last executing test programs: 43.418470612s ago: executing program 2 (id=3): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) rt_sigtimedwait(&(0x7f0000000200)={[0x9]}, 0x0, &(0x7f00000002c0)={0x0, 0x3938700}, 0x8) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x0) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x9c, 0x464, 0x2, 0x70bd29, 0x25dfdbff, "4339862cce8161490c683c2868ba293e2c42c6ab506ad9afae57c9b8ee4de1071f6e39b63940628041135a275c6515e18710ceccc305adc806a2cdc65257f079cdcc34d8c1f311e31ba34c376308d663ea5485f646b947e15092fb633b1e24c31e8dadeff32c9721e0b769bdab81f7ef66b2214f0c4f723eccfb23ed3199d9e6af84d62f173ad670f5", [""]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000004c0)='batadv0\x00', 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x8000) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000540)) bind$inet(r2, &(0x7f0000000580)={0x2, 0x4e24, @local}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000600)={0x4, &(0x7f00000005c0)=[{0x800, 0xf, 0x5, 0x400}, {0x9, 0x9, 0x2, 0x81}, {0x3, 0x9, 0x6, 0xffff}, {0x5, 0x5, 0x2, 0x200}]}) socket$netlink(0x10, 0x3, 0xf) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000640)=0x3, 0x4) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000680)={0x0, 0x4}) syz_emit_ethernet(0x16, &(0x7f00000006c0)={@multicast, @multicast, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x0, 0x1, 0x1}}, {@generic={0xc}}}, &(0x7f00000007c0)={0x0, 0x1, [0x539, 0xae2, 0xcb6, 0x486]}) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000001840)=@urb_type_bulk={0x3, {0x4, 0x1}, 0x9, 0x0, &(0x7f0000000800)="16783d58dae86b15971048a351e40a2c535f155cca280598c07edeffd12ef79721b26bf1875f775da8c89257880d5ede5bc8f0e2356a6e4627ae839fa040f66f452412cbc909d3793d219c917ee43fbc0877b99ac871c6a694410df9618c785e05bdeab493587b34b09f282703f02ba8c5a2851c7bf9c2a353c98ea60b764e82b8b805cf6ab415855cfa373a9ed29f7748dc049a0be42c6088c7bf8d2751b76ad6dde03ec66f4fe854114ab3cfcd25c7909c4d5843ad0cd1b7a127c9a790b270e594038e0389d9815c166595cd1b7c6a81ca5ffc15af6e0808f5345bb5e823f51e4c03163bc6bcf91dacc3db7fa236a487c53de6df9c8100e130a7df79b6a9386ab3f2456cdf11b9fa5747d4eb6eab7c77438708c9621cf9e091c4bfdc3c82e1cf37aa3f43a85b856445e29b868edb0732906f9af2a77be5b0b0d266069b99cd4895a84c8e97255e09ead6dabb7ba0346b3b7eb9228479875ccb90f98bdb6bdbccb779dbfd936af12ca4986e24c4d669d5e4612e88a3c8e1bf32c44b305d55addf61f69ff8c6bd3508cea6b00fcdcd7f68ec602dea7a348ba0f589b5c7398b09e17166a8648d8b3cd4a7429c81ae275d19b40043b8c2a01ab69d15c79b623c6472020a3d0a71df0bd9a134e25ccd284b1978854f3923a25f2998313b7bbfcc4f9fa94987afd750b0e530eb76e232b3a01ec8e29e49c844d80801182c836a3c3a1db44a7b2f42b692378c2f5e0b2f67345c2a9d0753e8ff2c966fb2fafc3b9437a6445e304e0b4beb65fdd35c59a74bb91a838560877671df976845d09c46d1b4e64f5f74d65c04c0bbbde21b66f776d28d1ca8385790c3993c1b8f04514590b6ada89359a28e9a1097a46fe1dd9508bf3ae2144304022c2a700aa46a9d1b5bf71b41d6e98e000070a9528a4c588f3cb076cf432b09660ce4e48c6d47f0053c12a37ab72937bdf471ac3c87079907f693819a0b2e192a331f7de2a1a329f90c2c1a0469939b34f751badfc419b8c70b0107f81f8637cc1532d568483f59ab4fe0041f47ef034fa9ff5a61d3d00d1a36152ca343556cdb37d877a5bd12c89a9c897efe07a80d98b098e953b4e7faa832cdd76a0d8d283c146d345f55d7eebea04dc95fb8a1902c6a5c42fc05801679a51601064073e0bc1454e09a5889457d9d6a061e9ac127446f8e8b5a44c573d2ea597a23353e11585de5f0629d5bd10f30e1857f611517684abef083f07a72fdc207f934b15cbbbe887aa15b644c1e6077d7f6e52258ec5f87907053a52af879238e878bdcc8910ae5b0217cb890e8f25c85451f1cd2c32fc416cfba6728c3903aa84e2234daaeb044503d3d3612e304e2c34bfb7508c2841c60c41651c567ff62e2117c33f2366415b6837f2bf5760e75eb63fd97174df4021d017c18570c262ab7cd644d326938da49f5e3169b0a99241886924ca8e3f7180b80b9413ec1eff7b63e7e42c06aaeb36636ff1b504a360da4d0e1a817ff0848ed0f6841b2a4170abac64faef1c5338c94f47437813fe2c945c04b8eef4a316cfa84cc113bbcf81dbb33e8bce3896b1c788fa386c72faf0d080ec49e6581c7eb947220c1a98b39438c0b2387b4fd1794e12ea37eedb60734684c5765ff6807aaee7775b7bdf36919925b7b46a9ce5d3e1ef9b5234170c92d09dde7ffb32595cba06e03981e885ec4eaa1ee57736287c901315fbeb86e5347e751e17cd66948c1dcf4ad1f13a8ebc31da55f3e790befaf8c6a6880eee1c3f67e24e766c1f236d5bf080dcb8384b3beebbaa729a07e59d9e6a96ec3095c4938cd32848e84f05daa87867cebb0a2002ca6b291c166d2171796ee225d6b38ce1b11baa811def461ff6e46fa18d4175538159cef68dfe4143b1e5557a79a5df4f70fd90d3eb2416e32e7f5c844459c76f7f6e804a0facb820ae49f42dfd9d559819bba3b91c97c390406cc448b8070617ce4731b52c6a295351ff4c7f7af672c860cecc3c517e16873d7dd342395665b1e356e8ccb46bc7d5c8b88d0fefc3a90d420b0f53d6ded3eecca793d7a96145b23a72d1325110b827bbc030b5e692db83f4a6a03036fdcad46b98521d931b6305b401c033d3895f1c2623758f93d7420c3b902c8b82ad993801fdf1092796805517e0900b0f7ccd7e7f63cc19eb476e138040bd779ecd04370a9a01097879a96f187f0665f3c3435aee8c4bc8fcfb585c378a1289a83eaee77dbad3fe8c46a9ab12d8eed9a47420a1883ed71ef8fe28d419b133406b5d4e6323c9a6eaeb4c088acc5732640a8eb1bb828ca0c634edec08e7e8835ac84f1e48e8b9ee180a0c8cd0fc01afcfbfc782fa03a05e894d5b77e054dc61b3351cfea834488357a9bc672e64d5b9bb58a4b6efc684b14b5627830a0de81fd7c16772877e0579a0cbaf4584b07086cd8c6d90ab77b6e0005a9462163316bcb79a7d8f717eddcc4b4eaa270454b6df1b80187718e745d040e9039ea99a7988102a63f3fdf3ad8ef16eda78eb21e354871868717b279d502520242950e2e6509b3d58d977855f9d4df26133bcbd9f2634adc749944a1085fc905dae17e43686c3dc885f611a295e4d038bb78a269d8e0a2a5729a7ae2432e2ec9876119d514f4af8c7e17c92190b9f57342a178fb423cd4840fadcddcaa5e770bfef956de4902aa300695a23ea4b6bd054f0b67400f4a9b7e9b087b7cadfb4cb96fe4dfca682bdaf05e789ee6351dbdac2bef93a23c2ffa17660a09d89c30d0d890be81bf5b9a4ef6f87e55f2318f5a52d9702689e322f74898810d17233673e21376f405429a3654ffde1084c0f980750ac306d64dbe921b3c0e160bb5d3741c16297d310e32099969fb486ca9809975eb5720083464c7bf239cca670bd6eb517d7bae631472b65fc574e22bb74f99675d663c3c428b1bbf5708547c61583d0cdf538535ddf5d32789ba52cac3e2917f3635229a46a6a4d2b9475948fb8e2144587e32a531900a7b38f2b95af3d5a796ced8df23d6c5eb7b64660d05e22e6d6b547ba584d3bc29a5c87f576eed42e511a2ef804645a93fdf65b47d67fb3486728b13830969a9cd866d13e328bc95bfb75420116db802731dfa76fb8b5824ad9f396c8ba6d642e4cefe9846a3474ae491603c83f5e69b433912b0a620ff94de381367eeafbf8fa6e92d260cabf9a4d73caf23370e023e96af84a019156c55ce38f41010cdf180106206c0539f412f6f3b8efc76d9cdc4bc5407656494805fe311a68c36a105b07a3fe79a7d22021790e0a9c983b7d0ec38906a7cef502bbcf9df89c198a807bb32f3b66ef630411542e07d249ef22795f65a98182eb0ced272cb6acfdcba1c484ce41199823138117cc9d20b9d68eda3179293ea6c8f5d45d8ea2bdd07452d899a7913ddbb07dac15581a7205597e71e989d3e0c2160cdb648c0f22032e9b28371c4d57757134bcc6c41eb2d7c5ce90b4f4020e8f52657ea5f47186df62661688ff235c3978c454d98f040b268cee3abc7f37ccb74f102be56e38bb61bcdf791cc49cfb4ef4bd6bc9a2e437aa8fef95a0e42f1a8a3baa7465d47218eed9f39dd2ef42722874e332901fa2787b34cfcec97766c0f99efcf1108fffa0fbcd2741bbab5d25d589524dab1bd82cc1619c3fdf912c0f5b2a05975f9a4579dcfc5510740386e7a00af49ac3204a28f98e5669ad66f02cd7aac04b531590afb56ad25302f6056e184d83167485e238ad7101fe3086f80dc018d072362fa44816eb1dba403dc06751624dff6ad3650681a49d14849f28267591c5f17ce35d42c55328cba45215791d7e4435f367ef514bb798f56552b0c2fbf52a26d11c4bf1ed2adecf3878733da42e8fcfe812e20f791cceb4de4f45843c979bbb3b9ec6be6363c8a0c508f72d4396133e7cff8d20cfc6076367131fe4d1ceb7f5c2e2541c78311a8c7e17c55d5d15f4f67fdb16833fba6a2adfa286b23aedf72e0c93b67b32e898ee0bb960eb2b3e03ab4a3683c7e04a36db755cc65787d572a0213c424707cd5a96ae62739cda1ab4431b2a8c78eabd203e7b6c5d9878f6d0518e42715b25d8a6577fcdd2f556dbbdc74f1c05681d52471e28436c6ba7605371579eeea592cddc19923f00afdff03a498040cc3c7383f9d14346d59f6c641e1d8d636f7e8102105033c006178989a32a2f84c5a731f7cc78315de3a8641a5b7b52aa14ed2cfd7c1db3a67c48e60f7641e36e4cf5c86c05104861a72a0699f2ed4e9ad0b273dbf5686c6f7d1144aa33b1134600cc07d1e5a22a98e9c933407177ba7c21805f5afe4e8fa47a9566067b7eb9d1953bd246c1cf70801644bfc294aaeae151f5e595c0e319f30ec02b0f32d0ad00aeecf81113556d4376282a4b59e90972f1f574bfc343901248155c35413c430573ecc6e762fb7acd8d0dc8848f1a178d336b52de5af32dcdee860d5c39606130caec8ff5976fded69edc8453ccce474ebd01253493f2c9756941e509ae0e8d2fbbb0073f0dabbace4e5bc9d59789e3c5ba9938d8946de4da2e759a60fee13dc79c68fcd77bcdc733fcddb259d5064fb0247b02045adf7e46bc0be5e720dff144d2c26e3efbbc94bbb44c51c671bc7187a653e0e616454e08c9088c44896dc0a3a1625710e079f79485f2a31a9bb0946098d62f30ad9a044001f737877674efa9dd7d47e85053913067669a802d4c9b05d37266b1160a37f3bdca734f928cbdcce0db02a45a9f225f873b67c6ca7e6f73cf0250c0b1d86e6470c9be3d89d6d886a3b1cb8c233a56bff729d4043b141ea721fc2de163d103402ada13bd7afee52e107325ccf92aa5a4701964048a460427abfdc528d3a3193fb1ca0a880f1704cb069d5b5c00094f9fdcf11757a9df3acf66c38d61d5ac0e2e5b18668e18b2b4604ea54659171fda4262977c7ab28d23bf12b231933eeb9b9a2943a960111412451831dd49227312daa2636c4958786eeffa75803a588deb956b843c8c1ff20d3dc429d7dab7599c1398356caa5216d12022327477612449fdbc1f8c4634cb355a07daddfbb8eef7f7e876119302d92ef4970a7ab406140a0d895d6610d210aad7fbabee6bc15e6bef1db454763cd1179e8f64a6f81cc70eaf60cbd59b77ddb4704fd6e43662ec61582db40a3fb534530a17031cb9caa2eec1455d205f82e4f5b3d2f432efa0e4612984daacb85865e04713f618e6a0132da4749b28a6d52756a304a40ee87e40e69f57ec0564711899f6c07b5d1eafa02b97b529366883fce4bebc3dbae06d50798b2c23ace598304ff7dba183a14c34ddb8c87ff3a5eb23bdee9ba2a7c9030dc22a66bda7763e5852df564d76614bebe88c2c876d1a47d5a82aa001b49dd6034c29f12569d415f3c7c7d6fcf27c48ac23ba8932966b8b9fee6d991f09e045286836db6e69515c748b69d519df28cb2725a3f3de5d3263041e01b6f5396670aacfce59db13d7cd5398513bec8204b10f5734e7aa08edd3fd84b8f0e6759772046b849213d6715c0c3e5d566f0781d0672c734f654b80b4a4ee20775efb6d1d5be34627dfed5d9c1deac93649a548f9e8d81ee3f82a3f351632c11226aa6385c262a4dfdc61e31544ab15b55564c0b0eca5676916298f3b59af3db88bf78048f66012b1893d617ca2a406aada1f2eb16090a4654fd117e48d5e506af16e8ccbf1d95dd22c847dfbef4b69ec60cb8b7c1c3d83e47145a68d4323597ca1a9767a9b8bc57d33df16e982a51efe2d638a49e421a74257b37286ca64166d2d46198c12ee965205ad48f8bf4ef12fcab248d", 0x1000, 0x1, 0x7, 0x4c4, 0x7, 0x3, &(0x7f0000001800)="40877473f81e45c402b52866723d9da816c8b13c7396e4d12ff7a54445b04a"}) unshare(0x20000000) utimensat(r1, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={{}, {0x77359400}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000001900)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000001940)={0x0, 0x943}, 0x8) syz_open_dev$sg(&(0x7f0000001980), 0x8000, 0x12000) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000001a00)={0x1, &(0x7f00000019c0)=[{0x1ff, 0x0, 0x7, 0x1ff}]}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000001a40)={@in={{0x2, 0x4e20, @multicast2}}, 0x0, 0x0, 0x47, 0x0, "949dc62bb956fe9d5b6cf1739e3d4c9b04926962330fea3ac6303ce31514ca90dc0dab37f5dcaef4d5bb2c6c24fb7f0ce924e69dba71655bb887ca69ddaa3d793b546ae0b294f21fb1cd2c83e1fe1121"}, 0xd8) r6 = dup3(r2, r5, 0x80000) read$rfkill(r6, &(0x7f0000001b40), 0x8) read$ptp(r4, &(0x7f0000001b80)=""/254, 0xfe) socket$inet6(0xa, 0x5, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001cc0)={&(0x7f0000001c80)='io_uring_create\x00', r1, 0x0, 0x9}, 0x18) 42.544118746s ago: executing program 2 (id=25): r0 = socket$inet_smc(0x2b, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x100000001) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fe0000067b8af8ff00000000bf1000000000000007020000f8ffffffb7030000fbffffffb7040000000000008500000071a99e3af5e624a6f7590a90"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup2(r2, r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r5, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) shutdown(r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='afs_cb_miss\x00', r6}, 0x18) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000180), 0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = syz_io_uring_setup(0x495, &(0x7f00000000c0)={0x0, 0x7076, 0x400, 0x1, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000640)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x8, 0x4, r8, 0x0, 0x0, 0x0, 0x80800, 0x1}) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f00000001c0)=""/42) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x49, 0x4, 0x81, 0x7ffbbffd}]}) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000000)=0x9) close(r0) 41.68233976s ago: executing program 2 (id=37): r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2800715, &(0x7f00000001c0)={[{@usrjquota}, {@user_xattr}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x22}}, {@errors_remount}, {@quota}, {@barrier_val={'barrier', 0x3d, 0xf8c}}, {@discard}, {@delalloc}, {@noauto_da_alloc}]}, 0xee, 0x43e, &(0x7f00000008c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x40030000000000) 38.942736394s ago: executing program 2 (id=47): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x1, 0x23a, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x242, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000000)="ca", 0x1}], 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x20400) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f00000001c0)=""/107) close(r2) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x9, @private2, 0x7fffffff}, 0x1c, &(0x7f0000001780)=[{&(0x7f00000001c0)="a7ec14ca5c1d3d34", 0x8}, {&(0x7f0000000300)="8aa6779b4309ed8769991aa0f0e1b91c876c59af8b0c3943837f5026f94d38d44c25a37682670a6c773413cd52f224c3801a007c6988b6438407cca1a480f724a56fd1a10b87539213f0728259a774ad763c6e62b667e6e6e3136d0458fd242e46777c1502c9d7af5b3e686523d44e1d685ab2f73201e6f6e8b40b7fb5c3a74cf6ea488412875eb69b214d9df8b48e1f8ca9506172951bf5b890d1fddf77eaf84d63353b436b89eabdaef4950d", 0xad}, {&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000000200)="5b909566b27c274fbbe8857134786ff27e1dc12897f1db3368a16877a77cbde8716b6c07976e36fda3821c7b444b0464347460fed5cf7ffe1f7ed943999697cabf8fdb394877388717d84786e2", 0x4d}, {&(0x7f0000000480)="d4558723db60513cab410fd52313d71d0d3c205dcbf0f9dbd44d5041101b8c88bff25bff0c361934318e62e4d00d644f50342b37a18abd8733c61d6d1ca7b18c6c0f5d50c147f9eb4419e63e9801f6cd0a395c6d2155e01adfdd3f615bedb34c0d84510ee9f17124d22000b63b52d91fe59a632c65a15869f2696e670ce80e260dbea6c3b35b1d08c27d62e48733f4330362e2160fb0ad6da640cc9a39", 0x9d}, {&(0x7f00000003c0)="de9a1e580fd03e57ed10a80ec6ef195f6bdb861fbac2d1e3fca0a96ee0c40123e7bcbf67b793efe366d3e5fec3b846527e86bae1638ca1c409d22e8771dbe2ee3a2e1bcfc1c10534e95faf1f0e52ea969d694a91c55e07e884916d436ba8aea3e19a5bcf9c65797c0ba9db0a5e", 0x6d}], 0x6, &(0x7f0000001800)=[@pktinfo={{0x24, 0x29, 0x32, {@private1}}}, @hopopts={{0x108, 0x29, 0x36, {0x88, 0x1d, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0x1}, @generic={0x68}, @hao={0xc9, 0x10, @private1}, @calipso={0x7, 0x28, {0x2, 0x8, 0x5, 0x8, [0x1, 0x7fffffff, 0x14c1, 0x7]}}, @generic={0xe, 0x85, "1f3a49248ff77eba7987a458d3515d0618e42c5591fdd460cd6d7bbd38822fa059e6ed41b99277413deb02a7028c7912834dab04f07fd6d9dac73a49a8ea9159d3cf4d7af0da3f8b7c38240c6a8097cbedfab98a64f0bd1979f02ddcb7221f37e5845e49566495be4a4c1ed120c12e3e54f56942b5b4d5c5743aa3eaaed6a7d5117e878218"}, @ra={0x5, 0x2, 0xfffc}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0xfd}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x2c, 0x10, 0x2, 0x9, 0x0, [@mcast2, @private1, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x40}, @private2={0xfc, 0x2, '\x00', 0x1}, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf}}, @hopopts_2292={{0x220, 0x29, 0x36, {0x33, 0x40, '\x00', [@generic={0x3, 0x22, "5d22f024185e5780cb6709c2b94f3f35caf1e7d7e7a9e43463ba51c9ac095f04e30a"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x79, 0xc3, "aea485ed397dd80efaca298b9dffd37f51946d0f48255f1424e15a2c622bea664c6c8926e84c8b5791db037da6f04d302b2c18ab62d28739cf21ef35e06428f271d8cb3f86aed49f6a7d3c3fa801c02dde988af24daf00e72f71dbacfb3636dcefc3223253d4c242bea6e52cfe8e3090df8a93c05a9931da236527ad0b026c88f940918fddc6f3deb9a13ba71c084a8fdec8c820d767c54273bbfeaa5b67706d627c4a85996a5d5b630a83bc03dc50ba6ffeddd90ed5b388323a9d1c68d1efb2592e9e"}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x3}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x30, 0xe3, "c927e5130204e8d8ec34418ad628af735ae9e6ef29618c4b6cbf8756dead5eca556650fcb606626390e44827bd78bf342e56c598e85f5fed23e1f2f766154525b9f195d73ee3045677560649b1eee6af16cf95705904a4b4946eb2912489a117fb3dc6cb7f44afe6a6a050bba6d996d639d46236f526c6d2a639ba44e756cf0bd6222de9ba53a420d675f4f5b18c6141f529570027b5b2c89eea6c9c7cadd4177ab57a787e0ad06b07cce46703b171ee53216796675d4512ba81bdba7d15fdf086bf06655eaf259c12153ea9878670b210f4139d1c244227f1842983193402381b0244"}, @calipso={0x7, 0x20, {0x0, 0x6, 0x31, 0x3, [0xfffffffffffffffc, 0x6, 0x4]}}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x1, 0x2, 0x0, [@private1, @mcast1, @private2, @local, @mcast2]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @rthdrdstopts={{0x38, 0x29, 0x37, {0x73, 0x3, '\x00', [@hao={0xc9, 0x10, @remote}, @jumbo={0xc2, 0x4, 0x2}, @pad1, @enc_lim={0x4, 0x1, 0xe}]}}}], 0x4b8}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001cc0)="d72bb3cd8e53fbade7a1056279677b1ea8086fb2171f924ebf993a6ea57c46993b09bd05d14d0773d4df4992f0705d204a1bb5b1648480acf9a3ca4bc0e0b69353e121f897742201680ce8122f1e9a5309d56dbb6e5754426673223cee8636f8f40d89d79420a5c7a9aa37e8176a9e6ba1d3d3612433868f88d8361151412f", 0x7f}, {&(0x7f0000001d40)="92392f2ec1c7933c48af8e60c43e91b7f84c5e0c2b4a7a0be8655a4458ecc6d7dae7651a907416d476c9904734b5a461bc05aa55014c0ae3abd354026eba04a09a719f80d794730bc8d321b645441fbe34537b90c5d9386720b605d093d328902a29f491b4da3bbfd232a8caaedc07f7f4e1ae1866d771436c95e6e2c2614cf2b5340bcdaa5bcc9f8ef65b44afdb77c20e7cf57467feb1cf7af296bbf25146587cc99bfd0fbbaf4ce4a72d2dd3244799d4136c2149be793642da7739971a99094fe307291d690c5891ee2cb3d71da89807daea2c4b61e46d635f6935684c42f085838a03c7ae470b", 0xe8}, {&(0x7f0000001e40)="a1185a81962584155beb250c5891de896725444437a90d3586697bb54eabdc4a0c8517e829f3695c5d177c1b375c1e25835576caf2f9ed75b60c52002dd4864fc6e0d4999bee549ddf920f7fe6407e9574af376715500f2711eb68a950f6655411bcecd001902131a6e5354499a8dae85f5fcdca907045488f2ee1fe7a8f113b2f53ac072bc8462c3916aac6708fc0cd2c94ed32e5f33ee08d9a5042b308913eae09aa5b82ea190355b1", 0xaa}, {&(0x7f0000001f00)="9f6dd4da21f954cb9343da5e3f6ca11e4fb11b0c891e70ec900aa1267e5f90041ba07f56ab97df8b2b83a754e033fc708975b6ed9c56213331ca7a726c8a71063f5a64be32af485c65952ee5da3202e9cfddc7e4541155b1a29ca31d5186478179cd33f13b53633f9bf6d21ccebf0455eb814ee6886f60f9e80d92b633631f809a6cbd01a0d8f909228bde7f5e8088034a8c3dc0d65e4c38ad6744caf973c62269c30c86bed5e22273827542a73bbab7cf57e834e0500a3a767542ada17441e06147a684a216d4623bc04ff26e78728c49373bad9ef085", 0xd7}, {&(0x7f0000002000)="5274d9a8ede6e0e955931c1a84e2132e60bdae2d7e3d39200801e1384feeea9e93e1d9a533ed865d93ad690d4af6f38a99dbe925e323aac023191f40b8891f0ed4a03877d3c2d55581afe0b1ae9b16859b5500b91f6336c46b2e32b28ed46cd99b0e2b517768057057784ee848d6673d9725ce382a00fc9b9e139aa97257d85a0995e38c027ddb6598b9369b69d27a3d9ab2d801d22c29a7fa061683ed385208181bdb47f5462f62bae6012179afddf036af1f40bbb06ec61f941e497100e40cb729e042edec63b4c2a60c184ed2bb", 0xcf}, {&(0x7f0000002100)="79407eedd9146424e0406b08", 0xc}], 0x6, &(0x7f00000021c0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x32, 0xa, 0x0, 0x6, 0x0, [@private1, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, @local, @private2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0xf}}, @dstopts={{0x40, 0x29, 0x37, {0x33, 0x5, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x2, 0xf320, [0x68f]}}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x2f, 0x0, '\x00', [@ra={0x5, 0x2, 0x3}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @rthdr={{0x28, 0x29, 0x39, {0x2f, 0x2, 0x0, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfff}}, @hopopts_2292={{0x2f8, 0x29, 0x36, {0x2e, 0x5b, '\x00', [@calipso={0x7, 0x20, {0x1, 0x6, 0x8, 0xf7, [0x219, 0x5, 0x7fff]}}, @pad1, @calipso={0x7, 0x10, {0x2, 0x2, 0x1b, 0x0, [0xb]}}, @generic={0x4, 0xfa, "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"}, @generic={0x31, 0x9e, "4085fabce8107d31db64904395a9e61ffbb6be7d319fa8d51e5f60072261e4cfb22134442e09112ebe65edeb9fb6121b23657cd30f179580f415b239e188c94168f888fc61f7898270cbf94624780fcb3e7695786e0bd4f7bed4e3f0af1e8f3caa3e425dc8510296bf507ad553e99e96b076537fb1d30d5a6ac2d37a3ed4b37c9a8ff8cb7111ede8a8b7782001c624fc9ca63669e3bace8528a85465767e"}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x9, 0x51, "81318802fe600c56a45302a1b434cd9af53dc03364e33f1c850a5194d02579c5d0bbad664cdd8ac27e49b783ee0858aa2c6c4c4dab14d27ed1ee46fcb271d527b3381b902d84023ab0fe23e23c2b712bfd"}, @generic={0xe, 0xaf, "dbc85a8d66f74f4839010e758248abb9ea277b597a5beb2efe140b69f40d70bc5931ebe8a95ac8b18eff9483bc763b1a115f92212397c354ba949d5db111317e38ce6d10e558ab956f2031df0664bda30254c49ac413b7c50419aaca5332e34c2b8b5f9d30dbea91ac1b4835469e742fb1bc1d0e9557824836e1598916db307e52f956802dc67442a05d7e1b3155b800b9a5d442fc318014d29aaebb299130088a14fb36b57cb5a3b04da50fb9d4ca"}]}}}, @hopopts={{0xe8, 0x29, 0x36, {0x88, 0x19, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0x877d, [0x6, 0x7]}}, @generic={0x13, 0x2d, "a6c65e44f85fcae61e9a8c00dc64342f868e6a893e2b7fe668d82a1d444386864433ce73e305a1a464e2a90bef"}, @generic={0x2, 0x6f, "5de873d081f79c68f852da25c6f397e4efe90976746ef7c75aa8a6b98fffa069ba8505d1c985dca97ea2485a3ea5e65642b8da998ad1f7f455630006f26bcdb6dedaad718fd6f65bac976984837ecf1f8c5e798b13d1f67628a4fa5bae00c9c509f1617ecb3334bb903cf2b30eff17"}, @enc_lim={0x4, 0x1, 0xf2}, @jumbo={0xc2, 0x4, 0x2}, @jumbo={0xc2, 0x4, 0xff}]}}}], 0x530}}, {{&(0x7f0000002700)={0xa, 0x4e23, 0x6, @private2, 0x7}, 0x1c, &(0x7f0000002840)=[{&(0x7f0000002740)="a97695e8f3f48a60a653cedde1b9f71728b02156b5bca1aa22149fa04f1ee2abaf7e1cbdefd425", 0x27}, {&(0x7f0000002780)="2819b3737a7c6abb327f3bcbd07d4928f3cbc2faea2fc9ad", 0x18}, {&(0x7f00000027c0)="b4a830c9aaae50f393e128898064e77b7b9e75cc8984a44025173608425999af", 0x20}, {&(0x7f0000002800)="f19515fd8592f4673a08a0a7706138b4004072a47d5a6239a08d647dc7a1f3c7f5f464a4d11f3ba8cc02833a5a", 0x2d}], 0x4}}, {{&(0x7f0000002880)={0xa, 0x4e22, 0x6, @loopback, 0xa}, 0x1c, &(0x7f0000002940)=[{&(0x7f00000028c0)="a78db675cc1c3deeaaf4d16b93f80118ca4549a1066c4b516257a20f6717f4d735c54a9269b3dd8f8442caf14891bc8d2282e418f0dcf2e3904fff02854aa685defb90d2fb7a752f20d8e8cd55082e2440cde009274cf36a6a8d2fe0e314fdacddec", 0x62}], 0x1, &(0x7f0000002980)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7f}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80}}, @dstopts_2292={{0x10b8, 0x29, 0x4, {0x11, 0x214, '\x00', [@generic={0x3, 0x1000, "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"}, @jumbo={0xc2, 0x4, 0x8}, @generic={0xc6, 0x58, "1af2b53b87120b07d376110c4716b570a8628c932733194629d097059baf669c0f308df81ce18ede5a4dc0c3fa60468dcbdfaccabb821d94273e1fb58bc04e0d8dbbdd90b57558d076608e24b58e888eb5beecab63a90bac"}, @pad1, @jumbo={0xc2, 0x4, 0x10001}, @enc_lim={0x4, 0x1, 0x7}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @ra={0x5, 0x2, 0x5}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x16, 0x4, 0x1, 0x0, 0x0, [@private0, @loopback]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x2, 0x6e, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, @private1, @remote, @empty, @ipv4={'\x00', '\xff\xff', @empty}, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}], 0x11d8}}, {{&(0x7f0000003b80)={0xa, 0x4e23, 0x80, @local, 0x5}, 0x1c, &(0x7f0000003c40)=[{&(0x7f0000003bc0)="e880f73e754b78c2041b615a6d584bd1a9c6aa4dba4dc409f87c44db77f47a80707008a58b9e65570896eb10f9bfb2e7ffd8b5e05a0b5f223c850b5750bcf25290714e7243c59422fe1ceacf94c1806d54c05655f922ba8208e93fa04d925dbfd71c", 0x62}], 0x1, &(0x7f0000003e80)=ANY=[@ANYBLOB="14000000000000002900000008000000001000000000000014000000000000002900000034000000ff010000000000008000000000c8cda315c072860000002900000037000000320c0000000000000109000000000000000000084de275399e954d5aa687caf3d605e96cfad9865bd3be3f66803b7d245658af9400a9b1ff5f83ac8920f3ee8ba6a680c907e73347dc389f9ee1feeebdf85133509d0b17325c6f47ffdffa6d70af9e0502af0004010900000000000000"], 0xb0}}], 0x5, 0x40000) 38.54726115s ago: executing program 2 (id=54): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x0, 0x6, 0x100009, 0x8, 0x3ff}) read(r0, &(0x7f00000001c0)=""/132, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYRES16=0x0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91103e000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x10, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0xa48a, @ipv4={'\x00', '\xff\xff', @loopback}, 0xf6f}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x14, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r5}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) fremovexattr(r6, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') connect$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x100000df, @empty}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) keyctl$chown(0x4, r2, 0xee01, 0xee00) 38.140587617s ago: executing program 2 (id=57): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000d67c0ef6d3d3b9f200e7057b8af8ff00000000bfa200000000000007028000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r5}, 0x18) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r6, 0x400, 0x1) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\xc0\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7}, 0x18) 38.140237307s ago: executing program 32 (id=57): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000d67c0ef6d3d3b9f200e7057b8af8ff00000000bfa200000000000007028000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r5}, 0x18) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r6, 0x400, 0x1) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\xc0\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7}, 0x18) 1.956893678s ago: executing program 5 (id=746): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000c0c00)={0x2, [], 0x10, "cfdd4711be3df6"}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd"], 0xffe) r4 = syz_io_uring_complete(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="00000000003213133ede2368435245d2a9f67e000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x2c, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 1.83581772s ago: executing program 5 (id=748): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005", 0x15}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000340)="17f3374fc293e48a259a06a718e1dd51769b128089d2e6331f382d3b4dcd07ae9d752043aa33b6309f9b5a8b154862bb9a3ead2a841f104767a07a6ae45543ec8a9db84315c9b2c291857a5cda2ff1604610d9b61904e1537af816cba16d3197b4769bbaae27063212361ee5d1683f31f0c2eca58cab84ffe9e4f1a858ee38924ebe72b7278641b0cbf5708b398b8b78e60281006cee48b35de48da5a7e00f2986a711c48e1221a1ffba5f3f8fdb0488b9e005dfab15365642588c9e57d3562e3cd53dc15c724d287d4f4efe57ba04a97c87516c0b71", 0xd6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x171b}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@local, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) 1.775804921s ago: executing program 5 (id=751): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000d67c0ef6d3d3b9f200e7057b8af8ff00000000bfa200000000000007028000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r6, 0x400, 0x1) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\xc0\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7}, 0x18) 1.404447507s ago: executing program 3 (id=765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0xec}) 1.334162128s ago: executing program 3 (id=767): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x8) 1.279154269s ago: executing program 3 (id=770): r0 = socket$netlink(0x10, 0x3, 0x6039e2456ca7275b) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='cgroup\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000000}, 0x18) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0xc0f85403, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000600)={"f02fa338cc8f536c1a32c94b6ec2983f", 0x0, 0x0, {0x4, 0x7e6}, {0x1000, 0x4}, 0x2, [0x1, 0x1, 0x9e28, 0x1000, 0x9, 0x8, 0x5fe, 0x52, 0x5e6, 0x4, 0x1, 0x71ac3fa4, 0x8000, 0x7fffffff, 0x9, 0x8]}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xd, 0x10, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r6, @ANYRESHEX=r3], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9f8}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='sys_enter\x00', r7, 0x0, 0x1000000002}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001fc0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000001180)={r9, 0x5, 0x1000}) ioctl$BTRFS_IOC_SCRUB(r8, 0xc400941b, &(0x7f0000000b00)={r9, 0x2, 0x5b}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000a00)={{r1}, r5, 0x1c, @unused=[0x8, 0xffffffffffff0000, 0x8, 0x7f], @devid=r9}) writev(r1, &(0x7f0000001b80)=[{&(0x7f00000005c0)="c9", 0x1}], 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002"], 0x8840) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, 0x1480, 0x2104}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0200100000070000000000302e00"], &(0x7f00000003c0)=""/46, 0x28, 0x2e, 0x1, 0x3, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e00000000800000060000000200000000000000", @ANYRES32, @ANYBLOB="000200"/20, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="00000000050000000300"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r6, 0xffffffffffffffff}, 0x4) statx(0xffffffffffffff9c, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800f38b366e00000000000005000000180000000600000000000000060000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xe0000000, 0x81, &(0x7f00000002c0)=""/129, 0x40f00, 0x0, '\x00', r11, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[r2, r13, r1, r6, r2], &(0x7f0000000780)=[{0x3, 0x3, 0xa, 0x6}]}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x30}}, 0x0) 1.25790756s ago: executing program 0 (id=772): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_io_uring_setup(0x6de4, 0x0, &(0x7f00000000c0), &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000740)={0xf8, r4, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfef5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x21}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xaab}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x800}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe8f3}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd63}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4001}, 0x4000040) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r6, 0x0, 0x4ab}, 0x18) r7 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854529f45826cb35be51682e30944313e2ca73845d177d601880221daeccfda56b75cfe2bad94f000066b2ddab614fec2236da7d88ea07c9ee"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r7, &(0x7f0000000180)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000002500)={0x628, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x5f7, 0xa8, @random="7be684b00fd2065fe5615d7ec3226c1926f0a965332ec64a6ac28445b948e82f00c07a9a21a9d56b6bc0ef69d50d368d19e43c8888a4fdeb3e1a66b2591f0a119832d92e7f17be855903c8cb99a957816d6c65e1d0e70f23d6a0854155e08a58d41ecbc0e39017a4f850804ffb3d408ce8c1d1156ea01fc990b0ccd88654ed5ee7167d955daf44fcbdb3ad32759c8b96aca5d6f78083ab328a265c023977a9f50945ad51ca05d61f5fc39dd67ca9d291710eef11942497d2424df4c2e5c441d2f9641ec8e749295042963193ea3deee8ba9aad2d6655d158bebd4cdcb99d4b903c74c3149da5967bf9f85852f59e0fcaf0640253e28bc03187b20e9f7b15b9d9c3a4308cb7475807df2c9f3658fedb468cce60288f54f5169e5b036c8437d7713756ce58f9b3a991a3ebb94c3cebbaaaa4a83217d49cacfeddad96d601989d91163b0d9ac587a4e40cc697792455d5a7abae30c4ed9a74529322e08013bd6b91bf9eb0123eb67cff1555e5a1addd4384075a6c293ed67d33940aa463893a2b6a9a223d52af1ef9c1e732449618b2fe0d5edd47ec51987b9d467e6f9b6beb3d7694519c39fb8367f37a79d59d721c6dcc7edb8d545bd0403ed8615adc45fa950abddb5b264e71351fbb70c59b20fbaa0bd29e088e2044f5bcc467f09f7aad1bda371abe66537053045bcc5b8e44122533fdcac3ca23fd7bd0de9ea5ffff4bde056fa066b3909ac3fae789568c34c80202f2b64b5bb2392ce7fe289f1beb4cbc5f0228de85c969306b2117dd6bcd8f0c0e8a6fbb4644cc01f93183cf780b759b1c1cc5a0785487310746caa54322abfe75ac6fde05e90418b09902e09caca432508d305e4097f3f95ab3f1a0a4a37fd691826804e3400401e6c29a9a9eea960d434482f58dd21441e8f483737970bfc7454fd7aac6f6ac0a38db4de49eb622c4963f380cc6030f1ed4a00f4a0945c26caae3f9326d210ba63d94ffba2b7efd7541ea499b71e57274398f58b1561985877ecc8ef0c9c66d3bc5d087484bef0e5992215034653e6540b26f7299663c0644c8800d123ee9fea3de2bb8ce9506ed072e78ab1c8dd0fa1cda937c7522a9d2dd50135fb2fbd8286d0547dc4c3b51759bfc67107e32a5db896f7d2fbb8a58da3477fab05644da9bc1ee296df49709191f49824d8358ecda47fbf289d5c4171b408b801e19820315b8b8ba55692159dc84c11addfc964d420bf8dd3838389a87ebbe1fee58ee948c0a98b5b75d25dc7af10ee850c0fd97ea96a5d27ce6d78aa440b1eb779ac92a7e131f968a5a74110e51de805c716f4e9a9016fe73c709f38bc9704570fcf9617862b2f6808f5dc6b0542c49930c70239d0bbc9379a16808c1817d9c5672da4762a5094333bc3a9145f022a00ae1a0e7c02f22f8141e61feed1bb76f693c85feb9028731df0e0552797cd9191c470ec150f21d57015540b273ba850905ff775d1039f53cee58bb1c3edd9a2b6e85006c0d4728760c776d36fb816d9b6f9e9f769a984ed66ecf363874b56c92b816a9b52ea01dba84fc38a92e4c1d134618a75668aa26999888d510f620b02ce7d2aa1dc60f9f4210e29dea5cde76776538aed0792909207d54248457e7ede6fd732257c4f72caf92222bb4e8897b7da39705ca99e4c728a1f4f14d25c15c778cefee505b8659e93cce7d200f83fd4d5f625a74664b2a18de0f73ad25dc57a0a3b093ed5bd216a3972533dd9d42d6954d774d752483ce562e188bff1505c60091e444ef894b9a8cb7ad2cfa598a3ff94bd0d74cf2f80a70dcb2d484c3845bef7b3040951c8ea3967be853c7be235fd34b896819688e861d122cd43e27b5a4cea576e5ead249c84eed457240a4bca9291c374c6ea7d318b0be58677b8f8da2bdcfd5dd04b74d08c070d40b3c7c3c3579a4f6ffa7580dcbd5891a0226b05cc4c830d3e8a273433ea20eba31a7ed46340fdee2abd28acc567b8e4b331385584587f698dd8a5ae9a739dc07adfeb9cee19d3c424ebe19b3209aa4292b44d4310cc901fc84df1194d750fe660c0d8db1427b910ef304081440ae535d2759a4d19dda4af6af9d7f5f29635117a9fb98e3fb45f9914420f8f487cd00bd01aeceac2a27564b0e370cc9564a3c05a2303fc7f03d9a5a"}]}, 0x628}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") 1.145525851s ago: executing program 0 (id=774): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='-', @ANYRESHEX], 0x27) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa0882e94edcab000a40000000020900020073797a3100000000050001"], 0x4c}}, 0x4000080) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000780)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r4, &(0x7f0000000100), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r4, &(0x7f0000000000)={0x1d, r5}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) timerfd_gettime(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.093956432s ago: executing program 4 (id=775): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000ac0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb0108520800072a", 0x2a}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000900)={{0x80}, 'port0\x00', 0xf3, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x4, 0xf8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x3, 0xe1d6, 0x0, 0xff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x9}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.023993973s ago: executing program 4 (id=777): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x67) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) close(r0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) r2 = syz_io_uring_setup(0x254d, &(0x7f00000004c0)={0x0, 0x7c87, 0x800, 0x1, 0x33}, &(0x7f0000000080), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000500)=ANY=[@ANYBLOB='S\x00\x00\x00\a'], 0x53) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) 964.738994ms ago: executing program 4 (id=779): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000c0c00)={0x2, [], 0x10, "cfdd4711be3df6"}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd"], 0xffe) symlinkat(0x0, 0xffffffffffffff9c, 0x0) 961.045284ms ago: executing program 1 (id=781): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r6, 0x101) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10, 0x0, 0x20000000}, 0x18) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0xd, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0xc4) 950.969755ms ago: executing program 5 (id=782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r2, 0x0, 0x8) 918.127975ms ago: executing program 5 (id=783): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000c1d8000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x20, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 888.340076ms ago: executing program 3 (id=784): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) getsockopt$inet6_mreq(r0, 0x29, 0xe0de964deb6b9d9a, &(0x7f0000000240)={@mcast2}, &(0x7f0000000380)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4088, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000f7ffffff000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"/144]}, 0x108) 887.155775ms ago: executing program 4 (id=785): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100"], 0x28}}, 0x8000) 837.765166ms ago: executing program 1 (id=786): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffff"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 837.350316ms ago: executing program 3 (id=787): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900), 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) r3 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0x125a, 0x10100, 0xffffffff, 0x100000, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) io_uring_enter(r3, 0x44fd, 0x3, 0x1, 0x0, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedreceive(r8, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000005c0)}, 0x88d4) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010026bd700021dcdf10270000000c0001800800", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 782.368077ms ago: executing program 4 (id=788): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000ac0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb0108520800072a", 0x2a}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r3, 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x10000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000000900)={{0x80}, 'port0\x00', 0xf3, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x4, 0xf8}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x3, 0xe1d6, 0x0, 0xff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x8, &(0x7f0000000000)=@raw=[@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x96}}], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 781.491097ms ago: executing program 4 (id=789): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x48e02, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) syz_clone(0x11284000, 0x0, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240)="6027c0c19ea1910a4a") setns(0xffffffffffffffff, 0x80) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={0xffffffffffffffff, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) read(r1, &(0x7f00000003c0)=""/4096, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xf, 0xc}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x5}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5d2cef9e5d8c731f}, 0x4000c00) 729.989778ms ago: executing program 1 (id=790): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000040000000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000f9ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001900b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0xffffcb69, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syncfs(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0xf3, 0x1000, &(0x7f00000003c0)="3c1f9d08ea67372704b63bb758123c0661836fd02d7f0e5cefae6f20cae35b45d1d943cc12c71e74a760647656c201b8a158a8a73fbf740da8ab556c416c19497a84d1e3402ef4007bcb18597f2c7947510df97fa3e35901d70260fc81356f29de8118a44138a03da1ae8e9cb35532ea83c93d4da4c8dfc6306523e1b8ff9fc3c1aa526d2b843226f8c45ef6e820aa39d3e94cbadae753556faa059dd12ce4d454da5e378c82b32c3551317e71b06ec56cf092be8b3851d12b3135c6443655aca1e116b89938a1ef259bd46613918e133e2373199f34d51ace63be81eb261dc8c537cc09316987165ed7cbe498525c18c55575", &(0x7f0000000c00)=""/4096, 0x5, 0x0, 0x79, 0xfc, &(0x7f0000000640)="bf89a4ac51db3dc7dbdd421b53ec1acb25531de473c8c5c9d001363ced9762c7a8ca799b3bc6ec4a9dbf1900f29ad2aa4ac796c5fae0478909be25e076f550a0bffb0a00e8f932a14a934298ac3de61de42aace6bfc45fe69bb7eda26305ea8314997f13c1dcf4748caa71da392b40e34b488884dfe8c37191", &(0x7f0000000880)="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", 0x3, 0x0, 0x6}, 0x50) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200000, 0x20) openat(r8, &(0x7f0000000980)='./file0\x00', 0x0, 0x1) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9, 0x0, 0x8}, 0x18) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x42, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 705.557959ms ago: executing program 1 (id=791): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xcd20}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044081}, 0x0) 689.619189ms ago: executing program 5 (id=792): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000d67c0ef6d3d3b9f200e7057b8af8ff00000000bfa200000000000007028000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) r6 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r6, 0x400, 0x1) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\xc0\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7}, 0x18) 689.110469ms ago: executing program 1 (id=793): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="8b3329bd7000000000000500"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r5, 0x101) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r9, 0x0, 0x20000000}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0xd, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0xc4) 644.686499ms ago: executing program 1 (id=794): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) 435.880213ms ago: executing program 0 (id=795): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x20, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x93}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) (fail_nth: 5) 12.708049ms ago: executing program 0 (id=796): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESOCT=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1a, 0x1a, 0x5, [@datasec={0x8, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x80000001, 0x9}], "48df"}]}, {0x0, [0x0, 0x30, 0x61]}}, &(0x7f0000000680)=""/192, 0x39, 0xc0, 0x0, 0x1}, 0x28) 12.083669ms ago: executing program 0 (id=797): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x5, 0x400, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r6, 0x101) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) symlink(0x0, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10, 0x0, 0x20000000}, 0x18) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000240)={0x0, 0xd, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="380000000314010028bd7000f6dbdf250900020073797a31001800000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x884}, 0xc4) 8.678929ms ago: executing program 3 (id=798): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) fallocate(r2, 0x0, 0x0, 0x8000c62) r5 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r5, r5, 0x0, 0x100000800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r6 = socket$inet_smc(0x2b, 0x1, 0x0) eventfd2(0x9, 0x100001) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 0s ago: executing program 0 (id=799): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_subtree(r0, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x20, 0x0, 0x0, 0x40, 0x0, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) kernel console output (not intermixed with test programs): T3609] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #16: comm syz.0.34: mark_inode_dirty error [ 40.302901][ T3609] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.34: corrupted inode contents [ 40.316996][ T3609] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.34: mark_inode_dirty error [ 40.329414][ T3609] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.34: corrupted inode contents [ 40.343380][ T3609] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 40.358522][ T3616] tipc: Started in network mode [ 40.361069][ T3609] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #16: comm syz.0.34: corrupted inode contents [ 40.363523][ T3616] tipc: Node identity ac141413, cluster identity 4711 [ 40.363911][ T3616] tipc: New replicast peer: 10.1.1.2 [ 40.375946][ T3609] EXT4-fs error (device loop0): ext4_truncate:4597: inode #16: comm syz.0.34: mark_inode_dirty error [ 40.382295][ T3616] tipc: Enabled bearer , priority 10 [ 40.406969][ T3609] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 40.418367][ T3609] EXT4-fs (loop0): 1 truncate cleaned up [ 40.424685][ T3609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.437891][ T3616] loop3: detected capacity change from 0 to 1764 [ 40.441420][ T3609] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.465640][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.36'. [ 40.529818][ T3619] loop2: detected capacity change from 0 to 512 [ 40.537321][ T3619] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 40.548571][ T3619] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 40.558875][ T3619] EXT4-fs (loop2): group descriptors corrupted! [ 40.595396][ T3616] syz.3.36 (3616) used greatest stack depth: 9984 bytes left [ 40.812510][ T3638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.38'. [ 40.825662][ T3637] loop3: detected capacity change from 0 to 512 [ 40.832252][ T3637] ======================================================= [ 40.832252][ T3637] WARNING: The mand mount option has been deprecated and [ 40.832252][ T3637] and is ignored by this kernel. Remove the mand [ 40.832252][ T3637] option from the mount to silence this warning. [ 40.832252][ T3637] ======================================================= [ 40.871907][ T3637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 40.883011][ T3637] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.891760][ T3637] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.38: bg 0: block 248: padding at end of block bitmap is not set [ 40.908727][ T3637] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.38: Failed to acquire dquot type 1 [ 40.921762][ T3637] EXT4-fs (loop3): 1 truncate cleaned up [ 40.930455][ T3637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.131552][ T3609] syz.0.34 (3609) used greatest stack depth: 9768 bytes left [ 41.187528][ T3643] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 41.213758][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.250148][ T3646] netlink: 'syz.4.39': attribute type 13 has an invalid length. [ 41.658922][ T23] tipc: Node number set to 2886997011 [ 41.666983][ T3637] syz.3.38 (3637) used greatest stack depth: 9576 bytes left [ 41.753264][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.760664][ T3646] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.769041][ T3656] random: crng reseeded on system resumption [ 41.839391][ T3646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.851028][ T3646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.021778][ T3646] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.030943][ T3646] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.039960][ T3646] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.048920][ T3646] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.449122][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.466799][ T3680] netlink: 20 bytes leftover after parsing attributes in process `syz.4.43'. [ 42.532734][ T3715] netlink: 'syz.3.44': attribute type 13 has an invalid length. [ 42.603483][ T3715] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.610815][ T3715] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.663444][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.674608][ T3715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.748405][ T3715] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.757584][ T3715] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.766711][ T3715] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.775634][ T3715] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.817099][ T3721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.45'. [ 42.933472][ T3728] netlink: 48 bytes leftover after parsing attributes in process `syz.0.45'. [ 43.278787][ T3813] program syz.1.48 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.305332][ T3814] loop2: detected capacity change from 0 to 512 [ 43.327622][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 43.327641][ T29] audit: type=1400 audit(1752667061.341:569): avc: denied { mount } for pid=3812 comm="syz.2.47" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.357384][ T3816] tipc: Started in network mode [ 43.362313][ T3816] tipc: Node identity ac141413, cluster identity 4711 [ 43.370296][ T3816] tipc: New replicast peer: 10.1.1.2 [ 43.375717][ T3816] tipc: Enabled bearer , priority 10 [ 43.383404][ T3814] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0005) [ 43.391337][ T3814] FAT-fs (loop2): Filesystem has been set read-only [ 43.446350][ T3816] loop1: detected capacity change from 0 to 1764 [ 43.479377][ T29] audit: type=1400 audit(1752667061.481:570): avc: denied { mount } for pid=3815 comm="syz.1.49" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 43.501685][ T29] audit: type=1400 audit(1752667061.491:571): avc: denied { append } for pid=3812 comm="syz.2.47" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.502483][ T3816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 43.572015][ T29] audit: type=1400 audit(1752667061.571:572): avc: denied { setopt } for pid=3829 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.591453][ T29] audit: type=1400 audit(1752667061.571:573): avc: denied { write } for pid=3829 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.592798][ T3819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.50'. [ 43.610787][ T29] audit: type=1400 audit(1752667061.571:574): avc: denied { connect } for pid=3829 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.638923][ T29] audit: type=1400 audit(1752667061.571:575): avc: denied { name_connect } for pid=3829 comm="syz.3.52" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 43.660914][ T29] audit: type=1400 audit(1752667061.571:576): avc: denied { create } for pid=3829 comm="syz.3.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 43.680178][ T29] audit: type=1400 audit(1752667061.571:577): avc: denied { ioctl } for pid=3829 comm="syz.3.52" path="socket:[8544]" dev="sockfs" ino=8544 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 43.709617][ T29] audit: type=1400 audit(1752667061.631:578): avc: denied { ioctl } for pid=3812 comm="syz.2.47" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x451a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 43.800947][ T3839] SELinux: Context system_u:object_r:logrotate_var_lib_t:s0 is not valid (left unmapped). [ 43.826711][ T3839] netlink: 'syz.1.55': attribute type 1 has an invalid length. [ 43.834311][ T3839] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.55'. [ 43.902095][ T2158] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.906372][ T3834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.53'. [ 43.959864][ T2158] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.999391][ T2158] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.050468][ T2158] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.137467][ T2158] bridge_slave_1: left allmulticast mode [ 44.143191][ T2158] bridge_slave_1: left promiscuous mode [ 44.148925][ T2158] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.170776][ T2158] bridge_slave_0: left allmulticast mode [ 44.176750][ T2158] bridge_slave_0: left promiscuous mode [ 44.182495][ T2158] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.276954][ T3854] netlink: 'syz.1.59': attribute type 13 has an invalid length. [ 44.288509][ T2158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.298600][ T2158] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.308406][ T2158] bond0 (unregistering): Released all slaves [ 44.378948][ T3854] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.386152][ T3854] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.451427][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.462406][ T3854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.497085][ T2960] tipc: Node number set to 2886997011 [ 44.503906][ T3854] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.513146][ T3854] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.522328][ T3854] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.531516][ T3854] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.558133][ T2158] hsr_slave_0: left promiscuous mode [ 44.564125][ T2158] hsr_slave_1: left promiscuous mode [ 44.570498][ T2158] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.578287][ T2158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.588643][ T2158] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.596479][ T2158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.608106][ T2158] veth1_macvtap: left promiscuous mode [ 44.613875][ T2158] veth0_macvtap: left promiscuous mode [ 44.620585][ T2158] veth1_vlan: left promiscuous mode [ 44.626249][ T2158] veth0_vlan: left promiscuous mode [ 44.700351][ T2158] team0 (unregistering): Port device team_slave_1 removed [ 44.710594][ T2158] team0 (unregistering): Port device team_slave_0 removed [ 44.929543][ T3845] chnl_net:caif_netlink_parms(): no params data found [ 44.963647][ T3893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.66'. [ 45.002218][ T3893] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.031027][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 45.048043][ T3845] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.055284][ T3845] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.086054][ T3845] bridge_slave_0: entered allmulticast mode [ 45.093474][ T3845] bridge_slave_0: entered promiscuous mode [ 45.105499][ T3913] lo speed is unknown, defaulting to 1000 [ 45.110187][ T3845] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.118466][ T3845] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.125782][ T3845] bridge_slave_1: entered allmulticast mode [ 45.133264][ T3845] bridge_slave_1: entered promiscuous mode [ 45.140837][ T3893] bridge_slave_1: left allmulticast mode [ 45.146643][ T3893] bridge_slave_1: left promiscuous mode [ 45.152452][ T3893] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.165032][ T3893] bridge_slave_0: left allmulticast mode [ 45.170818][ T3893] bridge_slave_0: left promiscuous mode [ 45.176689][ T3893] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.228441][ T3913] lo speed is unknown, defaulting to 1000 [ 45.234856][ T3913] lo speed is unknown, defaulting to 1000 [ 45.242202][ T3913] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 45.251236][ T3913] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 45.262221][ T3845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.272647][ T3913] lo speed is unknown, defaulting to 1000 [ 45.282320][ T3845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.292084][ T3913] lo speed is unknown, defaulting to 1000 [ 45.301724][ T3913] lo speed is unknown, defaulting to 1000 [ 45.327446][ T3845] team0: Port device team_slave_0 added [ 45.346797][ T3845] team0: Port device team_slave_1 added [ 45.386645][ T3913] lo speed is unknown, defaulting to 1000 [ 45.403186][ T3845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.410280][ T3845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.436359][ T3845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.453245][ T3913] lo speed is unknown, defaulting to 1000 [ 45.461193][ T3845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.468318][ T3845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.494436][ T3845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.556267][ T3946] netlink: 'syz.0.75': attribute type 10 has an invalid length. [ 45.625430][ T3946] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.640510][ T3845] hsr_slave_0: entered promiscuous mode [ 45.662709][ T3845] hsr_slave_1: entered promiscuous mode [ 45.685735][ T3845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.689445][ T3956] loop1: detected capacity change from 0 to 2048 [ 45.700763][ T3845] Cannot create hsr debugfs directory [ 45.707993][ T3936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.74'. [ 45.728963][ T3956] ext2: Unknown parameter 'smackfsdef' [ 45.800226][ T3963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 45.818265][ T3964] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.851191][ T3969] siw: device registration error -23 [ 45.860370][ T3963] bridge_slave_1: left allmulticast mode [ 45.866061][ T3963] bridge_slave_1: left promiscuous mode [ 45.871990][ T3963] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.889032][ T3963] bridge_slave_0: left allmulticast mode [ 45.894808][ T3963] bridge_slave_0: left promiscuous mode [ 45.900672][ T3963] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.952903][ T3964] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.008658][ T3845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 46.024309][ T3845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 46.033835][ T3845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 46.047731][ T3964] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.066250][ T3845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 46.110873][ T3964] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.149828][ T3845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.169111][ T3845] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.187183][ T153] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.194414][ T153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.218092][ T3964] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.229574][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.236703][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.253932][ T3964] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.267230][ T3964] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.282072][ T3964] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.296357][ T3845] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.306791][ T3845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.354801][ T4012] netlink: 'syz.4.84': attribute type 1 has an invalid length. [ 46.362577][ T4012] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.84'. [ 46.427504][ T3845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.497113][ T4029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 46.513718][ T4029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.85'. [ 46.513748][ T4029] bridge_slave_1: left allmulticast mode [ 46.513762][ T4029] bridge_slave_1: left promiscuous mode [ 46.513910][ T4029] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.523236][ T4029] bridge_slave_0: left allmulticast mode [ 46.523255][ T4029] bridge_slave_0: left promiscuous mode [ 46.523406][ T4029] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.565254][ T4039] siw: device registration error -23 [ 46.576865][ T4040] netlink: 'syz.0.94': attribute type 1 has an invalid length. [ 46.584495][ T4040] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.94'. [ 46.642566][ T4046] tipc: Started in network mode [ 46.647565][ T4046] tipc: Node identity ac141413, cluster identity 4711 [ 46.664255][ T4046] tipc: New replicast peer: 10.1.1.2 [ 46.669796][ T4046] tipc: Enabled bearer , priority 10 [ 46.702532][ T4046] loop4: detected capacity change from 0 to 1764 [ 46.825974][ T4072] netlink: 'syz.4.89': attribute type 10 has an invalid length. [ 46.844334][ T3845] veth0_vlan: entered promiscuous mode [ 46.858856][ T4072] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.880253][ T3845] veth1_vlan: entered promiscuous mode [ 46.916032][ T3845] veth0_macvtap: entered promiscuous mode [ 46.928356][ T3845] veth1_macvtap: entered promiscuous mode [ 46.960615][ T3845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.976432][ T4095] netlink: 'syz.1.92': attribute type 10 has an invalid length. [ 46.985848][ T4095] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 46.998593][ T4091] siw: device registration error -23 [ 47.001263][ T3845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.027126][ T3845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.035909][ T3845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.044818][ T3845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.053772][ T3845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.138026][ T4109] netlink: 'syz.5.58': attribute type 10 has an invalid length. [ 47.151866][ T4109] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.152430][ T4112] program syz.1.97 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.220814][ T4121] loop1: detected capacity change from 0 to 128 [ 47.760326][ T4154] loop3: detected capacity change from 0 to 1024 [ 47.779669][ T4154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.792038][ T2960] tipc: Node number set to 2886997011 [ 47.798183][ T4154] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.106: Allocating blocks 497-513 which overlap fs metadata [ 47.813153][ T4154] EXT4-fs (loop3): pa ffff8881071c6070: logic 256, phys. 369, len 9 [ 47.821292][ T4154] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 47.841429][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.913867][ T4165] program syz.4.109 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 48.001412][ T4177] loop3: detected capacity change from 0 to 512 [ 48.008981][ T4177] EXT4-fs: Ignoring removed nobh option [ 48.023359][ T4179] FAULT_INJECTION: forcing a failure. [ 48.023359][ T4179] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.036626][ T4179] CPU: 0 UID: 0 PID: 4179 Comm: syz.4.114 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 48.036655][ T4179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.036690][ T4179] Call Trace: [ 48.036698][ T4179] [ 48.036707][ T4179] __dump_stack+0x1d/0x30 [ 48.036733][ T4179] dump_stack_lvl+0xe8/0x140 [ 48.036752][ T4179] dump_stack+0x15/0x1b [ 48.036769][ T4179] should_fail_ex+0x265/0x280 [ 48.036806][ T4179] should_fail+0xb/0x20 [ 48.036894][ T4179] should_fail_usercopy+0x1a/0x20 [ 48.036979][ T4179] strncpy_from_user+0x25/0x230 [ 48.037002][ T4179] ? audit_log_end+0x1d7/0x1f0 [ 48.037092][ T4179] path_setxattrat+0xeb/0x310 [ 48.037133][ T4179] __x64_sys_setxattr+0x6e/0x90 [ 48.037276][ T4179] x64_sys_call+0x28a7/0x2fb0 [ 48.037297][ T4179] do_syscall_64+0xd2/0x200 [ 48.037313][ T4179] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.037489][ T4179] ? clear_bhb_loop+0x40/0x90 [ 48.037525][ T4179] ? clear_bhb_loop+0x40/0x90 [ 48.037553][ T4179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.037578][ T4179] RIP: 0033:0x7fab94cce929 [ 48.037663][ T4179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.037680][ T4179] RSP: 002b:00007fab93337038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 48.037700][ T4179] RAX: ffffffffffffffda RBX: 00007fab94ef5fa0 RCX: 00007fab94cce929 [ 48.037813][ T4179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.037825][ T4179] RBP: 00007fab93337090 R08: 0000000000000002 R09: 0000000000000000 [ 48.037837][ T4179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.037848][ T4179] R13: 0000000000000000 R14: 00007fab94ef5fa0 R15: 00007ffeebc2cdd8 [ 48.037866][ T4179] [ 48.048127][ T4177] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.113: corrupted inode contents [ 48.240283][ T4177] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #3: comm syz.3.113: mark_inode_dirty error [ 48.285732][ T4188] FAULT_INJECTION: forcing a failure. [ 48.285732][ T4188] name failslab, interval 1, probability 0, space 0, times 1 [ 48.298575][ T4188] CPU: 0 UID: 0 PID: 4188 Comm: syz.5.116 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 48.298608][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.298621][ T4188] Call Trace: [ 48.298627][ T4188] [ 48.298634][ T4188] __dump_stack+0x1d/0x30 [ 48.298657][ T4188] dump_stack_lvl+0xe8/0x140 [ 48.298721][ T4188] dump_stack+0x15/0x1b [ 48.298740][ T4188] should_fail_ex+0x265/0x280 [ 48.298847][ T4188] should_failslab+0x8c/0xb0 [ 48.298875][ T4188] kmem_cache_alloc_noprof+0x50/0x310 [ 48.298906][ T4188] ? security_inode_alloc+0x37/0x100 [ 48.298986][ T4188] security_inode_alloc+0x37/0x100 [ 48.299019][ T4188] inode_init_always_gfp+0x4b7/0x500 [ 48.299057][ T4188] alloc_inode+0x58/0x170 [ 48.299135][ T4188] alloc_anon_inode+0x1e/0x170 [ 48.299167][ T4188] aio_setup_ring+0x91/0x760 [ 48.299205][ T4188] ioctx_alloc+0x2c4/0x4e0 [ 48.299291][ T4188] ? fput+0x8f/0xc0 [ 48.299321][ T4188] __se_sys_io_setup+0x6b/0x1b0 [ 48.299360][ T4188] __x64_sys_io_setup+0x31/0x40 [ 48.299449][ T4188] x64_sys_call+0x2f0e/0x2fb0 [ 48.299477][ T4188] do_syscall_64+0xd2/0x200 [ 48.299499][ T4188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 48.299530][ T4188] ? clear_bhb_loop+0x40/0x90 [ 48.299600][ T4188] ? clear_bhb_loop+0x40/0x90 [ 48.299625][ T4188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.299648][ T4188] RIP: 0033:0x7f08ecd4e929 [ 48.299667][ T4188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.299689][ T4188] RSP: 002b:00007f08eb3b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 48.299777][ T4188] RAX: ffffffffffffffda RBX: 00007f08ecf75fa0 RCX: 00007f08ecd4e929 [ 48.299789][ T4188] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 48.299800][ T4188] RBP: 00007f08eb3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 48.299812][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 48.299882][ T4188] R13: 0000000000000000 R14: 00007f08ecf75fa0 R15: 00007ffcca12c6a8 [ 48.299906][ T4188] [ 48.301288][ T4177] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #3: comm syz.3.113: corrupted inode contents [ 48.401248][ T4196] loop1: detected capacity change from 0 to 1024 [ 48.409405][ T4177] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.113: mark_inode_dirty error [ 48.413409][ T4196] EXT4-fs: Ignoring removed orlov option [ 48.414842][ T4177] __quota_error: 706 callbacks suppressed [ 48.414859][ T4177] Quota error (device loop3): write_blk: dquota write failed [ 48.465852][ T4196] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.469192][ T4177] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 48.590668][ T4177] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.113: Failed to acquire dquot type 0 [ 48.603532][ T4177] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.113: corrupted inode contents [ 48.615944][ T4177] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #16: comm syz.3.113: mark_inode_dirty error [ 48.627836][ T4177] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.113: corrupted inode contents [ 48.640157][ T4177] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.113: mark_inode_dirty error [ 48.652334][ T4177] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.113: corrupted inode contents [ 48.669672][ T4177] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 48.678545][ T4177] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #16: comm syz.3.113: corrupted inode contents [ 48.691248][ T4177] EXT4-fs error (device loop3): ext4_truncate:4597: inode #16: comm syz.3.113: mark_inode_dirty error [ 48.702614][ T4177] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 48.712388][ T4177] EXT4-fs (loop3): 1 truncate cleaned up [ 48.718838][ T4177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.740173][ T4177] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.751798][ T29] audit: type=1326 audit(1752667066.761:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f888572d290 code=0x7ffc0000 [ 48.775187][ T29] audit: type=1326 audit(1752667066.761:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f888572d677 code=0x7ffc0000 [ 48.798565][ T29] audit: type=1326 audit(1752667066.761:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f888572d290 code=0x7ffc0000 [ 48.824330][ T29] audit: type=1326 audit(1752667066.841:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 48.850158][ T29] audit: type=1326 audit(1752667066.841:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 48.873800][ T29] audit: type=1326 audit(1752667066.841:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 48.897211][ T29] audit: type=1326 audit(1752667066.841:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 48.920614][ T29] audit: type=1326 audit(1752667066.841:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4176 comm="syz.3.113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 48.945848][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.956127][ T4207] __nla_validate_parse: 6 callbacks suppressed [ 48.956146][ T4207] netlink: 96 bytes leftover after parsing attributes in process `syz.4.123'. [ 48.984295][ T4207] loop4: detected capacity change from 0 to 164 [ 48.992271][ T4207] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.001208][ T4207] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 49.025472][ T4207] Symlink component flag not implemented [ 49.031217][ T4207] Symlink component flag not implemented [ 49.042962][ T4207] Symlink component flag not implemented (7) [ 49.049088][ T4207] Symlink component flag not implemented (116) [ 49.055031][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.091194][ T4217] netlink: 'syz.3.125': attribute type 10 has an invalid length. [ 49.100308][ T4217] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.153820][ T4226] loop1: detected capacity change from 0 to 512 [ 49.169471][ T4226] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.182207][ T4226] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 49.216759][ T4226] EXT4-fs error (device loop1): ext4_map_blocks:780: inode #2: block 18: comm syz.1.127: lblock 23 mapped to illegal pblock 18 (length 1) [ 49.231674][ T4226] EXT4-fs (loop1): Remounting filesystem read-only [ 49.284660][ T4233] wireguard0: entered promiscuous mode [ 49.290274][ T4233] wireguard0: entered allmulticast mode [ 49.327173][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.505320][ T4246] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 49.513142][ T4246] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.134'. [ 49.688957][ T4257] loop3: detected capacity change from 0 to 8192 [ 49.925597][ T4285] FAULT_INJECTION: forcing a failure. [ 49.925597][ T4285] name failslab, interval 1, probability 0, space 0, times 0 [ 49.938431][ T4285] CPU: 0 UID: 0 PID: 4285 Comm: syz.3.145 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 49.938461][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 49.938542][ T4285] Call Trace: [ 49.938546][ T4285] [ 49.938553][ T4285] __dump_stack+0x1d/0x30 [ 49.938572][ T4285] dump_stack_lvl+0xe8/0x140 [ 49.938601][ T4285] dump_stack+0x15/0x1b [ 49.938615][ T4285] should_fail_ex+0x265/0x280 [ 49.938641][ T4285] should_failslab+0x8c/0xb0 [ 49.938668][ T4285] kmem_cache_alloc_node_noprof+0x57/0x320 [ 49.938785][ T4285] ? alloc_vmap_area+0x231/0xe50 [ 49.938813][ T4285] alloc_vmap_area+0x231/0xe50 [ 49.938841][ T4285] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 49.938875][ T4285] __get_vm_area_node+0x173/0x1d0 [ 49.938973][ T4285] __vmalloc_node_range_noprof+0x273/0xe00 [ 49.939009][ T4285] ? xt_counters_alloc+0x40/0x50 [ 49.939037][ T4285] ? bpf_trace_run2+0x124/0x1c0 [ 49.939062][ T4285] ? translate_table+0x902/0xf90 [ 49.939086][ T4285] ? kfree+0x27b/0x320 [ 49.939107][ T4285] ? translate_table+0xe97/0xf90 [ 49.939196][ T4285] ? xt_counters_alloc+0x40/0x50 [ 49.939223][ T4285] vzalloc_noprof+0x82/0xc0 [ 49.939269][ T4285] ? xt_counters_alloc+0x40/0x50 [ 49.939297][ T4285] xt_counters_alloc+0x40/0x50 [ 49.939325][ T4285] __do_replace+0x4d/0x570 [ 49.939378][ T4285] ? _copy_from_user+0x89/0xb0 [ 49.939397][ T4285] do_ipt_set_ctl+0x6ea/0x820 [ 49.939421][ T4285] ? _raw_spin_unlock_bh+0x36/0x40 [ 49.939449][ T4285] ? tcp_release_cb+0xf1/0x370 [ 49.939546][ T4285] nf_setsockopt+0x196/0x1b0 [ 49.939565][ T4285] ip_setsockopt+0x102/0x110 [ 49.939590][ T4285] tcp_setsockopt+0x95/0xb0 [ 49.939654][ T4285] sock_common_setsockopt+0x69/0x80 [ 49.939676][ T4285] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 49.939734][ T4285] __sys_setsockopt+0x184/0x200 [ 49.939762][ T4285] __x64_sys_setsockopt+0x64/0x80 [ 49.939789][ T4285] x64_sys_call+0x2bd5/0x2fb0 [ 49.939808][ T4285] do_syscall_64+0xd2/0x200 [ 49.939871][ T4285] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 49.939931][ T4285] ? clear_bhb_loop+0x40/0x90 [ 49.939957][ T4285] ? clear_bhb_loop+0x40/0x90 [ 49.939983][ T4285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.940008][ T4285] RIP: 0033:0x7f888572e929 [ 49.940027][ T4285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.940066][ T4285] RSP: 002b:00007f8883d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 49.940083][ T4285] RAX: ffffffffffffffda RBX: 00007f8885955fa0 RCX: 00007f888572e929 [ 49.940154][ T4285] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 49.940205][ T4285] RBP: 00007f8883d97090 R08: 0000000000000228 R09: 0000000000000000 [ 49.940216][ T4285] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 49.940226][ T4285] R13: 0000000000000000 R14: 00007f8885955fa0 R15: 00007ffe53dcdaa8 [ 49.940243][ T4285] [ 49.940252][ T4285] syz.3.145: vmalloc error: size 131072, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 50.249524][ T4285] CPU: 0 UID: 0 PID: 4285 Comm: syz.3.145 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 50.249612][ T4285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.249626][ T4285] Call Trace: [ 50.249633][ T4285] [ 50.249641][ T4285] __dump_stack+0x1d/0x30 [ 50.249666][ T4285] dump_stack_lvl+0xe8/0x140 [ 50.249690][ T4285] dump_stack+0x15/0x1b [ 50.249783][ T4285] warn_alloc+0x12b/0x1a0 [ 50.249816][ T4285] __vmalloc_node_range_noprof+0x297/0xe00 [ 50.249850][ T4285] ? bpf_trace_run2+0x124/0x1c0 [ 50.249937][ T4285] ? translate_table+0x902/0xf90 [ 50.249973][ T4285] ? kfree+0x27b/0x320 [ 50.250003][ T4285] ? translate_table+0xe97/0xf90 [ 50.250030][ T4285] ? xt_counters_alloc+0x40/0x50 [ 50.250071][ T4285] vzalloc_noprof+0x82/0xc0 [ 50.250103][ T4285] ? xt_counters_alloc+0x40/0x50 [ 50.250134][ T4285] xt_counters_alloc+0x40/0x50 [ 50.250182][ T4285] __do_replace+0x4d/0x570 [ 50.250217][ T4285] ? _copy_from_user+0x89/0xb0 [ 50.250261][ T4285] do_ipt_set_ctl+0x6ea/0x820 [ 50.250328][ T4285] ? _raw_spin_unlock_bh+0x36/0x40 [ 50.250355][ T4285] ? tcp_release_cb+0xf1/0x370 [ 50.250475][ T4285] nf_setsockopt+0x196/0x1b0 [ 50.250501][ T4285] ip_setsockopt+0x102/0x110 [ 50.250536][ T4285] tcp_setsockopt+0x95/0xb0 [ 50.250568][ T4285] sock_common_setsockopt+0x69/0x80 [ 50.250662][ T4285] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 50.250686][ T4285] __sys_setsockopt+0x184/0x200 [ 50.250716][ T4285] __x64_sys_setsockopt+0x64/0x80 [ 50.250810][ T4285] x64_sys_call+0x2bd5/0x2fb0 [ 50.250836][ T4285] do_syscall_64+0xd2/0x200 [ 50.250858][ T4285] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 50.251009][ T4285] ? clear_bhb_loop+0x40/0x90 [ 50.251034][ T4285] ? clear_bhb_loop+0x40/0x90 [ 50.251057][ T4285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.251083][ T4285] RIP: 0033:0x7f888572e929 [ 50.251172][ T4285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.251192][ T4285] RSP: 002b:00007f8883d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 50.251214][ T4285] RAX: ffffffffffffffda RBX: 00007f8885955fa0 RCX: 00007f888572e929 [ 50.251284][ T4285] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000005 [ 50.251295][ T4285] RBP: 00007f8883d97090 R08: 0000000000000228 R09: 0000000000000000 [ 50.251306][ T4285] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 50.251317][ T4285] R13: 0000000000000000 R14: 00007f8885955fa0 R15: 00007ffe53dcdaa8 [ 50.251335][ T4285] [ 50.251352][ T4285] Mem-Info: [ 50.511580][ T4285] active_anon:6654 inactive_anon:0 isolated_anon:0 [ 50.511580][ T4285] active_file:6171 inactive_file:2207 isolated_file:0 [ 50.511580][ T4285] unevictable:0 dirty:1471 writeback:0 [ 50.511580][ T4285] slab_reclaimable:3040 slab_unreclaimable:62897 [ 50.511580][ T4285] mapped:29965 shmem:277 pagetables:1307 [ 50.511580][ T4285] sec_pagetables:0 bounce:0 [ 50.511580][ T4285] kernel_misc_reclaimable:0 [ 50.511580][ T4285] free:1856464 free_pcp:3432 free_cma:0 [ 50.556475][ T4285] Node 0 active_anon:26616kB inactive_anon:0kB active_file:24684kB inactive_file:8828kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:124036kB dirty:5884kB writeback:0kB shmem:1108kB writeback_tmp:0kB kernel_stack:3440kB pagetables:5344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 50.585373][ T4285] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 50.614099][ T4285] lowmem_reserve[]: 0 2882 7860 7860 [ 50.619543][ T4285] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 50.649883][ T4285] lowmem_reserve[]: 0 0 4978 4978 [ 50.654975][ T4285] Node 0 Normal free:4462768kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26732kB inactive_anon:0kB active_file:24684kB inactive_file:8828kB unevictable:0kB writepending:5884kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:9448kB local_pcp:408kB free_cma:0kB [ 50.686894][ T4285] lowmem_reserve[]: 0 0 0 0 [ 50.691508][ T4285] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 50.704407][ T4285] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB [ 50.720611][ T4285] Node 0 Normal: 214*4kB (UME) 153*8kB (UM) 91*16kB (UM) 66*32kB (UME) 34*64kB (UME) 60*128kB (UME) 42*256kB (UME) 17*512kB (UME) 10*1024kB (UM) 3*2048kB (UME) 1077*4096kB (UM) = 4462736kB [ 50.739759][ T4285] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 50.749123][ T4285] 8607 total pagecache pages [ 50.753786][ T4285] 0 pages in swap cache [ 50.758024][ T4285] Free swap = 124996kB [ 50.762283][ T4285] Total swap = 124996kB [ 50.766535][ T4285] 2097051 pages RAM [ 50.770391][ T4285] 0 pages HighMem/MovableOnly [ 50.775068][ T4285] 80812 pages reserved [ 50.852323][ T4321] random: crng reseeded on system resumption [ 51.774503][ T4348] 9pnet: Could not find request transport: fd0x0000000000000006 [ 52.106619][ T4384] 9pnet_fd: Insufficient options for proto=fd [ 52.170720][ T4392] loop5: detected capacity change from 0 to 1024 [ 52.177740][ T4392] EXT4-fs: Ignoring removed orlov option [ 52.187622][ T4392] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.267509][ T4398] tipc: Enabling of bearer rejected, already enabled [ 52.286318][ T4398] loop4: detected capacity change from 0 to 1764 [ 52.298295][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'. [ 52.372051][ T4402] mmap: syz.4.176 (4402) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.435709][ T3845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.474652][ T4407] FAULT_INJECTION: forcing a failure. [ 52.474652][ T4407] name failslab, interval 1, probability 0, space 0, times 0 [ 52.487473][ T4407] CPU: 0 UID: 0 PID: 4407 Comm: syz.5.178 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 52.487581][ T4407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 52.487597][ T4407] Call Trace: [ 52.487606][ T4407] [ 52.487615][ T4407] __dump_stack+0x1d/0x30 [ 52.487655][ T4407] dump_stack_lvl+0xe8/0x140 [ 52.487680][ T4407] dump_stack+0x15/0x1b [ 52.487700][ T4407] should_fail_ex+0x265/0x280 [ 52.487746][ T4407] should_failslab+0x8c/0xb0 [ 52.487773][ T4407] kmem_cache_alloc_node_noprof+0x57/0x320 [ 52.487874][ T4407] ? alloc_vmap_area+0x231/0xe50 [ 52.487909][ T4407] alloc_vmap_area+0x231/0xe50 [ 52.487970][ T4407] ? should_failslab+0x8c/0xb0 [ 52.487996][ T4407] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 52.488032][ T4407] __get_vm_area_node+0x173/0x1d0 [ 52.488133][ T4407] __vmalloc_node_range_noprof+0x273/0xe00 [ 52.488208][ T4407] ? xt_counters_alloc+0x40/0x50 [ 52.488330][ T4407] ? xt_alloc_entry_offsets+0x48/0x50 [ 52.488457][ T4407] ? __account_obj_stock+0x211/0x350 [ 52.488483][ T4407] ? translate_table+0xe97/0xf90 [ 52.488517][ T4407] ? xt_counters_alloc+0x40/0x50 [ 52.488553][ T4407] vzalloc_noprof+0x82/0xc0 [ 52.488657][ T4407] ? xt_counters_alloc+0x40/0x50 [ 52.488689][ T4407] xt_counters_alloc+0x40/0x50 [ 52.488784][ T4407] __do_replace+0x4d/0x570 [ 52.488814][ T4407] ? _copy_from_user+0x89/0xb0 [ 52.488834][ T4407] do_ipt_set_ctl+0x6ea/0x820 [ 52.488899][ T4407] ? _raw_spin_unlock_bh+0x36/0x40 [ 52.488922][ T4407] ? tcp_release_cb+0xf1/0x370 [ 52.488970][ T4407] nf_setsockopt+0x196/0x1b0 [ 52.488991][ T4407] ip_setsockopt+0x102/0x110 [ 52.489020][ T4407] tcp_setsockopt+0x95/0xb0 [ 52.489100][ T4407] sock_common_setsockopt+0x69/0x80 [ 52.489126][ T4407] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 52.489152][ T4407] __sys_setsockopt+0x184/0x200 [ 52.489207][ T4407] __x64_sys_setsockopt+0x64/0x80 [ 52.489238][ T4407] x64_sys_call+0x2bd5/0x2fb0 [ 52.489259][ T4407] do_syscall_64+0xd2/0x200 [ 52.489276][ T4407] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 52.489332][ T4407] ? clear_bhb_loop+0x40/0x90 [ 52.489420][ T4407] ? clear_bhb_loop+0x40/0x90 [ 52.489514][ T4407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.489551][ T4407] RIP: 0033:0x7f08ecd4e929 [ 52.489566][ T4407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 52.489583][ T4407] RSP: 002b:00007f08eb3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 52.489601][ T4407] RAX: ffffffffffffffda RBX: 00007f08ecf75fa0 RCX: 00007f08ecd4e929 [ 52.489635][ T4407] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 52.489646][ T4407] RBP: 00007f08eb3b7090 R08: 0000000000000228 R09: 0000000000000000 [ 52.489734][ T4407] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 52.489746][ T4407] R13: 0000000000000000 R14: 00007f08ecf75fa0 R15: 00007ffcca12c6a8 [ 52.489766][ T4407] [ 53.010147][ T4409] FAULT_INJECTION: forcing a failure. [ 53.010147][ T4409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.023391][ T4409] CPU: 0 UID: 0 PID: 4409 Comm: syz.4.179 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 53.023427][ T4409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.023443][ T4409] Call Trace: [ 53.023450][ T4409] [ 53.023457][ T4409] __dump_stack+0x1d/0x30 [ 53.023477][ T4409] dump_stack_lvl+0xe8/0x140 [ 53.023495][ T4409] dump_stack+0x15/0x1b [ 53.023522][ T4409] should_fail_ex+0x265/0x280 [ 53.023555][ T4409] should_fail+0xb/0x20 [ 53.023588][ T4409] should_fail_usercopy+0x1a/0x20 [ 53.023638][ T4409] _copy_from_user+0x1c/0xb0 [ 53.023657][ T4409] ___sys_sendmsg+0xc1/0x1d0 [ 53.023796][ T4409] __x64_sys_sendmsg+0xd4/0x160 [ 53.023935][ T4409] x64_sys_call+0x2999/0x2fb0 [ 53.023981][ T4409] do_syscall_64+0xd2/0x200 [ 53.023998][ T4409] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.024027][ T4409] ? clear_bhb_loop+0x40/0x90 [ 53.024053][ T4409] ? clear_bhb_loop+0x40/0x90 [ 53.024121][ T4409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.024141][ T4409] RIP: 0033:0x7fab94cce929 [ 53.024155][ T4409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.024176][ T4409] RSP: 002b:00007fab93337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.024198][ T4409] RAX: ffffffffffffffda RBX: 00007fab94ef5fa0 RCX: 00007fab94cce929 [ 53.024212][ T4409] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 53.024277][ T4409] RBP: 00007fab93337090 R08: 0000000000000000 R09: 0000000000000000 [ 53.024291][ T4409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.024306][ T4409] R13: 0000000000000000 R14: 00007fab94ef5fa0 R15: 00007ffeebc2cdd8 [ 53.024328][ T4409] [ 53.336778][ T4442] netlink: 'syz.4.186': attribute type 1 has an invalid length. [ 53.344642][ T4442] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.186'. [ 53.497418][ T4453] loop4: detected capacity change from 0 to 1024 [ 53.504378][ T4453] EXT4-fs: Ignoring removed orlov option [ 53.513739][ T4453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.754479][ T4457] FAULT_INJECTION: forcing a failure. [ 53.754479][ T4457] name failslab, interval 1, probability 0, space 0, times 0 [ 53.767218][ T4457] CPU: 1 UID: 0 PID: 4457 Comm: syz.1.189 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 53.767319][ T4457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 53.767380][ T4457] Call Trace: [ 53.767389][ T4457] [ 53.767398][ T4457] __dump_stack+0x1d/0x30 [ 53.767421][ T4457] dump_stack_lvl+0xe8/0x140 [ 53.767446][ T4457] dump_stack+0x15/0x1b [ 53.767526][ T4457] should_fail_ex+0x265/0x280 [ 53.767558][ T4457] ? rxrpc_lookup_local+0x2a3/0xc70 [ 53.767682][ T4457] should_failslab+0x8c/0xb0 [ 53.767710][ T4457] __kmalloc_cache_noprof+0x4c/0x320 [ 53.767746][ T4457] rxrpc_lookup_local+0x2a3/0xc70 [ 53.767861][ T4457] ? _raw_spin_unlock_bh+0x36/0x40 [ 53.767942][ T4457] ? lock_sock_nested+0x112/0x140 [ 53.767967][ T4457] rxrpc_sendmsg+0x2f3/0x590 [ 53.768036][ T4457] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 53.768139][ T4457] __sock_sendmsg+0x145/0x180 [ 53.768162][ T4457] ____sys_sendmsg+0x31e/0x4e0 [ 53.768202][ T4457] ___sys_sendmsg+0x17b/0x1d0 [ 53.768247][ T4457] __x64_sys_sendmsg+0xd4/0x160 [ 53.768370][ T4457] x64_sys_call+0x2999/0x2fb0 [ 53.768476][ T4457] do_syscall_64+0xd2/0x200 [ 53.768575][ T4457] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 53.768611][ T4457] ? clear_bhb_loop+0x40/0x90 [ 53.768690][ T4457] ? clear_bhb_loop+0x40/0x90 [ 53.768712][ T4457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.768733][ T4457] RIP: 0033:0x7f402485e929 [ 53.768773][ T4457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.768790][ T4457] RSP: 002b:00007f4022ec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 53.768809][ T4457] RAX: ffffffffffffffda RBX: 00007f4024a85fa0 RCX: 00007f402485e929 [ 53.768860][ T4457] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 53.768871][ T4457] RBP: 00007f4022ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 53.768883][ T4457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.768895][ T4457] R13: 0000000000000000 R14: 00007f4024a85fa0 R15: 00007ffefcc83ed8 [ 53.768914][ T4457] [ 54.000140][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 54.000238][ T29] audit: type=1326 audit(1752667072.011:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 54.056285][ T29] audit: type=1326 audit(1752667072.061:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 54.079806][ T29] audit: type=1326 audit(1752667072.061:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 54.103259][ T29] audit: type=1326 audit(1752667072.061:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 54.126677][ T29] audit: type=1326 audit(1752667072.061:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 54.149998][ T29] audit: type=1326 audit(1752667072.061:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 54.173449][ T29] audit: type=1326 audit(1752667072.071:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 54.197878][ T29] audit: type=1326 audit(1752667072.091:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4460 comm="syz.5.201" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f08ecd4e929 code=0x0 [ 54.220780][ T29] audit: type=1326 audit(1752667072.121:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 54.244160][ T29] audit: type=1326 audit(1752667072.121:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4458 comm="syz.3.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 54.289325][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.315801][ T4479] program syz.0.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.360669][ T4484] 9pnet_fd: Insufficient options for proto=fd [ 54.397626][ T4487] netlink: 'syz.3.202': attribute type 10 has an invalid length. [ 54.443305][ T4493] netlink: 'syz.4.203': attribute type 1 has an invalid length. [ 54.451097][ T4493] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.203'. [ 54.575616][ T4511] loop0: detected capacity change from 0 to 1024 [ 54.583621][ T4511] EXT4-fs: Ignoring removed orlov option [ 54.599953][ T4511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.683179][ T4519] netlink: 'syz.4.210': attribute type 13 has an invalid length. [ 54.789964][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.873964][ T4522] program syz.5.211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.906606][ T4525] 9pnet_fd: Insufficient options for proto=fd [ 54.949847][ T4529] FAULT_INJECTION: forcing a failure. [ 54.949847][ T4529] name failslab, interval 1, probability 0, space 0, times 0 [ 54.962672][ T4529] CPU: 1 UID: 0 PID: 4529 Comm: syz.5.215 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 54.962700][ T4529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.962712][ T4529] Call Trace: [ 54.962720][ T4529] [ 54.962729][ T4529] __dump_stack+0x1d/0x30 [ 54.962753][ T4529] dump_stack_lvl+0xe8/0x140 [ 54.962773][ T4529] dump_stack+0x15/0x1b [ 54.962853][ T4529] should_fail_ex+0x265/0x280 [ 54.962890][ T4529] should_failslab+0x8c/0xb0 [ 54.962917][ T4529] kmem_cache_alloc_node_noprof+0x57/0x320 [ 54.962980][ T4529] ? __alloc_skb+0x101/0x320 [ 54.963070][ T4529] __alloc_skb+0x101/0x320 [ 54.963102][ T4529] netlink_alloc_large_skb+0xba/0xf0 [ 54.963140][ T4529] netlink_sendmsg+0x3cf/0x6b0 [ 54.963186][ T4529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 54.963204][ T4529] __sock_sendmsg+0x145/0x180 [ 54.963229][ T4529] ____sys_sendmsg+0x31e/0x4e0 [ 54.963270][ T4529] ___sys_sendmsg+0x17b/0x1d0 [ 54.963378][ T4529] __x64_sys_sendmsg+0xd4/0x160 [ 54.963412][ T4529] x64_sys_call+0x2999/0x2fb0 [ 54.963435][ T4529] do_syscall_64+0xd2/0x200 [ 54.963521][ T4529] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 54.963558][ T4529] ? clear_bhb_loop+0x40/0x90 [ 54.963638][ T4529] ? clear_bhb_loop+0x40/0x90 [ 54.963658][ T4529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.963677][ T4529] RIP: 0033:0x7f08ecd4e929 [ 54.963692][ T4529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.963729][ T4529] RSP: 002b:00007f08eb3b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 54.963752][ T4529] RAX: ffffffffffffffda RBX: 00007f08ecf75fa0 RCX: 00007f08ecd4e929 [ 54.963765][ T4529] RDX: 0000000028040000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 54.963778][ T4529] RBP: 00007f08eb3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 54.963794][ T4529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 54.963808][ T4529] R13: 0000000000000000 R14: 00007f08ecf75fa0 R15: 00007ffcca12c6a8 [ 54.963826][ T4529] [ 55.181952][ T4531] netlink: 'syz.0.214': attribute type 10 has an invalid length. [ 55.214977][ T4527] netlink: 'syz.1.213': attribute type 1 has an invalid length. [ 55.222922][ T4527] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.213'. [ 55.231872][ T4535] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 55.319597][ T4537] loop0: detected capacity change from 0 to 1024 [ 55.329687][ T4537] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.340665][ T4537] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.352591][ T4544] program syz.5.222 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.391312][ T4537] JBD2: no valid journal superblock found [ 55.397231][ T4537] EXT4-fs (loop0): Could not load journal inode [ 55.417903][ T4553] loop5: detected capacity change from 0 to 512 [ 55.426735][ T4537] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 55.462177][ T4553] EXT4-fs (loop5): 1 orphan inode deleted [ 55.473266][ T4553] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.486850][ T4553] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.487000][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 1 [ 55.559918][ T3845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.629883][ T4572] loop3: detected capacity change from 0 to 1024 [ 55.658695][ T4572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.679094][ T4572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.229'. [ 55.747108][ T4579] netlink: 'syz.5.231': attribute type 1 has an invalid length. [ 55.754871][ T4579] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.231'. [ 55.764483][ T4572] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.229: Allocating blocks 497-513 which overlap fs metadata [ 55.781707][ T4572] EXT4-fs (loop3): pa ffff8881071c6070: logic 256, phys. 369, len 9 [ 55.789830][ T4572] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 55.844725][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.988274][ T4592] netlink: 'syz.3.236': attribute type 1 has an invalid length. [ 55.995997][ T4592] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.236'. [ 56.042060][ T4599] tipc: Started in network mode [ 56.047229][ T4599] tipc: Node identity ac141413, cluster identity 4711 [ 56.061489][ T4599] tipc: New replicast peer: 10.1.1.2 [ 56.066936][ T4599] tipc: Enabled bearer , priority 10 [ 56.086692][ T4599] loop5: detected capacity change from 0 to 1764 [ 56.098204][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.240'. [ 56.144330][ T4603] netlink: 128 bytes leftover after parsing attributes in process `syz.5.242'. [ 56.153513][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.242'. [ 56.165145][ T4603] netlink: 'syz.5.242': attribute type 13 has an invalid length. [ 56.182564][ T4603] gretap0: refused to change device tx_queue_len [ 56.189098][ T4603] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 56.254490][ T4603] veth3: entered promiscuous mode [ 56.262440][ T4601] netlink: 20 bytes leftover after parsing attributes in process `syz.3.241'. [ 56.322934][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.243'. [ 56.332555][ T4606] bridge_slave_1: left allmulticast mode [ 56.338565][ T4606] bridge_slave_1: left promiscuous mode [ 56.344327][ T4606] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.353078][ T4606] bridge_slave_0: left allmulticast mode [ 56.358991][ T4606] bridge_slave_0: left promiscuous mode [ 56.364762][ T4606] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.374530][ T4609] siw: device registration error -23 [ 56.511576][ T4618] program syz.0.248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.621877][ T4623] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 56.719924][ T4642] loop1: detected capacity change from 0 to 1024 [ 56.738884][ T4650] tipc: Enabling of bearer rejected, already enabled [ 56.756367][ T4642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.782078][ T4650] loop4: detected capacity change from 0 to 1764 [ 56.794046][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.887420][ T4662] random: crng reseeded on system resumption [ 56.998941][ T4670] siw: device registration error -23 [ 57.062864][ T4677] loop4: detected capacity change from 0 to 512 [ 57.069375][ T3394] tipc: Node number set to 2886997011 [ 57.097799][ T4677] EXT4-fs (loop4): Invalid default hash set in the superblock [ 57.119636][ T4677] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.198009][ T4683] loop4: detected capacity change from 0 to 1024 [ 57.205448][ T4683] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 57.216520][ T4683] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 57.243351][ T4683] JBD2: no valid journal superblock found [ 57.249339][ T4683] EXT4-fs (loop4): Could not load journal inode [ 57.287540][ T4683] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 57.364573][ T4708] tipc: Started in network mode [ 57.369675][ T4708] tipc: Node identity ac141413, cluster identity 4711 [ 57.381406][ T4708] tipc: New replicast peer: 10.1.1.2 [ 57.386926][ T4708] tipc: Enabled bearer , priority 10 [ 57.445466][ T4708] loop0: detected capacity change from 0 to 1764 [ 57.467283][ T4723] gretap0: refused to change device tx_queue_len [ 57.473724][ T4723] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 57.503711][ T4727] loop5: detected capacity change from 0 to 1024 [ 57.517986][ T4727] EXT4-fs: Ignoring removed orlov option [ 57.536065][ T4727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.565367][ T4723] veth3: entered promiscuous mode [ 57.720789][ T4745] program syz.4.278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.076068][ T4793] loop4: detected capacity change from 0 to 1024 [ 58.103187][ T4793] EXT4-fs: Ignoring removed orlov option [ 58.157736][ T3845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.169083][ T4793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.228926][ T4817] random: crng reseeded on system resumption [ 58.506235][ T1036] tipc: Node number set to 2886997011 [ 58.515771][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.592571][ T4847] siw: device registration error -23 [ 58.799203][ T4886] validate_nla: 5 callbacks suppressed [ 58.799221][ T4886] netlink: 'syz.0.297': attribute type 10 has an invalid length. [ 58.829075][ T4880] netlink: 'syz.4.295': attribute type 1 has an invalid length. [ 58.898531][ T4897] loop4: detected capacity change from 0 to 1024 [ 58.910227][ T4897] EXT4-fs: Ignoring removed orlov option [ 58.928548][ T4897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.058688][ T4909] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 59.095140][ T4918] program syz.5.305 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.161882][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 59.161900][ T29] audit: type=1326 audit(1752667077.171:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 59.217840][ T29] audit: type=1326 audit(1752667077.211:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 59.241359][ T29] audit: type=1326 audit(1752667077.211:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 59.264886][ T29] audit: type=1326 audit(1752667077.211:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 59.288258][ T29] audit: type=1326 audit(1752667077.211:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 59.312184][ T29] audit: type=1326 audit(1752667077.211:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 59.335468][ T29] audit: type=1326 audit(1752667077.211:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 59.358938][ T29] audit: type=1326 audit(1752667077.211:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 59.382394][ T29] audit: type=1326 audit(1752667077.211:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 59.406025][ T29] audit: type=1326 audit(1752667077.211:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4923 comm="syz.0.308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 59.455634][ T4927] netlink: 'syz.5.309': attribute type 10 has an invalid length. [ 59.473791][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.610189][ T4960] __nla_validate_parse: 12 callbacks suppressed [ 59.610208][ T4960] netlink: 128 bytes leftover after parsing attributes in process `syz.5.318'. [ 59.625731][ T4960] netlink: 8 bytes leftover after parsing attributes in process `syz.5.318'. [ 59.682041][ T4966] netlink: 128 bytes leftover after parsing attributes in process `syz.1.322'. [ 59.695437][ T4966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.322'. [ 59.732534][ T4970] loop5: detected capacity change from 0 to 1024 [ 59.751384][ T4970] EXT4-fs: Ignoring removed orlov option [ 59.762806][ T4970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.776765][ T4975] netlink: 'syz.0.326': attribute type 10 has an invalid length. [ 59.989015][ T4992] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 60.065794][ T3845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.119673][ T5014] program syz.3.333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.205966][ T5026] program syz.5.337 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.207955][ T4996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.329'. [ 60.486902][ T5038] netlink: 'syz.4.340': attribute type 13 has an invalid length. [ 61.006712][ T5049] loop3: detected capacity change from 0 to 1024 [ 61.013504][ T5049] EXT4-fs: Ignoring removed orlov option [ 61.022983][ T5049] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.238461][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.307064][ T5071] tipc: Enabling of bearer rejected, already enabled [ 61.324549][ T5071] loop5: detected capacity change from 0 to 1764 [ 61.333724][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.5.348'. [ 61.402942][ T5075] program syz.4.351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.428320][ T5077] program syz.5.352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.443678][ T5079] tipc: Enabling of bearer rejected, already enabled [ 61.469061][ T5079] loop4: detected capacity change from 0 to 1764 [ 61.482081][ T5079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.353'. [ 61.530921][ T5084] netlink: 128 bytes leftover after parsing attributes in process `syz.4.355'. [ 61.540198][ T5084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.355'. [ 61.573931][ T5086] netlink: 'syz.4.356': attribute type 1 has an invalid length. [ 61.581719][ T5086] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.356'. [ 61.699172][ T5101] netlink: 'syz.0.359': attribute type 13 has an invalid length. [ 61.758744][ T5106] netlink: 'syz.4.360': attribute type 13 has an invalid length. [ 61.789839][ T5101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 61.800438][ T5101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.830245][ T5108] siw: device registration error -23 [ 61.837531][ T5101] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.845944][ T5101] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.854462][ T5101] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.863008][ T5101] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.873347][ T2960] lo speed is unknown, defaulting to 1000 [ 61.879179][ T2960] syz1: Port: 1 Link DOWN [ 61.910489][ T5110] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 61.938283][ T5112] tipc: Enabling of bearer rejected, already enabled [ 61.956363][ T5112] loop1: detected capacity change from 0 to 1764 [ 62.003014][ T5114] program syz.1.364 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.643977][ T5141] netlink: 'syz.5.371': attribute type 1 has an invalid length. [ 62.675795][ T5143] random: crng reseeded on system resumption [ 62.769415][ T5149] loop1: detected capacity change from 0 to 1024 [ 62.779740][ T5149] EXT4-fs: Ignoring removed orlov option [ 62.794507][ T5149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.813224][ T5151] tipc: Enabling of bearer rejected, already enabled [ 62.834991][ T5151] loop5: detected capacity change from 0 to 1764 [ 63.060073][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.312993][ T5179] loop1: detected capacity change from 0 to 128 [ 63.330513][ T5179] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 63.338562][ T5179] FAT-fs (loop1): Filesystem has been set read-only [ 63.345252][ T5179] syz.1.385: attempt to access beyond end of device [ 63.345252][ T5179] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 63.351585][ T5177] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.359235][ T5179] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 63.366205][ T5177] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.373886][ T5179] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 63.389607][ T5179] syz.1.385: attempt to access beyond end of device [ 63.389607][ T5179] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.403069][ T5180] syz.1.385: attempt to access beyond end of device [ 63.403069][ T5180] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.416727][ T5179] syz.1.385: attempt to access beyond end of device [ 63.416727][ T5179] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.430020][ T5180] syz.1.385: attempt to access beyond end of device [ 63.430020][ T5180] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.443349][ T5179] syz.1.385: attempt to access beyond end of device [ 63.443349][ T5179] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.456780][ T5179] syz.1.385: attempt to access beyond end of device [ 63.456780][ T5179] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.456831][ T5179] syz.1.385: attempt to access beyond end of device [ 63.456831][ T5179] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.456881][ T5179] syz.1.385: attempt to access beyond end of device [ 63.456881][ T5179] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.456928][ T5179] syz.1.385: attempt to access beyond end of device [ 63.456928][ T5179] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 63.508077][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.518905][ T5177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.632370][ T5177] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.632510][ T5177] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.632548][ T5177] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.632585][ T5177] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.312129][ T29] kauditd_printk_skb: 443 callbacks suppressed [ 64.312142][ T29] audit: type=1400 audit(1752667082.321:2263): avc: denied { create } for pid=5208 comm="syz.5.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.344862][ T29] audit: type=1326 audit(1752667082.351:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ecd4e929 code=0x7ffc0000 [ 64.368629][ T29] audit: type=1326 audit(1752667082.361:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f08ecd4e929 code=0x7ffc0000 [ 64.392258][ T29] audit: type=1326 audit(1752667082.361:2266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ecd4e929 code=0x7ffc0000 [ 64.415705][ T29] audit: type=1326 audit(1752667082.361:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ecd4e929 code=0x7ffc0000 [ 64.439155][ T29] audit: type=1326 audit(1752667082.361:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f08ecd4e929 code=0x7ffc0000 [ 64.462526][ T29] audit: type=1326 audit(1752667082.361:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ecd4e929 code=0x7ffc0000 [ 64.485868][ T29] audit: type=1326 audit(1752667082.361:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08ecd4e929 code=0x7ffc0000 [ 64.509165][ T29] audit: type=1326 audit(1752667082.361:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08ecd4e929 code=0x7ffc0000 [ 64.532579][ T29] audit: type=1326 audit(1752667082.361:2272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5208 comm="syz.5.395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f08ecd4e929 code=0x7ffc0000 [ 64.569885][ T5216] tipc: Enabling of bearer rejected, already enabled [ 64.588880][ T5216] loop0: detected capacity change from 0 to 1764 [ 64.714760][ T5223] validate_nla: 2 callbacks suppressed [ 64.714778][ T5223] netlink: 'syz.0.401': attribute type 13 has an invalid length. [ 65.129054][ T5228] capability: warning: `syz.1.403' uses 32-bit capabilities (legacy support in use) [ 65.324020][ T5255] __nla_validate_parse: 12 callbacks suppressed [ 65.324037][ T5255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.412'. [ 65.345929][ T5255] loop1: detected capacity change from 0 to 1024 [ 65.353483][ T5255] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 65.641639][ T5260] netlink: 20 bytes leftover after parsing attributes in process `syz.4.414'. [ 66.163976][ T5277] netlink: 'syz.5.421': attribute type 10 has an invalid length. [ 66.172285][ T5277] team0: Device hsr_slave_0 failed to register rx_handler [ 66.237685][ T5285] tipc: Enabling of bearer rejected, already enabled [ 66.274937][ T5285] loop5: detected capacity change from 0 to 1764 [ 66.293946][ T5285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.424'. [ 66.343775][ T5296] netlink: 'syz.4.427': attribute type 13 has an invalid length. [ 66.353488][ T5295] loop5: detected capacity change from 0 to 1024 [ 66.371406][ T5295] EXT4-fs: Ignoring removed orlov option [ 66.388917][ T5295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.393491][ T5302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 66.445736][ T5303] siw: device registration error -23 [ 66.541600][ T5309] loop0: detected capacity change from 0 to 1024 [ 66.548709][ T5309] EXT4-fs: Ignoring removed orlov option [ 66.565190][ T5309] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.622919][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.695083][ T5320] loop3: detected capacity change from 0 to 1024 [ 66.704331][ T3845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.705123][ T5320] EXT4-fs: Ignoring removed orlov option [ 66.722929][ T5318] netlink: 'syz.0.434': attribute type 10 has an invalid length. [ 66.763012][ T5320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.029697][ T5340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.443'. [ 67.039872][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.072996][ T5344] loop3: detected capacity change from 0 to 1024 [ 67.077749][ T5346] loop0: detected capacity change from 0 to 1024 [ 67.081793][ T5344] EXT4-fs: Ignoring removed orlov option [ 67.100669][ T5344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.115346][ T5346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.128805][ T5346] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.158850][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.168702][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.197465][ T5353] random: crng reseeded on system resumption [ 67.264640][ T5359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.449'. [ 67.276876][ T5361] loop1: detected capacity change from 0 to 1024 [ 67.291018][ T5359] loop3: detected capacity change from 0 to 1024 [ 67.302617][ T5359] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 67.326034][ T5361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.366146][ T5361] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.398981][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.578881][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 67.587895][ T5376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.596970][ T5376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.214587][ T5391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.462'. [ 68.230178][ T5391] loop0: detected capacity change from 0 to 1024 [ 68.241340][ T5391] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 68.285981][ T5394] loop3: detected capacity change from 0 to 1764 [ 68.333122][ T5396] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 68.338484][ T5398] loop0: detected capacity change from 0 to 1024 [ 68.340858][ T5396] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.464'. [ 68.348526][ T5398] EXT4-fs: Ignoring removed orlov option [ 68.368467][ T5398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.405283][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.573052][ T5420] syz.1.473 uses obsolete (PF_INET,SOCK_PACKET) [ 68.627053][ T5422] netlink: 8 bytes leftover after parsing attributes in process `syz.5.474'. [ 68.637874][ T5422] bridge_slave_1: left allmulticast mode [ 68.643772][ T5422] bridge_slave_1: left promiscuous mode [ 68.649874][ T5422] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.657826][ T5422] bridge_slave_0: left allmulticast mode [ 68.663696][ T5422] bridge_slave_0: left promiscuous mode [ 68.669694][ T5422] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.689554][ T5423] siw: device registration error -23 [ 68.814230][ T5430] loop5: detected capacity change from 0 to 1024 [ 68.821409][ T5430] EXT4-fs: Ignoring removed orlov option [ 68.838060][ T5430] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.887391][ T3845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.007871][ T5448] FAULT_INJECTION: forcing a failure. [ 69.007871][ T5448] name failslab, interval 1, probability 0, space 0, times 0 [ 69.020769][ T5448] CPU: 1 UID: 0 PID: 5448 Comm: syz.0.481 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 69.020846][ T5448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.020860][ T5448] Call Trace: [ 69.020868][ T5448] [ 69.020876][ T5448] __dump_stack+0x1d/0x30 [ 69.020902][ T5448] dump_stack_lvl+0xe8/0x140 [ 69.020924][ T5448] dump_stack+0x15/0x1b [ 69.021018][ T5448] should_fail_ex+0x265/0x280 [ 69.021054][ T5448] should_failslab+0x8c/0xb0 [ 69.021102][ T5448] kmem_cache_alloc_noprof+0x50/0x310 [ 69.021126][ T5448] ? audit_log_start+0x365/0x6c0 [ 69.021159][ T5448] audit_log_start+0x365/0x6c0 [ 69.021192][ T5448] audit_seccomp+0x48/0x100 [ 69.021291][ T5448] ? __seccomp_filter+0x68c/0x10d0 [ 69.021317][ T5448] __seccomp_filter+0x69d/0x10d0 [ 69.021341][ T5448] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 69.021414][ T5448] ? vfs_write+0x75e/0x8e0 [ 69.021478][ T5448] ? __rcu_read_unlock+0x4f/0x70 [ 69.021500][ T5448] ? __fget_files+0x184/0x1c0 [ 69.021584][ T5448] __secure_computing+0x82/0x150 [ 69.021605][ T5448] syscall_trace_enter+0xcf/0x1e0 [ 69.021642][ T5448] do_syscall_64+0xac/0x200 [ 69.021661][ T5448] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 69.021686][ T5448] ? clear_bhb_loop+0x40/0x90 [ 69.021782][ T5448] ? clear_bhb_loop+0x40/0x90 [ 69.021804][ T5448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.021824][ T5448] RIP: 0033:0x7f8ce58fe929 [ 69.021839][ T5448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.021865][ T5448] RSP: 002b:00007f8ce3f67038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f5 [ 69.021884][ T5448] RAX: ffffffffffffffda RBX: 00007f8ce5b25fa0 RCX: 00007f8ce58fe929 [ 69.021896][ T5448] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 69.021946][ T5448] RBP: 00007f8ce3f67090 R08: 0000000000000000 R09: 0000000000000000 [ 69.021994][ T5448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.022006][ T5448] R13: 0000000000000000 R14: 00007f8ce5b25fa0 R15: 00007ffd2b1a3568 [ 69.022024][ T5448] [ 69.355705][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 69.355722][ T29] audit: type=1400 audit(1752667087.361:2695): avc: denied { create } for pid=5457 comm="syz.3.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.359197][ T5458] 9pnet_fd: Insufficient options for proto=fd [ 69.365539][ T29] audit: type=1400 audit(1752667087.361:2696): avc: denied { ioctl } for pid=5457 comm="syz.3.485" path="socket:[16901]" dev="sockfs" ino=16901 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 69.438482][ T5466] loop3: detected capacity change from 0 to 1024 [ 69.445618][ T5466] EXT4-fs: Ignoring removed orlov option [ 69.454915][ T5466] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.493059][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.544769][ T5473] loop3: detected capacity change from 0 to 1764 [ 69.584544][ T5475] netlink: 'syz.3.492': attribute type 10 has an invalid length. [ 69.647865][ T5479] SELinux: Context Ü is not valid (left unmapped). [ 69.656760][ T29] audit: type=1326 audit(1752667087.671:2697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 69.682484][ T29] audit: type=1326 audit(1752667087.691:2698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 69.706181][ T29] audit: type=1326 audit(1752667087.691:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 69.729894][ T29] audit: type=1326 audit(1752667087.691:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 69.753417][ T29] audit: type=1326 audit(1752667087.691:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 69.777074][ T29] audit: type=1326 audit(1752667087.691:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 69.800536][ T29] audit: type=1326 audit(1752667087.691:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 69.824124][ T29] audit: type=1326 audit(1752667087.691:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5478 comm="syz.3.494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f888572e929 code=0x7ffc0000 [ 69.949961][ T5493] loop0: detected capacity change from 0 to 1024 [ 69.961810][ T5496] netlink: 'syz.5.497': attribute type 13 has an invalid length. [ 69.971320][ T5493] EXT4-fs: Ignoring removed orlov option [ 69.981034][ T5498] netlink: 'syz.4.503': attribute type 10 has an invalid length. [ 69.983129][ T5495] tipc: Enabling of bearer rejected, already enabled [ 70.008500][ T5493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.018106][ T5495] loop3: detected capacity change from 0 to 1764 [ 70.202668][ T5513] loop3: detected capacity change from 0 to 256 [ 70.305719][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.370344][ T5519] loop0: detected capacity change from 0 to 256 [ 70.866488][ T5530] futex_wake_op: syz.0.524 tries to shift op by -1; fix this program [ 70.992517][ T5545] 9pnet_fd: Insufficient options for proto=fd [ 71.194454][ T5571] loop4: detected capacity change from 0 to 512 [ 71.209234][ T5571] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.223637][ T5571] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 71.298154][ T5571] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #2: block 3: comm syz.4.525: lblock 8 mapped to illegal pblock 3 (length 26) [ 71.323252][ T5571] EXT4-fs (loop4): Remounting filesystem read-only [ 71.353465][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.401931][ T5586] 9pnet_fd: Insufficient options for proto=fd [ 71.479193][ T5593] netlink: 'syz.4.533': attribute type 10 has an invalid length. [ 71.764200][ T5610] FAULT_INJECTION: forcing a failure. [ 71.764200][ T5610] name failslab, interval 1, probability 0, space 0, times 0 [ 71.777227][ T5610] CPU: 0 UID: 0 PID: 5610 Comm: syz.3.540 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 71.777261][ T5610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 71.777276][ T5610] Call Trace: [ 71.777285][ T5610] [ 71.777294][ T5610] __dump_stack+0x1d/0x30 [ 71.777345][ T5610] dump_stack_lvl+0xe8/0x140 [ 71.777439][ T5610] dump_stack+0x15/0x1b [ 71.777460][ T5610] should_fail_ex+0x265/0x280 [ 71.777547][ T5610] should_failslab+0x8c/0xb0 [ 71.777569][ T5610] kmem_cache_alloc_node_noprof+0x57/0x320 [ 71.777598][ T5610] ? __alloc_skb+0x101/0x320 [ 71.777638][ T5610] __alloc_skb+0x101/0x320 [ 71.777669][ T5610] ? audit_log_start+0x365/0x6c0 [ 71.777722][ T5610] audit_log_start+0x380/0x6c0 [ 71.777773][ T5610] audit_seccomp+0x48/0x100 [ 71.777805][ T5610] ? __seccomp_filter+0x68c/0x10d0 [ 71.777908][ T5610] __seccomp_filter+0x69d/0x10d0 [ 71.777935][ T5610] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 71.778038][ T5610] ? vfs_write+0x75e/0x8e0 [ 71.778185][ T5610] __secure_computing+0x82/0x150 [ 71.778248][ T5610] syscall_trace_enter+0xcf/0x1e0 [ 71.778272][ T5610] do_syscall_64+0xac/0x200 [ 71.778293][ T5610] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 71.778330][ T5610] ? clear_bhb_loop+0x40/0x90 [ 71.778356][ T5610] ? clear_bhb_loop+0x40/0x90 [ 71.778380][ T5610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.778402][ T5610] RIP: 0033:0x7f888572e929 [ 71.778438][ T5610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.778525][ T5610] RSP: 002b:00007f8883d97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 71.778543][ T5610] RAX: ffffffffffffffda RBX: 00007f8885955fa0 RCX: 00007f888572e929 [ 71.778555][ T5610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 71.778570][ T5610] RBP: 00007f8883d97090 R08: 0000000000003000 R09: 0000000000000000 [ 71.778584][ T5610] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 71.778598][ T5610] R13: 0000000000000000 R14: 00007f8885955fa0 R15: 00007ffe53dcdaa8 [ 71.778683][ T5610] [ 72.023092][ T5612] 9pnet_fd: Insufficient options for proto=fd [ 72.290066][ T5630] tipc: Enabled bearer , priority 0 [ 72.297397][ T5630] tunl0: entered allmulticast mode [ 72.307761][ T5630] tipc: Resetting bearer [ 72.316408][ T5629] tipc: Disabling bearer [ 72.456722][ T5626] __nla_validate_parse: 8 callbacks suppressed [ 72.456743][ T5626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.548'. [ 72.475126][ T5635] 9pnet_fd: Insufficient options for proto=fd [ 72.582468][ T5647] FAULT_INJECTION: forcing a failure. [ 72.582468][ T5647] name failslab, interval 1, probability 0, space 0, times 0 [ 72.595304][ T5647] CPU: 0 UID: 0 PID: 5647 Comm: syz.4.554 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 72.595343][ T5647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 72.595360][ T5647] Call Trace: [ 72.595369][ T5647] [ 72.595378][ T5647] __dump_stack+0x1d/0x30 [ 72.595404][ T5647] dump_stack_lvl+0xe8/0x140 [ 72.595424][ T5647] dump_stack+0x15/0x1b [ 72.595439][ T5647] should_fail_ex+0x265/0x280 [ 72.595524][ T5647] should_failslab+0x8c/0xb0 [ 72.595544][ T5647] kmem_cache_alloc_node_noprof+0x57/0x320 [ 72.595570][ T5647] ? __alloc_skb+0x101/0x320 [ 72.595601][ T5647] __alloc_skb+0x101/0x320 [ 72.595666][ T5647] netlink_alloc_large_skb+0xba/0xf0 [ 72.595721][ T5647] netlink_sendmsg+0x3cf/0x6b0 [ 72.595783][ T5647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.595801][ T5647] __sock_sendmsg+0x145/0x180 [ 72.595829][ T5647] ____sys_sendmsg+0x31e/0x4e0 [ 72.595933][ T5647] ___sys_sendmsg+0x17b/0x1d0 [ 72.595990][ T5647] __x64_sys_sendmsg+0xd4/0x160 [ 72.596096][ T5647] x64_sys_call+0x2999/0x2fb0 [ 72.596116][ T5647] do_syscall_64+0xd2/0x200 [ 72.596133][ T5647] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 72.596163][ T5647] ? clear_bhb_loop+0x40/0x90 [ 72.596212][ T5647] ? clear_bhb_loop+0x40/0x90 [ 72.596241][ T5647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.596267][ T5647] RIP: 0033:0x7fab94cce929 [ 72.596286][ T5647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.596306][ T5647] RSP: 002b:00007fab93337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.596324][ T5647] RAX: ffffffffffffffda RBX: 00007fab94ef5fa0 RCX: 00007fab94cce929 [ 72.596358][ T5647] RDX: 0000000000000844 RSI: 0000200000000280 RDI: 0000000000000004 [ 72.596370][ T5647] RBP: 00007fab93337090 R08: 0000000000000000 R09: 0000000000000000 [ 72.596381][ T5647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.596396][ T5647] R13: 0000000000000000 R14: 00007fab94ef5fa0 R15: 00007ffeebc2cdd8 [ 72.596417][ T5647] [ 73.022834][ T5669] 9pnet_fd: Insufficient options for proto=fd [ 73.029589][ T5671] FAULT_INJECTION: forcing a failure. [ 73.029589][ T5671] name failslab, interval 1, probability 0, space 0, times 0 [ 73.042420][ T5671] CPU: 1 UID: 0 PID: 5671 Comm: syz.4.562 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 73.042455][ T5671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 73.042467][ T5671] Call Trace: [ 73.042474][ T5671] [ 73.042481][ T5671] __dump_stack+0x1d/0x30 [ 73.042507][ T5671] dump_stack_lvl+0xe8/0x140 [ 73.042536][ T5671] dump_stack+0x15/0x1b [ 73.042552][ T5671] should_fail_ex+0x265/0x280 [ 73.042641][ T5671] ? audit_log_d_path+0x8d/0x150 [ 73.042679][ T5671] should_failslab+0x8c/0xb0 [ 73.042700][ T5671] __kmalloc_cache_noprof+0x4c/0x320 [ 73.042746][ T5671] audit_log_d_path+0x8d/0x150 [ 73.042800][ T5671] audit_log_d_path_exe+0x42/0x70 [ 73.042867][ T5671] audit_log_task+0x1e9/0x250 [ 73.042902][ T5671] audit_seccomp+0x61/0x100 [ 73.043004][ T5671] ? __seccomp_filter+0x68c/0x10d0 [ 73.043031][ T5671] __seccomp_filter+0x69d/0x10d0 [ 73.043132][ T5671] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 73.043183][ T5671] ? vfs_write+0x75e/0x8e0 [ 73.043220][ T5671] ? __rcu_read_unlock+0x4f/0x70 [ 73.043254][ T5671] ? __fget_files+0x184/0x1c0 [ 73.043275][ T5671] __secure_computing+0x82/0x150 [ 73.043296][ T5671] syscall_trace_enter+0xcf/0x1e0 [ 73.043318][ T5671] do_syscall_64+0xac/0x200 [ 73.043376][ T5671] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 73.043436][ T5671] ? clear_bhb_loop+0x40/0x90 [ 73.043458][ T5671] ? clear_bhb_loop+0x40/0x90 [ 73.043497][ T5671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.043625][ T5671] RIP: 0033:0x7fab94cce929 [ 73.043641][ T5671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.043660][ T5671] RSP: 002b:00007fab93337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 73.043721][ T5671] RAX: ffffffffffffffda RBX: 00007fab94ef5fa0 RCX: 00007fab94cce929 [ 73.043734][ T5671] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.043745][ T5671] RBP: 00007fab93337090 R08: 0000000000000000 R09: 0000000000000000 [ 73.043756][ T5671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.043767][ T5671] R13: 0000000000000000 R14: 00007fab94ef5fa0 R15: 00007ffeebc2cdd8 [ 73.043785][ T5671] [ 73.315290][ T5675] loop0: detected capacity change from 0 to 1024 [ 73.345019][ T5675] EXT4-fs: Ignoring removed orlov option [ 73.359392][ T5675] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.542275][ T5691] loop5: detected capacity change from 0 to 1024 [ 73.566763][ T5691] EXT4-fs: Ignoring removed orlov option [ 73.609152][ T5691] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.742959][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.817349][ T5701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 73.856217][ T5701] loop3: detected capacity change from 0 to 1024 [ 73.864852][ T5701] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 73.892943][ T5701] 9pnet_fd: Insufficient options for proto=fd [ 74.162075][ T3845] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.225317][ T5732] netlink: 'syz.5.580': attribute type 10 has an invalid length. [ 74.259923][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.581'. [ 74.284170][ T5730] siw: device registration error -23 [ 74.428938][ T29] kauditd_printk_skb: 214 callbacks suppressed [ 74.428954][ T29] audit: type=1400 audit(1752667092.441:2917): avc: granted { setsecparam } for pid=5759 comm="syz.5.591" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 74.430783][ T5758] random: crng reseeded on system resumption [ 74.482589][ T5763] random: crng reseeded on system resumption [ 74.492771][ T29] audit: type=1326 audit(1752667092.501:2918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab94cce929 code=0x7ffc0000 [ 74.518147][ T29] audit: type=1326 audit(1752667092.501:2919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5744 comm="syz.4.586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab94cce929 code=0x7ffc0000 [ 74.566228][ T29] audit: type=1400 audit(1752667092.571:2920): avc: granted { setsecparam } for pid=5767 comm="syz.1.593" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 74.644105][ T5774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 74.655424][ T5774] siw: device registration error -23 [ 74.709872][ T5789] netlink: 104 bytes leftover after parsing attributes in process `syz.1.602'. [ 74.724372][ T5791] tipc: Enabling of bearer rejected, already enabled [ 74.753791][ T5791] loop3: detected capacity change from 0 to 1764 [ 74.768775][ T5793] netlink: 'syz.4.604': attribute type 1 has an invalid length. [ 74.776867][ T5793] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.604'. [ 74.791500][ T5791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.603'. [ 74.907643][ T5807] netlink: 128 bytes leftover after parsing attributes in process `syz.3.610'. [ 74.916913][ T5807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 74.956598][ T29] audit: type=1400 audit(1752667092.971:2921): avc: denied { connect } for pid=5808 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.006223][ T29] audit: type=1400 audit(1752667093.001:2922): avc: denied { read } for pid=5808 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.033208][ T5818] FAULT_INJECTION: forcing a failure. [ 75.033208][ T5818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.045653][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.612'. [ 75.046497][ T5818] CPU: 0 UID: 0 PID: 5818 Comm: syz.3.614 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 75.046538][ T5818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.046556][ T5818] Call Trace: [ 75.046565][ T5818] [ 75.046576][ T5818] __dump_stack+0x1d/0x30 [ 75.046605][ T5818] dump_stack_lvl+0xe8/0x140 [ 75.046638][ T5818] dump_stack+0x15/0x1b [ 75.046661][ T5818] should_fail_ex+0x265/0x280 [ 75.046807][ T5818] should_fail+0xb/0x20 [ 75.046842][ T5818] should_fail_usercopy+0x1a/0x20 [ 75.046935][ T5818] _copy_from_user+0x1c/0xb0 [ 75.046962][ T5818] __se_sys_mount+0x10d/0x2e0 [ 75.047002][ T5818] ? fput+0x8f/0xc0 [ 75.047024][ T5818] ? ksys_write+0x192/0x1a0 [ 75.047131][ T5818] __x64_sys_mount+0x67/0x80 [ 75.047175][ T5818] x64_sys_call+0xd36/0x2fb0 [ 75.047204][ T5818] do_syscall_64+0xd2/0x200 [ 75.047228][ T5818] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 75.047316][ T5818] ? clear_bhb_loop+0x40/0x90 [ 75.047344][ T5818] ? clear_bhb_loop+0x40/0x90 [ 75.047374][ T5818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.047459][ T5818] RIP: 0033:0x7f888572e929 [ 75.047480][ T5818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.047503][ T5818] RSP: 002b:00007f8883d97038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 75.047608][ T5818] RAX: ffffffffffffffda RBX: 00007f8885955fa0 RCX: 00007f888572e929 [ 75.047624][ T5818] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 75.047641][ T5818] RBP: 00007f8883d97090 R08: 0000200000000240 R09: 0000000000000000 [ 75.047658][ T5818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.047674][ T5818] R13: 0000000000000000 R14: 00007f8885955fa0 R15: 00007ffe53dcdaa8 [ 75.047700][ T5818] [ 75.069264][ T5818] 9pnet: Could not find request transport: 0xffffffffffffffff [ 75.086264][ T29] audit: type=1400 audit(1752667093.061:2923): avc: denied { bind } for pid=5808 comm="syz.0.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 75.197577][ T5811] siw: device registration error -23 [ 75.337716][ T29] audit: type=1326 audit(1752667093.351:2924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab94cce929 code=0x7ffc0000 [ 75.361148][ T29] audit: type=1326 audit(1752667093.351:2925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fab94cce929 code=0x7ffc0000 [ 75.384490][ T29] audit: type=1326 audit(1752667093.351:2926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5827 comm="syz.4.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab94cce929 code=0x7ffc0000 [ 75.425115][ T5831] netlink: 'syz.5.617': attribute type 1 has an invalid length. [ 75.452651][ T5837] tipc: Enabling of bearer rejected, already enabled [ 75.472806][ T5837] loop3: detected capacity change from 0 to 1764 [ 75.505519][ T5839] FAULT_INJECTION: forcing a failure. [ 75.505519][ T5839] name failslab, interval 1, probability 0, space 0, times 0 [ 75.518321][ T5839] CPU: 1 UID: 0 PID: 5839 Comm: syz.1.620 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 75.518356][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.518372][ T5839] Call Trace: [ 75.518379][ T5839] [ 75.518386][ T5839] __dump_stack+0x1d/0x30 [ 75.518406][ T5839] dump_stack_lvl+0xe8/0x140 [ 75.518487][ T5839] dump_stack+0x15/0x1b [ 75.518534][ T5839] should_fail_ex+0x265/0x280 [ 75.518617][ T5839] should_failslab+0x8c/0xb0 [ 75.518639][ T5839] kmem_cache_alloc_noprof+0x50/0x310 [ 75.518669][ T5839] ? ioctx_alloc+0xf5/0x4e0 [ 75.518754][ T5839] ioctx_alloc+0xf5/0x4e0 [ 75.518861][ T5839] __se_sys_io_setup+0x6b/0x1b0 [ 75.518997][ T5839] __x64_sys_io_setup+0x31/0x40 [ 75.519033][ T5839] x64_sys_call+0x2f0e/0x2fb0 [ 75.519058][ T5839] do_syscall_64+0xd2/0x200 [ 75.519146][ T5839] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 75.519178][ T5839] ? clear_bhb_loop+0x40/0x90 [ 75.519204][ T5839] ? clear_bhb_loop+0x40/0x90 [ 75.519230][ T5839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.519329][ T5839] RIP: 0033:0x7f402485e929 [ 75.519378][ T5839] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.519445][ T5839] RSP: 002b:00007f4022ec7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 75.519463][ T5839] RAX: ffffffffffffffda RBX: 00007f4024a85fa0 RCX: 00007f402485e929 [ 75.519477][ T5839] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 75.519492][ T5839] RBP: 00007f4022ec7090 R08: 0000000000000000 R09: 0000000000000000 [ 75.519507][ T5839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.519523][ T5839] R13: 0000000000000000 R14: 00007f4024a85fa0 R15: 00007ffefcc83ed8 [ 75.519543][ T5839] [ 75.806623][ T5859] siw: device registration error -23 [ 75.849325][ T5868] loop4: detected capacity change from 0 to 2048 [ 75.856696][ T5873] 9pnet_fd: Insufficient options for proto=fd [ 75.867384][ T5868] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.632: bad orphan inode 61 [ 75.878215][ T5877] netlink: 'syz.5.629': attribute type 13 has an invalid length. [ 75.880128][ T5868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.934156][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.946466][ T5885] netlink: 'syz.1.637': attribute type 21 has an invalid length. [ 75.958355][ T5885] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=5885 comm=syz.1.637 [ 76.083790][ T5899] siw: device registration error -23 [ 76.118776][ T5907] 9pnet_fd: Insufficient options for proto=fd [ 76.392500][ T5936] siw: device registration error -23 [ 76.415216][ T5940] 9pnet_fd: Insufficient options for proto=fd [ 76.500211][ T5949] loop1: detected capacity change from 0 to 1024 [ 76.507341][ T5949] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 76.523577][ T5949] 9pnet_fd: Insufficient options for proto=fd [ 76.686601][ T5951] siw: device registration error -23 [ 76.703464][ T1036] IPVS: starting estimator thread 0... [ 76.747206][ T5962] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 76.797182][ T5958] IPVS: using max 2304 ests per chain, 115200 per kthread [ 76.829390][ T5965] loop3: detected capacity change from 0 to 1024 [ 76.837262][ T5965] EXT4-fs: Ignoring removed orlov option [ 76.845106][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.903162][ T5968] 9pnet_fd: Insufficient options for proto=fd [ 77.156739][ T5986] netlink: 'syz.5.674': attribute type 13 has an invalid length. [ 77.165532][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.321199][ T5994] tipc: Enabling of bearer rejected, already enabled [ 77.338247][ T5994] loop1: detected capacity change from 0 to 1764 [ 77.374008][ T5996] netlink: 'syz.1.677': attribute type 1 has an invalid length. [ 77.792810][ T6001] 9pnet_fd: Insufficient options for proto=fd [ 77.881890][ T6009] random: crng reseeded on system resumption [ 78.021976][ T1036] IPVS: starting estimator thread 0... [ 78.031045][ T6024] __nla_validate_parse: 17 callbacks suppressed [ 78.031065][ T6024] netlink: 36 bytes leftover after parsing attributes in process `syz.3.689'. [ 78.112565][ T6029] IPVS: using max 1920 ests per chain, 96000 per kthread [ 78.188420][ T6036] FAULT_INJECTION: forcing a failure. [ 78.188420][ T6036] name failslab, interval 1, probability 0, space 0, times 0 [ 78.201198][ T6036] CPU: 1 UID: 0 PID: 6036 Comm: syz.3.693 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 78.201278][ T6036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.201290][ T6036] Call Trace: [ 78.201313][ T6036] [ 78.201322][ T6036] __dump_stack+0x1d/0x30 [ 78.201348][ T6036] dump_stack_lvl+0xe8/0x140 [ 78.201387][ T6036] dump_stack+0x15/0x1b [ 78.201404][ T6036] should_fail_ex+0x265/0x280 [ 78.201433][ T6036] should_failslab+0x8c/0xb0 [ 78.201459][ T6036] kmem_cache_alloc_node_noprof+0x57/0x320 [ 78.201511][ T6036] ? dup_task_struct+0x70/0x6a0 [ 78.201544][ T6036] dup_task_struct+0x70/0x6a0 [ 78.201632][ T6036] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 78.201665][ T6036] ? audit_log_end+0x1d7/0x1f0 [ 78.201707][ T6036] copy_process+0x399/0x1f90 [ 78.201739][ T6036] kernel_clone+0x16c/0x5b0 [ 78.201820][ T6036] ? vfs_write+0x75e/0x8e0 [ 78.201855][ T6036] __x64_sys_clone+0xe6/0x120 [ 78.201898][ T6036] x64_sys_call+0x2c59/0x2fb0 [ 78.201924][ T6036] do_syscall_64+0xd2/0x200 [ 78.201966][ T6036] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.202026][ T6036] ? clear_bhb_loop+0x40/0x90 [ 78.202048][ T6036] ? clear_bhb_loop+0x40/0x90 [ 78.202074][ T6036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.202149][ T6036] RIP: 0033:0x7f888572e929 [ 78.202168][ T6036] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.202239][ T6036] RSP: 002b:00007f8883d96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 78.202260][ T6036] RAX: ffffffffffffffda RBX: 00007f8885955fa0 RCX: 00007f888572e929 [ 78.202273][ T6036] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.202284][ T6036] RBP: 00007f8883d97090 R08: 0000000000000000 R09: 0000000000000000 [ 78.202296][ T6036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.202308][ T6036] R13: 0000000000000000 R14: 00007f8885955fa0 R15: 00007ffe53dcdaa8 [ 78.202327][ T6036] [ 78.465613][ T6042] 9pnet_fd: Insufficient options for proto=fd [ 78.543522][ T6054] netlink: 128 bytes leftover after parsing attributes in process `syz.1.699'. [ 78.552851][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 78.615040][ T6057] netlink: 'syz.3.698': attribute type 13 has an invalid length. [ 78.632904][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 78.657495][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 78.670438][ T6061] siw: device registration error -23 [ 78.681320][ T6065] loop1: detected capacity change from 0 to 132 [ 78.689460][ T6065] isofs_fill_super: bread failed, dev=loop1, iso_blknum=33, block=66 [ 78.704527][ T6065] netlink: 'syz.1.703': attribute type 1 has an invalid length. [ 78.834184][ T6074] FAULT_INJECTION: forcing a failure. [ 78.834184][ T6074] name failslab, interval 1, probability 0, space 0, times 0 [ 78.847002][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.0.707 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 78.847036][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.847051][ T6074] Call Trace: [ 78.847059][ T6074] [ 78.847068][ T6074] __dump_stack+0x1d/0x30 [ 78.847094][ T6074] dump_stack_lvl+0xe8/0x140 [ 78.847174][ T6074] dump_stack+0x15/0x1b [ 78.847189][ T6074] should_fail_ex+0x265/0x280 [ 78.847216][ T6074] ? audit_log_d_path+0x8d/0x150 [ 78.847243][ T6074] should_failslab+0x8c/0xb0 [ 78.847342][ T6074] __kmalloc_cache_noprof+0x4c/0x320 [ 78.847377][ T6074] audit_log_d_path+0x8d/0x150 [ 78.847466][ T6074] audit_log_d_path_exe+0x42/0x70 [ 78.847494][ T6074] audit_log_task+0x1e9/0x250 [ 78.847548][ T6074] audit_seccomp+0x61/0x100 [ 78.847619][ T6074] ? __seccomp_filter+0x68c/0x10d0 [ 78.847639][ T6074] __seccomp_filter+0x69d/0x10d0 [ 78.847661][ T6074] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 78.847709][ T6074] ? vfs_write+0x75e/0x8e0 [ 78.847806][ T6074] __secure_computing+0x82/0x150 [ 78.847887][ T6074] syscall_trace_enter+0xcf/0x1e0 [ 78.847976][ T6074] do_syscall_64+0xac/0x200 [ 78.847991][ T6074] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 78.848014][ T6074] ? clear_bhb_loop+0x40/0x90 [ 78.848112][ T6074] ? clear_bhb_loop+0x40/0x90 [ 78.848211][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.848262][ T6074] RIP: 0033:0x7f8ce58fe929 [ 78.848275][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.848308][ T6074] RSP: 002b:00007f8ce3f67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000072 [ 78.848324][ T6074] RAX: ffffffffffffffda RBX: 00007f8ce5b25fa0 RCX: 00007f8ce58fe929 [ 78.848335][ T6074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 78.848345][ T6074] RBP: 00007f8ce3f67090 R08: 0000000000000000 R09: 0000000000000000 [ 78.848356][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.848366][ T6074] R13: 0000000000000000 R14: 00007f8ce5b25fa0 R15: 00007ffd2b1a3568 [ 78.848383][ T6074] [ 79.102335][ T6082] tipc: Enabling of bearer rejected, already enabled [ 79.112410][ T6084] netlink: 128 bytes leftover after parsing attributes in process `syz.5.711'. [ 79.123095][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.711'. [ 79.131967][ T6082] loop0: detected capacity change from 0 to 1764 [ 79.140309][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.710'. [ 79.189349][ T1036] IPVS: starting estimator thread 0... [ 79.217304][ T6093] random: crng reseeded on system resumption [ 79.275734][ T6091] IPVS: using max 2256 ests per chain, 112800 per kthread [ 79.356975][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 79.356991][ T29] audit: type=1326 audit(1752669401.488:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 79.388552][ T29] audit: type=1326 audit(1752669401.509:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 79.412006][ T29] audit: type=1326 audit(1752669401.509:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 79.435198][ T29] audit: type=1326 audit(1752669401.509:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 79.458712][ T29] audit: type=1326 audit(1752669401.509:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 79.482140][ T29] audit: type=1326 audit(1752669401.509:3108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 79.505520][ T29] audit: type=1326 audit(1752669401.509:3109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 79.528955][ T29] audit: type=1326 audit(1752669401.509:3110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 79.552406][ T29] audit: type=1326 audit(1752669401.509:3111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 79.576021][ T29] audit: type=1326 audit(1752669401.509:3112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce58fe929 code=0x7ffc0000 [ 79.844989][ T6146] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6146 comm=syz.4.734 [ 79.913371][ C0] hrtimer: interrupt took 35376 ns [ 80.254081][ T6161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.739'. [ 80.394044][ T6182] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6182 comm=syz.0.750 [ 80.560241][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.754'. [ 80.577530][ T6194] program syz.0.754 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.819087][ T6221] siw: device registration error -23 [ 80.921994][ T6231] tipc: Enabling of bearer rejected, already enabled [ 80.959540][ T6233] loop3: detected capacity change from 0 to 512 [ 80.967167][ T6233] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 80.970451][ T6231] loop4: detected capacity change from 0 to 1764 [ 80.990581][ T6237] tipc: Enabling of bearer rejected, already enabled [ 81.008565][ T6237] loop0: detected capacity change from 0 to 1764 [ 81.034980][ T6233] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.770: invalid block [ 81.055166][ T6233] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.770: invalid indirect mapped block 4294967295 (level 1) [ 81.075968][ T6233] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.770: invalid indirect mapped block 4294967295 (level 1) [ 81.091608][ T6233] EXT4-fs (loop3): 2 truncates cleaned up [ 81.102267][ T6233] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.124064][ T6233] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.154359][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.172559][ T6233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.212224][ T6257] netlink: 'syz.1.780': attribute type 10 has an invalid length. [ 81.318535][ T6261] siw: device registration error -23 [ 81.325972][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.366544][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.470536][ T6281] netlink: 'syz.4.789': attribute type 13 has an invalid length. [ 81.534745][ T6288] siw: device registration error -23 [ 81.765738][ T6296] FAULT_INJECTION: forcing a failure. [ 81.765738][ T6296] name failslab, interval 1, probability 0, space 0, times 0 [ 81.778447][ T6296] CPU: 0 UID: 0 PID: 6296 Comm: syz.0.795 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 81.778531][ T6296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.778547][ T6296] Call Trace: [ 81.778556][ T6296] [ 81.778566][ T6296] __dump_stack+0x1d/0x30 [ 81.778592][ T6296] dump_stack_lvl+0xe8/0x140 [ 81.778617][ T6296] dump_stack+0x15/0x1b [ 81.778636][ T6296] should_fail_ex+0x265/0x280 [ 81.778700][ T6296] ? ctnetlink_alloc_filter+0x4d/0x550 [ 81.778719][ T6296] should_failslab+0x8c/0xb0 [ 81.778740][ T6296] __kmalloc_cache_noprof+0x4c/0x320 [ 81.778770][ T6296] ctnetlink_alloc_filter+0x4d/0x550 [ 81.778836][ T6296] ? __netlink_lookup+0x266/0x2a0 [ 81.778860][ T6296] ctnetlink_start+0xc3/0x110 [ 81.778882][ T6296] __netlink_dump_start+0x334/0x520 [ 81.778923][ T6296] ctnetlink_get_conntrack+0x113/0x440 [ 81.779037][ T6296] ? __pfx_ctnetlink_start+0x10/0x10 [ 81.779055][ T6296] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 81.779074][ T6296] ? __pfx_ctnetlink_done+0x10/0x10 [ 81.779110][ T6296] nfnetlink_rcv_msg+0x4c3/0x590 [ 81.779163][ T6296] ? selinux_capable+0x1f9/0x270 [ 81.779232][ T6296] netlink_rcv_skb+0x120/0x220 [ 81.779284][ T6296] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 81.779322][ T6296] nfnetlink_rcv+0x16b/0x1690 [ 81.779406][ T6296] ? __account_obj_stock+0x211/0x350 [ 81.779434][ T6296] ? obj_cgroup_charge_account+0x122/0x1a0 [ 81.779468][ T6296] ? should_fail_ex+0x30/0x280 [ 81.779501][ T6296] ? xas_load+0x413/0x430 [ 81.779556][ T6296] ? xas_load+0x413/0x430 [ 81.779791][ T6296] ? __rcu_read_unlock+0x4f/0x70 [ 81.779812][ T6296] ? xa_load+0xb1/0xe0 [ 81.779885][ T6296] ? __account_obj_stock+0x211/0x350 [ 81.779906][ T6296] ? obj_cgroup_charge_account+0x122/0x1a0 [ 81.779934][ T6296] ? should_fail_ex+0x30/0x280 [ 81.779975][ T6296] ? __rcu_read_unlock+0x4f/0x70 [ 81.780034][ T6296] ? should_fail_ex+0xdb/0x280 [ 81.780061][ T6296] ? selinux_nlmsg_lookup+0x99/0x890 [ 81.780093][ T6296] ? selinux_netlink_send+0x59f/0x5f0 [ 81.780149][ T6296] ? __rcu_read_unlock+0x34/0x70 [ 81.780176][ T6296] ? __netlink_lookup+0x266/0x2a0 [ 81.780203][ T6296] netlink_unicast+0x5a5/0x680 [ 81.780253][ T6296] netlink_sendmsg+0x58b/0x6b0 [ 81.780273][ T6296] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.780296][ T6296] __sock_sendmsg+0x145/0x180 [ 81.780339][ T6296] ____sys_sendmsg+0x31e/0x4e0 [ 81.780451][ T6296] ___sys_sendmsg+0x17b/0x1d0 [ 81.780563][ T6296] __x64_sys_sendmsg+0xd4/0x160 [ 81.780741][ T6296] x64_sys_call+0x2999/0x2fb0 [ 81.780761][ T6296] do_syscall_64+0xd2/0x200 [ 81.780778][ T6296] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 81.780807][ T6296] ? clear_bhb_loop+0x40/0x90 [ 81.780831][ T6296] ? clear_bhb_loop+0x40/0x90 [ 81.780906][ T6296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.780928][ T6296] RIP: 0033:0x7f8ce58fe929 [ 81.780946][ T6296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.780968][ T6296] RSP: 002b:00007f8ce3f67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.781052][ T6296] RAX: ffffffffffffffda RBX: 00007f8ce5b25fa0 RCX: 00007f8ce58fe929 [ 81.781063][ T6296] RDX: 0000000000040040 RSI: 0000200000000100 RDI: 0000000000000003 [ 81.781074][ T6296] RBP: 00007f8ce3f67090 R08: 0000000000000000 R09: 0000000000000000 [ 81.781086][ T6296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.781162][ T6296] R13: 0000000000000000 R14: 00007f8ce5b25fa0 R15: 00007ffd2b1a3568 [ 81.781180][ T6296] [ 82.193366][ T6303] ================================================================== [ 82.201529][ T6303] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 82.208609][ T6303] [ 82.210953][ T6303] write to 0xffff88810231c5c8 of 8 bytes by task 3317 on cpu 1: [ 82.218602][ T6303] release_task+0x6f9/0xb60 [ 82.223139][ T6303] wait_consider_task+0x113f/0x1650 [ 82.228394][ T6303] __do_wait+0xfa/0x510 [ 82.232582][ T6303] do_wait+0xb7/0x260 [ 82.236602][ T6303] kernel_wait4+0x16b/0x1e0 [ 82.241145][ T6303] __x64_sys_wait4+0x91/0x120 [ 82.245859][ T6303] x64_sys_call+0x26c8/0x2fb0 [ 82.250565][ T6303] do_syscall_64+0xd2/0x200 [ 82.255092][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.261010][ T6303] [ 82.263351][ T6303] read to 0xffff88810231c100 of 3200 bytes by task 6303 on cpu 0: [ 82.271174][ T6303] memcpy_and_pad+0x48/0x80 [ 82.275705][ T6303] arch_dup_task_struct+0x2c/0x40 [ 82.280764][ T6303] dup_task_struct+0x83/0x6a0 [ 82.285467][ T6303] copy_process+0x399/0x1f90 [ 82.290083][ T6303] kernel_clone+0x16c/0x5b0 [ 82.294618][ T6303] __se_sys_clone3+0x1c2/0x200 [ 82.299414][ T6303] __x64_sys_clone3+0x31/0x40 [ 82.304224][ T6303] x64_sys_call+0x10c9/0x2fb0 [ 82.309026][ T6303] do_syscall_64+0xd2/0x200 [ 82.313554][ T6303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.319468][ T6303] [ 82.321805][ T6303] Reported by Kernel Concurrency Sanitizer on: [ 82.327988][ T6303] CPU: 0 UID: 0 PID: 6303 Comm: syz.3.798 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(voluntary) [ 82.340430][ T6303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 82.350508][ T6303] ================================================================== [ 82.366700][ T6304] loop3: detected capacity change from 0 to 1024 [ 82.400783][ T6304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.421387][ T6304] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.798: Allocating blocks 385-513 which overlap fs metadata [ 82.437682][ T6304] EXT4-fs (loop3): pa ffff8881071c6690: logic 16, phys. 129, len 24 [ 82.445730][ T6304] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 82.472767][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.