0xb0 [ 174.915839][T11207] vm_area_alloc+0x2c/0xb0 [ 174.915886][T11207] mmap_region+0xa43/0x1580 [ 174.915951][T11207] do_mmap+0x9b3/0xbe0 [ 174.915997][T11207] vm_mmap_pgoff+0x17a/0x2e0 [ 174.916038][T11207] ksys_mmap_pgoff+0x2d0/0x310 [ 174.916082][T11207] x64_sys_call+0x1602/0x2fb0 [ 174.916110][T11207] do_syscall_64+0xd2/0x200 [ 174.916134][T11207] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 174.916171][T11207] ? clear_bhb_loop+0x40/0x90 [ 174.916208][T11207] ? clear_bhb_loop+0x40/0x90 [ 174.916239][T11207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.916268][T11207] RIP: 0033:0x7f323854e929 [ 174.916289][T11207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.916314][T11207] RSP: 002b:00007f3236bb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 174.916340][T11207] RAX: ffffffffffffffda RBX: 00007f3238775fa0 RCX: 00007f323854e929 [ 174.916358][T11207] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 174.916372][T11207] RBP: 00007f3236bb7090 R08: ffffffffffffffff R09: 0000000000000000 [ 174.916383][T11207] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000002 [ 174.916394][T11207] R13: 0000000000000000 R14: 00007f3238775fa0 R15: 00007ffff8807a98 [ 174.916415][T11207] [ 175.112290][T11196] vhci_hcd vhci_hcd.0: Device attached [ 175.256926][T11219] batadv_slave_0: entered promiscuous mode [ 175.279098][T11204] vhci_hcd: connection closed [ 175.279591][ T31] vhci_hcd: stop threads [ 175.288651][ T31] vhci_hcd: release socket [ 175.293087][ T31] vhci_hcd: disconnect device [ 175.297974][ T10] vhci_hcd: vhci_device speed not set [ 175.349184][T11210] batadv_slave_0: left promiscuous mode [ 175.483243][T11235] loop4: detected capacity change from 0 to 512 [ 175.511925][T11235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.526619][T11235] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.665942][T11246] loop7: detected capacity change from 0 to 512 [ 175.729395][T11246] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.802023][T11246] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.830888][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.889930][T11237] loop8: detected capacity change from 0 to 256 [ 176.165135][T10481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.197046][T11256] loop2: detected capacity change from 0 to 2048 [ 176.214137][T11256] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 176.241578][T11243] Process accounting paused [ 176.331614][T11256] xt_hashlimit: max too large, truncated to 1048576 [ 176.573163][T11280] loop7: detected capacity change from 0 to 2048 [ 176.632890][T11280] Alternate GPT is invalid, using primary GPT. [ 176.639305][T11280] loop7: p1 p2 p3 [ 176.752499][T11280] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 176.786954][T11285] 9p: Unknown Cache mode or invalid value head [ 176.811376][T11280] loop7: detected capacity change from 0 to 1037 [ 177.388158][T11318] loop1: detected capacity change from 0 to 128 [ 177.512319][T11264] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 177.578679][T11318] bio_check_eod: 4 callbacks suppressed [ 177.578697][T11318] syz.1.2545: attempt to access beyond end of device [ 177.578697][T11318] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 177.631232][T11322] FAULT_INJECTION: forcing a failure. [ 177.631232][T11322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 177.644525][T11322] CPU: 0 UID: 0 PID: 11322 Comm: syz.2.2547 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 177.644609][T11322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.644704][T11322] Call Trace: [ 177.644712][T11322] [ 177.644722][T11322] __dump_stack+0x1d/0x30 [ 177.644748][T11322] dump_stack_lvl+0xe8/0x140 [ 177.644776][T11322] dump_stack+0x15/0x1b [ 177.644792][T11322] should_fail_ex+0x265/0x280 [ 177.644851][T11322] should_fail+0xb/0x20 [ 177.644883][T11322] should_fail_usercopy+0x1a/0x20 [ 177.644917][T11322] _copy_from_user+0x1c/0xb0 [ 177.644941][T11322] ____sys_sendmsg+0x1c5/0x4e0 [ 177.645063][T11322] ___sys_sendmsg+0x17b/0x1d0 [ 177.645167][T11322] __x64_sys_sendmsg+0xd4/0x160 [ 177.645209][T11322] x64_sys_call+0x2999/0x2fb0 [ 177.645234][T11322] do_syscall_64+0xd2/0x200 [ 177.645251][T11322] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 177.645336][T11322] ? clear_bhb_loop+0x40/0x90 [ 177.645362][T11322] ? clear_bhb_loop+0x40/0x90 [ 177.645426][T11322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.645452][T11322] RIP: 0033:0x7f6852fce929 [ 177.645470][T11322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.645492][T11322] RSP: 002b:00007f6851637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.645516][T11322] RAX: ffffffffffffffda RBX: 00007f68531f5fa0 RCX: 00007f6852fce929 [ 177.645581][T11322] RDX: 0000000020000000 RSI: 0000200000000600 RDI: 0000000000000003 [ 177.645593][T11322] RBP: 00007f6851637090 R08: 0000000000000000 R09: 0000000000000000 [ 177.645605][T11322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.645616][T11322] R13: 0000000000000000 R14: 00007f68531f5fa0 R15: 00007ffe5fea5e28 [ 177.645635][T11322] [ 177.676895][T11318] syz.1.2545: attempt to access beyond end of device [ 177.676895][T11318] loop1: rw=2049, sector=169, nr_sectors = 24 limit=128 [ 177.793373][T11325] syz.1.2545: attempt to access beyond end of device [ 177.793373][T11325] loop1: rw=2049, sector=297, nr_sectors = 80 limit=128 [ 177.797455][T11318] syz.1.2545: attempt to access beyond end of device [ 177.797455][T11318] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 177.881179][T11318] syz.1.2545: attempt to access beyond end of device [ 177.881179][T11318] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 177.895344][T11318] syz.1.2545: attempt to access beyond end of device [ 177.895344][T11318] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 177.909262][T11318] syz.1.2545: attempt to access beyond end of device [ 177.909262][T11318] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 177.953365][T11318] syz.1.2545: attempt to access beyond end of device [ 177.953365][T11318] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 177.999335][T11335] FAULT_INJECTION: forcing a failure. [ 177.999335][T11335] name failslab, interval 1, probability 0, space 0, times 0 [ 178.012120][T11335] CPU: 0 UID: 0 PID: 11335 Comm: syz.4.2551 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 178.012203][T11335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.012219][T11335] Call Trace: [ 178.012227][T11335] [ 178.012236][T11335] __dump_stack+0x1d/0x30 [ 178.012326][T11335] dump_stack_lvl+0xe8/0x140 [ 178.012345][T11335] dump_stack+0x15/0x1b [ 178.012360][T11335] should_fail_ex+0x265/0x280 [ 178.012398][T11335] should_failslab+0x8c/0xb0 [ 178.012424][T11335] kmem_cache_alloc_node_noprof+0x57/0x320 [ 178.012513][T11335] ? __alloc_skb+0x101/0x320 [ 178.012545][T11335] ? __rtnl_unlock+0x95/0xb0 [ 178.012587][T11335] __alloc_skb+0x101/0x320 [ 178.012698][T11335] netlink_ack+0xfd/0x500 [ 178.012744][T11335] netlink_rcv_skb+0x192/0x220 [ 178.012796][T11335] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 178.012825][T11335] rtnetlink_rcv+0x1c/0x30 [ 178.012842][T11335] netlink_unicast+0x5a5/0x680 [ 178.012880][T11335] netlink_sendmsg+0x58b/0x6b0 [ 178.012901][T11335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 178.013002][T11335] __sock_sendmsg+0x145/0x180 [ 178.013031][T11335] ____sys_sendmsg+0x31e/0x4e0 [ 178.013141][T11335] ___sys_sendmsg+0x17b/0x1d0 [ 178.013201][T11335] __x64_sys_sendmsg+0xd4/0x160 [ 178.013246][T11335] x64_sys_call+0x2999/0x2fb0 [ 178.013303][T11335] do_syscall_64+0xd2/0x200 [ 178.013329][T11335] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.013362][T11335] ? clear_bhb_loop+0x40/0x90 [ 178.013385][T11335] ? clear_bhb_loop+0x40/0x90 [ 178.013455][T11335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.013529][T11335] RIP: 0033:0x7f949871e929 [ 178.013553][T11335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.013576][T11335] RSP: 002b:00007f9496d87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.013599][T11335] RAX: ffffffffffffffda RBX: 00007f9498945fa0 RCX: 00007f949871e929 [ 178.013614][T11335] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 178.013627][T11335] RBP: 00007f9496d87090 R08: 0000000000000000 R09: 0000000000000000 [ 178.013641][T11335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.013724][T11335] R13: 0000000000000000 R14: 00007f9498945fa0 R15: 00007ffc7fe901a8 [ 178.013753][T11335] [ 178.026831][T11325] syz.1.2545: attempt to access beyond end of device [ 178.026831][T11325] loop1: rw=2049, sector=385, nr_sectors = 8 limit=128 [ 178.048071][T11318] syz.1.2545: attempt to access beyond end of device [ 178.048071][T11318] loop1: rw=2049, sector=281, nr_sectors = 9 limit=128 [ 178.360339][ T31] Buffer I/O error on dev loop1, logical block 297, lost async page write [ 178.443610][T11350] loop8: detected capacity change from 0 to 512 [ 178.456490][T11350] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.469479][T11350] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 178.735056][T11361] loop1: detected capacity change from 0 to 256 [ 178.907322][T11370] pim6reg1: entered promiscuous mode [ 178.912682][T11370] pim6reg1: entered allmulticast mode [ 178.918353][T11370] FAULT_INJECTION: forcing a failure. [ 178.918353][T11370] name failslab, interval 1, probability 0, space 0, times 0 [ 178.931673][T11370] CPU: 1 UID: 0 PID: 11370 Comm: syz.2.2564 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 178.931717][T11370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.931795][T11370] Call Trace: [ 178.931804][T11370] [ 178.931814][T11370] __dump_stack+0x1d/0x30 [ 178.931841][T11370] dump_stack_lvl+0xe8/0x140 [ 178.931865][T11370] dump_stack+0x15/0x1b [ 178.931880][T11370] should_fail_ex+0x265/0x280 [ 178.931948][T11370] ? netdevice_event+0x2ae/0x610 [ 178.931986][T11370] should_failslab+0x8c/0xb0 [ 178.932013][T11370] __kmalloc_cache_noprof+0x4c/0x320 [ 178.932069][T11370] ? __pfx_netdevice_event+0x10/0x10 [ 178.932099][T11370] netdevice_event+0x2ae/0x610 [ 178.932136][T11370] ? __pfx_add_netdev_ips+0x10/0x10 [ 178.932177][T11370] ? __pfx_is_eth_port_of_netdev_filter+0x10/0x10 [ 178.932208][T11370] ? __pfx_add_default_gids+0x10/0x10 [ 178.932297][T11370] ? __pfx_is_ndev_for_default_gid_filter+0x10/0x10 [ 178.932374][T11370] ? __pfx_del_netdev_default_ips_join+0x10/0x10 [ 178.932495][T11370] ? __pfx_is_eth_port_inactive_slave_filter+0x10/0x10 [ 178.932527][T11370] ? nh_netdev_event+0x91/0x3b0 [ 178.932548][T11370] ? __pfx_netdevice_event+0x10/0x10 [ 178.932664][T11370] raw_notifier_call_chain+0x6c/0x1b0 [ 178.932682][T11370] ? call_netdevice_notifiers_info+0x9c/0x100 [ 178.932717][T11370] call_netdevice_notifiers_info+0xae/0x100 [ 178.932750][T11370] __dev_notify_flags+0xff/0x1a0 [ 178.932871][T11370] netif_change_flags+0xac/0xd0 [ 178.932900][T11370] dev_change_flags+0xce/0x180 [ 178.932921][T11370] ? netdev_name_node_lookup+0xa4/0xd0 [ 178.932965][T11370] dev_ifsioc+0x44b/0xaa0 [ 178.933027][T11370] ? __cond_resched+0x4e/0x90 [ 178.933051][T11370] dev_ioctl+0x70a/0x960 [ 178.933139][T11370] sock_do_ioctl+0x197/0x220 [ 178.933162][T11370] sock_ioctl+0x41b/0x610 [ 178.933187][T11370] ? __pfx_sock_ioctl+0x10/0x10 [ 178.933206][T11370] __se_sys_ioctl+0xcb/0x140 [ 178.933290][T11370] __x64_sys_ioctl+0x43/0x50 [ 178.933353][T11370] x64_sys_call+0x19a8/0x2fb0 [ 178.933381][T11370] do_syscall_64+0xd2/0x200 [ 178.933403][T11370] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.933466][T11370] ? clear_bhb_loop+0x40/0x90 [ 178.933537][T11370] ? clear_bhb_loop+0x40/0x90 [ 178.933561][T11370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.933582][T11370] RIP: 0033:0x7f6852fce929 [ 178.933597][T11370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.933686][T11370] RSP: 002b:00007f6851637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 178.933715][T11370] RAX: ffffffffffffffda RBX: 00007f68531f5fa0 RCX: 00007f6852fce929 [ 178.933730][T11370] RDX: 0000200000000140 RSI: 0000000000008914 RDI: 0000000000000008 [ 178.933746][T11370] RBP: 00007f6851637090 R08: 0000000000000000 R09: 0000000000000000 [ 178.933762][T11370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 178.933777][T11370] R13: 0000000000000000 R14: 00007f68531f5fa0 R15: 00007ffe5fea5e28 [ 178.933803][T11370] [ 179.246432][T10491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.507082][T11390] __nla_validate_parse: 9 callbacks suppressed [ 179.507100][T11390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2573'. [ 179.607818][T11390] 9p: Unknown Cache mode or invalid value head [ 179.623220][ T3782] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 179.636459][ T3782] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 179.666926][T11400] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 179.679799][ T29] kauditd_printk_skb: 1023 callbacks suppressed [ 179.679816][ T29] audit: type=1400 audit(1752745050.846:35572): avc: denied { prog_load } for pid=11398 comm="syz.4.2577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 179.705508][ T29] audit: type=1400 audit(1752745050.846:35573): avc: denied { perfmon } for pid=11398 comm="syz.4.2577" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.738845][ T29] audit: type=1400 audit(1752745050.846:35574): avc: denied { execmem } for pid=11393 comm="syz.7.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 179.758438][ T29] audit: type=1400 audit(1752745050.856:35575): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.782938][ T29] audit: type=1400 audit(1752745050.856:35576): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.807202][ T29] audit: type=1400 audit(1752745050.856:35577): avc: denied { ioctl } for pid=3302 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 179.833024][ T29] audit: type=1400 audit(1752745050.876:35578): avc: denied { perfmon } for pid=11398 comm="syz.4.2577" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.854149][ T29] audit: type=1400 audit(1752745050.876:35579): avc: denied { bpf } for pid=11398 comm="syz.4.2577" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 179.858153][T11399] futex_wake_op: syz.7.2576 tries to shift op by 32; fix this program [ 179.874942][ T29] audit: type=1400 audit(1752745050.896:35580): avc: denied { execmem } for pid=11401 comm="syz.1.2578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 179.932107][ T29] audit: type=1400 audit(1752745051.026:35581): avc: denied { create } for pid=11393 comm="syz.7.2576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 179.935930][T11403] loop4: detected capacity change from 0 to 2048 [ 180.138609][T11412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.148164][T11412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.164424][T11412] netlink: 'syz.8.2580': attribute type 10 has an invalid length. [ 180.181244][T11412] team0: Port device dummy0 added [ 180.274433][T11415] FAULT_INJECTION: forcing a failure. [ 180.274433][T11415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.287651][T11415] CPU: 1 UID: 0 PID: 11415 Comm: syz.2.2582 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 180.287696][T11415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.287710][T11415] Call Trace: [ 180.287718][T11415] [ 180.287728][T11415] __dump_stack+0x1d/0x30 [ 180.287761][T11415] dump_stack_lvl+0xe8/0x140 [ 180.287782][T11415] dump_stack+0x15/0x1b [ 180.287845][T11415] should_fail_ex+0x265/0x280 [ 180.287875][T11415] should_fail+0xb/0x20 [ 180.287935][T11415] should_fail_usercopy+0x1a/0x20 [ 180.287967][T11415] _copy_to_user+0x20/0xa0 [ 180.287986][T11415] store_msg+0x49/0x120 [ 180.288034][T11415] do_msg_fill+0x85/0xb0 [ 180.288058][T11415] ? __pfx_do_msg_fill+0x10/0x10 [ 180.288086][T11415] do_msgrcv+0x98a/0xa00 [ 180.288107][T11415] ? __pfx_do_msg_fill+0x10/0x10 [ 180.288216][T11415] __x64_sys_msgrcv+0x6b/0x80 [ 180.288244][T11415] x64_sys_call+0xcc0/0x2fb0 [ 180.288271][T11415] do_syscall_64+0xd2/0x200 [ 180.288290][T11415] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.288337][T11415] ? clear_bhb_loop+0x40/0x90 [ 180.288363][T11415] ? clear_bhb_loop+0x40/0x90 [ 180.288384][T11415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.288441][T11415] RIP: 0033:0x7f6852fce929 [ 180.288495][T11415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.288513][T11415] RSP: 002b:00007f6851637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 180.288531][T11415] RAX: ffffffffffffffda RBX: 00007f68531f5fa0 RCX: 00007f6852fce929 [ 180.288545][T11415] RDX: 0000000000002000 RSI: 0000200000001080 RDI: 0000000000000000 [ 180.288557][T11415] RBP: 00007f6851637090 R08: 0000000000003000 R09: 0000000000000000 [ 180.288601][T11415] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 180.288616][T11415] R13: 0000000000000000 R14: 00007f68531f5fa0 R15: 00007ffe5fea5e28 [ 180.288641][T11415] [ 180.657311][T11419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2584'. [ 180.709049][T11423] Invalid ELF header magic: != ELF [ 180.722655][T11424] loop1: detected capacity change from 0 to 512 [ 180.749937][T11424] journal_path: Lookup failure for './file0/../file0' [ 180.757510][T11424] EXT4-fs: error: could not find journal device path [ 180.767190][T11427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.777398][T11427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.792840][T11424] loop1: detected capacity change from 0 to 512 [ 180.802346][T11419] 9pnet_fd: Insufficient options for proto=fd [ 180.805808][T11424] journal_path: Lookup failure for './file0/../file0' [ 180.816155][T11424] EXT4-fs: error: could not find journal device path [ 180.946804][T11441] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2592'. [ 180.960397][T11441] batadv1: entered promiscuous mode [ 180.966458][T11441] batadv1: entered allmulticast mode [ 181.007923][T11448] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2592'. [ 181.011962][T11448] batadv1: entered promiscuous mode [ 181.022992][T11448] batadv1: entered allmulticast mode [ 181.042321][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'. [ 181.098108][ T3782] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 181.107741][ T3782] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 181.131119][T11458] random: crng reseeded on system resumption [ 181.146834][T11453] ref_ctr_offset mismatch. inode: 0x109 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 181.177186][T11458] Restarting kernel threads ... [ 181.184828][T11458] Done restarting kernel threads. [ 181.215545][T11460] loop2: detected capacity change from 0 to 512 [ 181.236951][T11462] loop8: detected capacity change from 0 to 512 [ 181.242918][T11460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.257374][T11460] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.281666][T11462] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.292653][T11466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2600'. [ 181.297287][T11462] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.303241][T11466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2600'. [ 181.322738][T11466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2600'. [ 181.344785][T11466] netlink: 'syz.1.2600': attribute type 1 has an invalid length. [ 181.352614][T11466] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2600'. [ 181.421264][T11474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=11474 comm=syz.1.2601 [ 181.444960][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.475849][T10491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.714888][T11498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.730470][T11498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.804782][T11498] netlink: 'syz.1.2612': attribute type 10 has an invalid length. [ 181.829425][T11498] team0: Device dummy0 failed to register rx_handler [ 181.918490][T11508] loop8: detected capacity change from 0 to 256 [ 182.020612][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.032911][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.131532][T11523] loop7: detected capacity change from 0 to 128 [ 182.559968][T11551] FAULT_INJECTION: forcing a failure. [ 182.559968][T11551] name failslab, interval 1, probability 0, space 0, times 0 [ 182.572696][T11551] CPU: 1 UID: 0 PID: 11551 Comm: syz.4.2622 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 182.572734][T11551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.572806][T11551] Call Trace: [ 182.572814][T11551] [ 182.572822][T11551] __dump_stack+0x1d/0x30 [ 182.572849][T11551] dump_stack_lvl+0xe8/0x140 [ 182.572873][T11551] dump_stack+0x15/0x1b [ 182.572929][T11551] should_fail_ex+0x265/0x280 [ 182.572966][T11551] should_failslab+0x8c/0xb0 [ 182.572987][T11551] __kvmalloc_node_noprof+0x123/0x4e0 [ 182.573070][T11551] ? alloc_fdtable+0xa5/0x1b0 [ 182.573098][T11551] ? __kmalloc_cache_noprof+0x22e/0x320 [ 182.573148][T11551] alloc_fdtable+0xa5/0x1b0 [ 182.573185][T11551] dup_fd+0x4c7/0x540 [ 182.573215][T11551] copy_files+0x98/0xf0 [ 182.573239][T11551] copy_process+0xc44/0x1f90 [ 182.573349][T11551] kernel_clone+0x16c/0x5b0 [ 182.573389][T11551] __se_sys_clone3+0x1c2/0x200 [ 182.573437][T11551] __x64_sys_clone3+0x31/0x40 [ 182.573513][T11551] x64_sys_call+0x10c9/0x2fb0 [ 182.573574][T11551] do_syscall_64+0xd2/0x200 [ 182.573595][T11551] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 182.573630][T11551] ? clear_bhb_loop+0x40/0x90 [ 182.573651][T11551] ? clear_bhb_loop+0x40/0x90 [ 182.573712][T11551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.573738][T11551] RIP: 0033:0x7f949871e929 [ 182.573763][T11551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.573786][T11551] RSP: 002b:00007f9496d44f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 182.573859][T11551] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f949871e929 [ 182.573876][T11551] RDX: 00007f9496d44f20 RSI: 0000000000000058 RDI: 00007f9496d44f20 [ 182.573892][T11551] RBP: 00007f9496d45090 R08: 0000000000000000 R09: 0000000000000058 [ 182.573907][T11551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.573923][T11551] R13: 0000000000000001 R14: 00007f9498946160 R15: 00007ffc7fe901a8 [ 182.573948][T11551] [ 183.306510][T11575] loop8: detected capacity change from 0 to 512 [ 183.330898][T11575] journal_path: Lookup failure for './file0/../file0' [ 183.337827][T11575] EXT4-fs: error: could not find journal device path [ 183.547879][T11583] loop8: detected capacity change from 0 to 256 [ 183.618346][T11583] FAT-fs (loop8): unable to read block(1760291558858) for building NFS inode [ 183.627638][T11594] loop7: detected capacity change from 0 to 128 [ 183.832614][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2650'. [ 183.886081][T11608] netlink: 'syz.2.2650': attribute type 1 has an invalid length. [ 184.082517][T11615] loop8: detected capacity change from 0 to 4096 [ 184.123756][T11615] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.224096][T10491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.335928][T11628] sch_fq: defrate 2048 ignored. [ 184.546765][T11637] loop7: detected capacity change from 0 to 512 [ 184.597259][T11632] loop2: detected capacity change from 0 to 8192 [ 184.625617][T11637] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.669916][T11636] loop8: detected capacity change from 0 to 256 [ 184.683780][ T29] kauditd_printk_skb: 1672 callbacks suppressed [ 184.683794][ T29] audit: type=1400 audit(1752745055.857:37191): avc: denied { mount } for pid=11635 comm="syz.7.2659" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 184.712285][T11637] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.791979][ T29] audit: type=1400 audit(1752745055.927:37192): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 184.812144][ T29] audit: type=1326 audit(1752745055.927:37193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11635 comm="syz.7.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f323854d290 code=0x7ffc0000 [ 184.835954][ T29] audit: type=1326 audit(1752745055.927:37194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11635 comm="syz.7.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f323854d677 code=0x7ffc0000 [ 184.859574][ T29] audit: type=1326 audit(1752745055.927:37195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11635 comm="syz.7.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f323854d290 code=0x7ffc0000 [ 184.870392][T11642] audit: audit_backlog=65 > audit_backlog_limit=64 [ 184.883367][ T29] audit: type=1400 audit(1752745055.927:37196): avc: denied { read write } for pid=11635 comm="syz.7.2659" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.883423][ T29] audit: type=1400 audit(1752745055.927:37197): avc: denied { read write open } for pid=11635 comm="syz.7.2659" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 184.883459][ T29] audit: type=1326 audit(1752745055.927:37198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11635 comm="syz.7.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323854e929 code=0x7ffc0000 [ 184.883521][ T29] audit: type=1326 audit(1752745055.927:37199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11635 comm="syz.7.2659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323854e929 code=0x7ffc0000 [ 184.995401][T11636] FAT-fs (loop8): error, corrupted directory (invalid entries) [ 185.025026][T10481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.080939][T11646] loop7: detected capacity change from 0 to 512 [ 185.112613][T11646] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 185.133260][T11646] System zones: 0-7 [ 185.137651][T11646] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.229582][ T3782] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 185.275377][ T3782] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 185.331582][T10481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.447049][T11659] __nla_validate_parse: 3 callbacks suppressed [ 185.447068][T11659] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2663'. [ 185.462627][T11659] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2663'. [ 185.471833][T11659] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2663'. [ 185.492062][T11659] netlink: 'syz.7.2663': attribute type 1 has an invalid length. [ 185.499892][T11659] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2663'. [ 185.518430][T11661] futex_wake_op: syz.8.2664 tries to shift op by 32; fix this program [ 185.592358][T11670] loop2: detected capacity change from 0 to 512 [ 185.626940][T11670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.641271][T11670] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.685885][ T3384] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 185.699412][ T3384] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 185.802127][T11681] loop7: detected capacity change from 0 to 512 [ 185.829725][T11681] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 185.830978][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.894212][T11681] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2673: Failed to acquire dquot type 1 [ 185.922234][T11681] EXT4-fs (loop7): 1 truncate cleaned up [ 185.930021][T11681] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.947464][T11681] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.953963][T11691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2677'. [ 185.989950][T11681] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2673: Failed to acquire dquot type 1 [ 186.056485][T11693] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2678'. [ 186.065563][T11693] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2678'. [ 186.074565][T11693] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2678'. [ 186.086230][T11681] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2673: Failed to acquire dquot type 1 [ 186.110989][T11690] loop2: detected capacity change from 0 to 256 [ 186.112575][T11681] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2673: Failed to acquire dquot type 1 [ 186.132856][T11693] netlink: 'syz.8.2678': attribute type 1 has an invalid length. [ 186.141500][T11693] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2678'. [ 186.155890][T11690] FAT-fs (loop2): unable to read block(1760291558858) for building NFS inode [ 186.190615][T10481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.249396][T11702] loop7: detected capacity change from 0 to 128 [ 186.287081][T11707] loop1: detected capacity change from 0 to 512 [ 186.317783][T11707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.352286][T11707] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.378125][T11706] loop8: detected capacity change from 0 to 8192 [ 186.387860][T11706] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.427040][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.554528][T11730] loop1: detected capacity change from 0 to 512 [ 186.569821][T11730] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 186.598004][T11730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=47 sclass=netlink_route_socket pid=11730 comm=syz.1.2692 [ 186.628626][T11727] loop7: detected capacity change from 0 to 256 [ 186.643634][T11727] FAT-fs (loop7): unable to read block(1760291558858) for building NFS inode [ 186.663816][T11735] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2693'. [ 186.679441][T11735] netlink: 'syz.1.2693': attribute type 1 has an invalid length. [ 186.816982][T11748] loop4: detected capacity change from 0 to 512 [ 186.828314][T11746] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.843861][T11748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.859007][T11748] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.881055][T11737] SELinux: Context Ü is not valid (left unmapped). [ 186.908349][T11746] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.922933][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.967448][T11746] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.046772][T11746] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.134539][T11746] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.148567][T11746] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.160591][T11746] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.175870][T11746] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.219118][T11760] loop8: detected capacity change from 0 to 256 [ 187.519307][T11772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.528984][T11772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.541009][T11772] netlink: 'syz.7.2707': attribute type 10 has an invalid length. [ 187.553209][T11772] team0: Port device dummy0 added [ 187.587275][T11774] futex_wake_op: syz.8.2708 tries to shift op by 32; fix this program [ 187.851512][T11778] loop8: detected capacity change from 0 to 256 [ 187.995681][T11784] 9pnet_fd: Insufficient options for proto=fd [ 188.036633][T11786] loop8: detected capacity change from 0 to 512 [ 188.056836][T11786] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.070198][T11786] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.131983][T10491] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.247251][T11799] loop7: detected capacity change from 0 to 256 [ 188.262767][T11799] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 189.204934][T11836] loop1: detected capacity change from 0 to 128 [ 189.291116][T11840] loop1: detected capacity change from 0 to 256 [ 189.404215][T11851] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 189.479325][ T10] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 189.501628][ T10] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 189.564869][T11862] loop8: detected capacity change from 0 to 256 [ 189.630744][T11866] loop1: detected capacity change from 0 to 512 [ 189.645920][T11866] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.658814][T11866] ext4 filesystem being mounted at /584/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.688227][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.733976][ T29] kauditd_printk_skb: 1316 callbacks suppressed [ 189.734018][ T29] audit: type=1400 audit(1752745060.887:38506): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.765509][ T29] audit: type=1400 audit(1752745060.887:38507): avc: denied { open } for pid=3307 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.789806][ T29] audit: type=1400 audit(1752745060.887:38508): avc: denied { ioctl } for pid=3307 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 189.816182][ T29] audit: type=1400 audit(1752745060.897:38509): avc: denied { module_request } for pid=11871 comm="syz.8.2745" kmod="snd-card-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 189.895153][ T29] audit: type=1400 audit(1752745061.007:38510): avc: denied { map_create } for pid=11859 comm="syz.7.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 189.915440][ T29] audit: type=1400 audit(1752745061.007:38511): avc: denied { create } for pid=11859 comm="syz.7.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.936214][ T29] audit: type=1400 audit(1752745061.007:38512): avc: denied { write } for pid=11859 comm="syz.7.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.957484][ T29] audit: type=1400 audit(1752745061.007:38513): avc: denied { read } for pid=11859 comm="syz.7.2741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 189.977983][ T29] audit: type=1400 audit(1752745061.027:38514): avc: denied { prog_load } for pid=11871 comm="syz.8.2745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 189.997908][ T29] audit: type=1400 audit(1752745061.027:38515): avc: denied { bpf } for pid=11871 comm="syz.8.2745" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 190.025740][T11880] loop4: detected capacity change from 0 to 256 [ 190.122618][T11886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.131610][T11886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.143579][T11886] netlink: 'syz.2.2750': attribute type 10 has an invalid length. [ 190.157276][T11886] team0: Port device dummy0 added [ 190.319945][T11892] netlink: 'syz.8.2751': attribute type 1 has an invalid length. [ 190.393522][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.405315][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.433523][T11901] FAULT_INJECTION: forcing a failure. [ 190.433523][T11901] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 190.444930][T11897] netlink: 'syz.8.2754': attribute type 10 has an invalid length. [ 190.446750][T11901] CPU: 1 UID: 0 PID: 11901 Comm: syz.7.2756 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 190.446787][T11901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.446805][T11901] Call Trace: [ 190.446813][T11901] [ 190.446824][T11901] __dump_stack+0x1d/0x30 [ 190.446860][T11901] dump_stack_lvl+0xe8/0x140 [ 190.446908][T11901] dump_stack+0x15/0x1b [ 190.446932][T11901] should_fail_ex+0x265/0x280 [ 190.446975][T11901] should_fail+0xb/0x20 [ 190.447027][T11901] should_fail_usercopy+0x1a/0x20 [ 190.447077][T11901] _copy_to_user+0x20/0xa0 [ 190.447152][T11901] simple_read_from_buffer+0xb5/0x130 [ 190.447196][T11901] proc_fail_nth_read+0x100/0x140 [ 190.447243][T11901] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 190.447297][T11901] vfs_read+0x19d/0x6f0 [ 190.447338][T11901] ? __rcu_read_unlock+0x4f/0x70 [ 190.447368][T11901] ? __fget_files+0x184/0x1c0 [ 190.447471][T11901] ksys_read+0xda/0x1a0 [ 190.447515][T11901] __x64_sys_read+0x40/0x50 [ 190.447558][T11901] x64_sys_call+0x2d77/0x2fb0 [ 190.447643][T11901] do_syscall_64+0xd2/0x200 [ 190.447668][T11901] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 190.447774][T11901] ? clear_bhb_loop+0x40/0x90 [ 190.447921][T11901] ? clear_bhb_loop+0x40/0x90 [ 190.447957][T11901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.447996][T11901] RIP: 0033:0x7f323854d33c [ 190.448018][T11901] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 190.448174][T11901] RSP: 002b:00007f3236bb7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 190.448202][T11901] RAX: ffffffffffffffda RBX: 00007f3238775fa0 RCX: 00007f323854d33c [ 190.448220][T11901] RDX: 000000000000000f RSI: 00007f3236bb70a0 RDI: 0000000000000006 [ 190.448268][T11901] RBP: 00007f3236bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 190.448299][T11901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.448316][T11901] R13: 0000000000000000 R14: 00007f3238775fa0 R15: 00007ffff8807a98 [ 190.448347][T11901] [ 190.538788][T11904] loop7: detected capacity change from 0 to 2048 [ 190.685405][T11911] __nla_validate_parse: 8 callbacks suppressed [ 190.685421][T11911] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2761'. [ 190.780884][T11919] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.802303][T11916] loop2: detected capacity change from 0 to 256 [ 190.855003][T11919] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.914801][T11919] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.936508][T11924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2765'. [ 190.945594][T11924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2765'. [ 190.954615][T11924] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2765'. [ 190.970411][T11924] netlink: 'syz.1.2765': attribute type 1 has an invalid length. [ 190.978242][T11924] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2765'. [ 190.995871][T11919] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.079813][T11927] loop1: detected capacity change from 0 to 1024 [ 191.095809][T11919] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.105499][T11927] EXT4-fs: Ignoring removed nobh option [ 191.111219][T11927] EXT4-fs: Ignoring removed bh option [ 191.120421][T11919] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.133414][T11919] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.145808][T11919] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.288204][T11930] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2768'. [ 191.445294][T11937] syz.4.2771 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 191.506260][T11937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11937 comm=syz.4.2771 [ 191.706023][T11927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.816900][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.059357][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2780'. [ 192.109501][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2780'. [ 192.187945][T11986] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 192.279699][T11989] FAULT_INJECTION: forcing a failure. [ 192.279699][T11989] name failslab, interval 1, probability 0, space 0, times 0 [ 192.293264][T11989] CPU: 1 UID: 0 PID: 11989 Comm: syz.4.2788 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 192.293327][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 192.293343][T11989] Call Trace: [ 192.293351][T11989] [ 192.293372][T11989] __dump_stack+0x1d/0x30 [ 192.293393][T11989] dump_stack_lvl+0xe8/0x140 [ 192.293415][T11989] dump_stack+0x15/0x1b [ 192.293505][T11989] should_fail_ex+0x265/0x280 [ 192.293582][T11989] should_failslab+0x8c/0xb0 [ 192.293610][T11989] kmem_cache_alloc_noprof+0x50/0x310 [ 192.293709][T11989] ? alloc_empty_file+0x76/0x200 [ 192.293739][T11989] alloc_empty_file+0x76/0x200 [ 192.293761][T11989] path_openat+0x68/0x2170 [ 192.293795][T11989] ? _parse_integer_limit+0x170/0x190 [ 192.293823][T11989] ? _parse_integer+0x27/0x40 [ 192.293846][T11989] ? kstrtoull+0x111/0x140 [ 192.293922][T11989] ? kstrtouint+0x76/0xc0 [ 192.293948][T11989] do_filp_open+0x109/0x230 [ 192.293995][T11989] do_sys_openat2+0xa6/0x110 [ 192.294026][T11989] __x64_sys_creat+0x65/0x90 [ 192.294181][T11989] x64_sys_call+0x114d/0x2fb0 [ 192.294205][T11989] do_syscall_64+0xd2/0x200 [ 192.294225][T11989] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 192.294254][T11989] ? clear_bhb_loop+0x40/0x90 [ 192.294280][T11989] ? clear_bhb_loop+0x40/0x90 [ 192.294348][T11989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.294373][T11989] RIP: 0033:0x7f949871e929 [ 192.294387][T11989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.294404][T11989] RSP: 002b:00007f9496d87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 192.294425][T11989] RAX: ffffffffffffffda RBX: 00007f9498945fa0 RCX: 00007f949871e929 [ 192.294437][T11989] RDX: 0000000000000000 RSI: 0000000000000036 RDI: 00002000000003c0 [ 192.294449][T11989] RBP: 00007f9496d87090 R08: 0000000000000000 R09: 0000000000000000 [ 192.294521][T11989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.294536][T11989] R13: 0000000000000000 R14: 00007f9498945fa0 R15: 00007ffc7fe901a8 [ 192.294560][T11989] [ 192.724830][T11994] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2790'. [ 192.776736][T11992] loop1: detected capacity change from 0 to 256 [ 192.814467][T11992] FAT-fs (loop1): unable to read block(1760291558858) for building NFS inode [ 192.914048][ T3384] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 192.926421][ T3384] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz0] on syz0 [ 192.956733][T12006] loop1: detected capacity change from 0 to 512 [ 192.980883][T12009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.989632][T12009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.004339][T12009] netlink: 'syz.4.2795': attribute type 10 has an invalid length. [ 193.008232][T12006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.014362][T12009] team0: Port device dummy0 added [ 193.053662][T12006] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.127173][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.163696][T12016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2798'. [ 193.852889][ T5062] bridge_slave_1: left allmulticast mode [ 193.858627][ T5062] bridge_slave_1: left promiscuous mode [ 193.865027][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.874680][ T5062] bridge_slave_0: left allmulticast mode [ 193.880377][ T5062] bridge_slave_0: left promiscuous mode [ 193.886225][ T5062] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.915719][ T10] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 193.926937][ T10] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz0] on syz0 [ 193.996518][ T5062] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.011391][ T5062] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.034555][ T5062] bond0 (unregistering): Released all slaves [ 194.153746][ T5062] tipc: Disabling bearer [ 194.158806][ T5062] tipc: Left network mode [ 194.177260][ T5062] hsr_slave_0: left promiscuous mode [ 194.186247][ T5062] hsr_slave_1: left promiscuous mode [ 194.192107][ T5062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.201473][ T5062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.211520][T12066] FAULT_INJECTION: forcing a failure. [ 194.211520][T12066] name failslab, interval 1, probability 0, space 0, times 0 [ 194.224214][T12066] CPU: 0 UID: 0 PID: 12066 Comm: syz.7.2811 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 194.224251][T12066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 194.224327][T12066] Call Trace: [ 194.224333][T12066] [ 194.224340][T12066] __dump_stack+0x1d/0x30 [ 194.224389][T12066] dump_stack_lvl+0xe8/0x140 [ 194.224418][T12066] dump_stack+0x15/0x1b [ 194.224432][T12066] should_fail_ex+0x265/0x280 [ 194.224459][T12066] should_failslab+0x8c/0xb0 [ 194.224478][T12066] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 194.224634][T12066] ? security_context_to_sid_core+0x69/0x3b0 [ 194.224676][T12066] ? avc_perm_nonode+0x82/0xe0 [ 194.224700][T12066] kmemdup_nul+0x36/0xc0 [ 194.224720][T12066] security_context_to_sid_core+0x69/0x3b0 [ 194.224739][T12066] ? avc_has_perm_noaudit+0x156/0x200 [ 194.224786][T12066] security_context_to_sid+0x2e/0x40 [ 194.224808][T12066] selinux_inode_setxattr+0x4af/0x6e0 [ 194.224841][T12066] security_inode_setxattr+0x13a/0x1b0 [ 194.224874][T12066] __vfs_setxattr_locked+0x83/0x1d0 [ 194.224931][T12066] vfs_setxattr+0x132/0x270 [ 194.224962][T12066] filename_setxattr+0x1ad/0x400 [ 194.225073][T12066] path_setxattrat+0x2c9/0x310 [ 194.225105][T12066] __x64_sys_lsetxattr+0x71/0x90 [ 194.225122][T12066] x64_sys_call+0x1e36/0x2fb0 [ 194.225141][T12066] do_syscall_64+0xd2/0x200 [ 194.225185][T12066] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 194.225209][T12066] ? clear_bhb_loop+0x40/0x90 [ 194.225227][T12066] ? clear_bhb_loop+0x40/0x90 [ 194.225246][T12066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.225264][T12066] RIP: 0033:0x7f323854e929 [ 194.225336][T12066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.225377][T12066] RSP: 002b:00007f3236bb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 194.225393][T12066] RAX: ffffffffffffffda RBX: 00007f3238775fa0 RCX: 00007f323854e929 [ 194.225404][T12066] RDX: 0000200000001a40 RSI: 0000200000001a00 RDI: 00002000000019c0 [ 194.225414][T12066] RBP: 00007f3236bb7090 R08: 0000000000000000 R09: 0000000000000000 [ 194.225425][T12066] R10: 000000000000001b R11: 0000000000000246 R12: 0000000000000001 [ 194.225489][T12066] R13: 0000000000000000 R14: 00007f3238775fa0 R15: 00007ffff8807a98 [ 194.225506][T12066] [ 194.465138][ T5062] team0 (unregistering): Port device team_slave_1 removed [ 194.478024][ T5062] team0 (unregistering): Port device team_slave_0 removed [ 194.528879][T12024] chnl_net:caif_netlink_parms(): no params data found [ 194.543761][T12069] loop7: detected capacity change from 0 to 1024 [ 194.551695][T12069] EXT4-fs: Ignoring removed orlov option [ 194.567753][T12069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.613496][T12076] loop4: detected capacity change from 0 to 2048 [ 194.634684][T12076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.648772][T12076] EXT4-fs error (device loop4): ext4_find_extent:939: inode #2: comm syz.4.2813: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 194.667439][T12076] EXT4-fs (loop4): Remounting filesystem read-only [ 194.678390][T10481] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.705701][T12024] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.712981][T12024] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.729216][T12024] bridge_slave_0: entered allmulticast mode [ 194.736886][T12024] bridge_slave_0: entered promiscuous mode [ 194.746440][T12024] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.746566][ T29] kauditd_printk_skb: 1078 callbacks suppressed [ 194.746583][ T29] audit: type=1400 audit(1752745065.917:39594): avc: denied { read write } for pid=10481 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.753560][T12024] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.753819][T12024] bridge_slave_1: entered allmulticast mode [ 194.759968][ T29] audit: type=1400 audit(1752745065.917:39595): avc: denied { open } for pid=10481 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.786957][T12024] bridge_slave_1: entered promiscuous mode [ 194.845811][ T29] audit: type=1400 audit(1752745065.967:39596): avc: denied { ioctl } for pid=10481 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 194.871728][ T29] audit: type=1400 audit(1752745065.997:39597): avc: denied { prog_load } for pid=12084 comm="syz.2.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 194.891205][ T29] audit: type=1400 audit(1752745065.997:39598): avc: denied { bpf } for pid=12084 comm="syz.2.2818" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.912357][ T29] audit: type=1400 audit(1752745065.997:39599): avc: denied { perfmon } for pid=12084 comm="syz.2.2818" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.933886][ T29] audit: type=1400 audit(1752745066.007:39600): avc: denied { open } for pid=12084 comm="syz.2.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 194.953390][ T29] audit: type=1400 audit(1752745066.007:39601): avc: denied { perfmon } for pid=12084 comm="syz.2.2818" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 194.974519][ T29] audit: type=1400 audit(1752745066.007:39602): avc: denied { kernel } for pid=12084 comm="syz.2.2818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 194.994530][ T29] audit: type=1400 audit(1752745066.007:39603): avc: denied { read write } for pid=10491 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 195.044689][T12024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.056389][T12024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.106393][T12024] team0: Port device team_slave_0 added [ 195.113651][T12024] team0: Port device team_slave_1 added [ 195.184035][T12024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.191048][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.217703][T12024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.255645][T12024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.262721][T12024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.289481][T12024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.369002][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.390404][T12024] hsr_slave_0: entered promiscuous mode [ 195.412223][T12024] hsr_slave_1: entered promiscuous mode [ 195.434692][T12024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.457305][T12024] Cannot create hsr debugfs directory [ 195.560972][T12111] loop4: detected capacity change from 0 to 4096 [ 195.586723][T12118] loop2: detected capacity change from 0 to 1024 [ 195.587802][T12111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.625339][T12111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.663653][T12118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 195.681914][T12118] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.795873][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.914724][T12024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 195.927356][T12024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 195.944655][T12024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 195.959480][T12136] __nla_validate_parse: 3 callbacks suppressed [ 195.959502][T12136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2835'. [ 195.984373][T12024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.094825][T12136] 9p: Unknown Cache mode or invalid value hea [ 196.099855][T12024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.134420][T12024] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.157636][ T5062] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.164794][ T5062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.188868][T12024] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 196.199329][T12024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.230528][ T5062] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.237769][ T5062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.315690][T12154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.329801][T12154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.350798][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2848'. [ 196.359924][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2848'. [ 196.362123][T12154] netlink: 'syz.7.2839': attribute type 10 has an invalid length. [ 196.368929][T12153] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2848'. [ 196.396954][T12153] netlink: 'syz.8.2848': attribute type 1 has an invalid length. [ 196.404765][T12153] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2848'. [ 196.451959][T12024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.479493][T12161] loop2: detected capacity change from 0 to 256 [ 196.530103][T12160] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 196.602211][T12170] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 196.611429][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2841'. [ 196.617436][T12024] veth0_vlan: entered promiscuous mode [ 196.648992][T12024] veth1_vlan: entered promiscuous mode [ 196.679936][T12024] veth0_macvtap: entered promiscuous mode [ 196.704119][T12024] veth1_macvtap: entered promiscuous mode [ 196.728087][T12024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.746249][T12024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.765938][T12024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.774817][T12024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.784254][T12024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.793132][T12024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.991614][T12185] loop4: detected capacity change from 0 to 128 [ 197.177214][T12185] bio_check_eod: 28 callbacks suppressed [ 197.177235][T12185] syz.4.2847: attempt to access beyond end of device [ 197.177235][T12185] loop4: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 197.189443][ T23] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 197.205017][T12185] syz.4.2847: attempt to access beyond end of device [ 197.205017][T12185] loop4: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 197.247731][ T23] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz0] on syz0 [ 197.269810][T12185] syz.4.2847: attempt to access beyond end of device [ 197.269810][T12185] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 197.283573][T12185] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 197.286974][T12199] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2851'. [ 197.301847][T12199] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2851'. [ 197.310866][T12199] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2851'. [ 197.326806][T12185] syz.4.2847: attempt to access beyond end of device [ 197.326806][T12185] loop4: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 197.340416][T12185] Buffer I/O error on dev loop4, logical block 129, lost async page write [ 197.350381][T12185] syz.4.2847: attempt to access beyond end of device [ 197.350381][T12185] loop4: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 197.364543][T12185] Buffer I/O error on dev loop4, logical block 130, lost async page write [ 197.382077][T12199] netlink: 'syz.8.2851': attribute type 1 has an invalid length. [ 197.390055][T12199] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2851'. [ 197.410324][T12185] syz.4.2847: attempt to access beyond end of device [ 197.410324][T12185] loop4: rw=2049, sector=131, nr_sectors = 1 limit=128 [ 197.424699][T12185] Buffer I/O error on dev loop4, logical block 131, lost async page write [ 197.452550][T12185] syz.4.2847: attempt to access beyond end of device [ 197.452550][T12185] loop4: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 197.466901][T12185] Buffer I/O error on dev loop4, logical block 140, lost async page write [ 197.483036][T12185] syz.4.2847: attempt to access beyond end of device [ 197.483036][T12185] loop4: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 197.497229][T12185] Buffer I/O error on dev loop4, logical block 141, lost async page write [ 197.518727][T12185] syz.4.2847: attempt to access beyond end of device [ 197.518727][T12185] loop4: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 197.532908][T12185] Buffer I/O error on dev loop4, logical block 158, lost async page write [ 197.552426][T12185] syz.4.2847: attempt to access beyond end of device [ 197.552426][T12185] loop4: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 197.566715][T12185] Buffer I/O error on dev loop4, logical block 159, lost async page write [ 197.575464][T12185] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 197.584402][T12185] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 198.149249][T12241] loop7: detected capacity change from 0 to 4096 [ 198.215916][T12241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.253789][T12241] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.733785][T12250] netlink: 'syz.2.2866': attribute type 1 has an invalid length. [ 198.841345][T12260] loop7: detected capacity change from 0 to 128 [ 198.965936][T12264] loop1: detected capacity change from 0 to 128 [ 199.517972][T12278] 9p: Unknown Cache mode or invalid value head [ 199.636431][T12279] loop1: detected capacity change from 0 to 512 [ 199.670621][T12279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 199.685036][T12279] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.719647][T12295] loop4: detected capacity change from 0 to 2048 [ 199.745274][ T3782] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 199.760193][ T29] kauditd_printk_skb: 1323 callbacks suppressed [ 199.760208][ T29] audit: type=1400 audit(1752745070.928:40927): avc: denied { prog_load } for pid=12292 comm="syz.2.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 199.764525][ T3782] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz0 [ 199.767407][ T29] audit: type=1400 audit(1752745070.928:40928): avc: denied { bpf } for pid=12292 comm="syz.2.2882" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 199.819893][ T29] audit: type=1400 audit(1752745070.958:40929): avc: denied { bind } for pid=12292 comm="syz.2.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.840305][ T29] audit: type=1400 audit(1752745070.978:40930): avc: denied { listen } for pid=12292 comm="syz.2.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 199.844884][T12295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 199.860404][ T29] audit: type=1400 audit(1752745070.978:40931): avc: denied { mounton } for pid=12292 comm="syz.2.2882" path="/594" dev="tmpfs" ino=3177 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 199.900528][ T29] audit: type=1400 audit(1752745071.058:40932): avc: denied { mount } for pid=12293 comm="syz.4.2883" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 199.901478][ T29] audit: type=1400 audit(1752745071.058:40933): avc: denied { read write } for pid=12293 comm="syz.4.2883" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.947849][ T29] audit: type=1400 audit(1752745071.058:40934): avc: denied { read write open } for pid=12293 comm="syz.4.2883" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 199.974099][ T29] audit: type=1400 audit(1752745071.098:40935): avc: denied { ioctl } for pid=10481 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 200.007102][T12307] netlink: 'syz.2.2882': attribute type 10 has an invalid length. [ 200.035302][ T29] audit: type=1400 audit(1752745071.158:40936): avc: denied { prog_load } for pid=12292 comm="syz.2.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 200.059039][T12301] ================================================================== [ 200.067180][T12301] BUG: KCSAN: data-race in getrusage / vms_clear_ptes [ 200.073980][T12301] [ 200.076319][T12301] write to 0xffff88810bfee400 of 8 bytes by task 12292 on cpu 0: [ 200.084050][T12301] vms_clear_ptes+0x18f/0x2d0 [ 200.088751][T12301] mmap_region+0x6e8/0x1580 [ 200.093274][T12301] do_mmap+0x9b3/0xbe0 [ 200.097367][T12301] vm_mmap_pgoff+0x17a/0x2e0 [ 200.101979][T12301] ksys_mmap_pgoff+0x268/0x310 [ 200.106774][T12301] x64_sys_call+0x1602/0x2fb0 [ 200.111478][T12301] do_syscall_64+0xd2/0x200 [ 200.116000][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.121919][T12301] [ 200.124259][T12301] read to 0xffff88810bfee400 of 8 bytes by task 12301 on cpu 1: [ 200.131989][T12301] getrusage+0xa52/0xbb0 [ 200.136263][T12301] io_sq_thread+0x5dd/0x1180 [ 200.140878][T12301] ret_from_fork+0xda/0x150 [ 200.145571][T12301] ret_from_fork_asm+0x1a/0x30 [ 200.150354][T12301] [ 200.152690][T12301] value changed: 0x00000000000014ec -> 0x00000000000016b6 [ 200.159818][T12301] [ 200.162159][T12301] Reported by Kernel Concurrency Sanitizer on: [ 200.168338][T12301] CPU: 1 UID: 0 PID: 12301 Comm: iou-sqp-12294 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 200.181137][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.191217][T12301] ================================================================== [ 200.201549][T12312] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 200.213823][T12313] netlink: 'syz.4.2883': attribute type 1 has an invalid length. [ 200.221716][T12307] geneve1: entered promiscuous mode [ 200.234304][T12307] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 200.333476][T12024] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 200.479654][T12320] loop8: detected capacity change from 0 to 256 [ 200.496111][T12320] loop8: detected capacity change from 0 to 128 [ 200.562852][T12321] loop7: detected capacity change from 0 to 128 [ 200.776266][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.