last executing test programs: 4m58.978194179s ago: executing program 1 (id=2): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fedbdf060200000008000100", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601b2"], 0x4) 4m58.024364174s ago: executing program 1 (id=9): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) kcmp(0x0, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000004f000e00ae"], 0x78}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 4m57.463951563s ago: executing program 1 (id=12): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r5, 0x0, 0x8000f28, 0x0) splice(r4, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r6, 0x2004, 0x0) 4m57.225803357s ago: executing program 1 (id=17): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000040)={[{@mb_optimize_scan}, {@nobarrier}]}, 0x1, 0x59d, &(0x7f0000001100)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) capset(&(0x7f00000001c0)={0x20071026}, &(0x7f00000007c0)={0x9, 0x1, 0x5, 0x6, 0x3, 0x5}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105000, 0x24) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x800, 0x0, r1, 0xb21, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) fsetxattr$security_selinux(r3, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@const={0x10, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x61]}}, &(0x7f0000000300)=""/181, 0x27, 0xb5, 0x1, 0x0, 0x10000}, 0x28) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfdef) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000440)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@empty}}, &(0x7f0000000240)=0xe8) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000502, r7, &(0x7f0000000280)) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000702, r7, &(0x7f0000000740)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x20, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000009000000000000006806000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018000000c667100200000000000000006c1bc800fcffffff18120000", @ANYRES32=r0, @ANYBLOB="0000000000000002b703000000000000850000000c000000b70000000000000018302c27f7c13504ed7b6d434269110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x5d, &(0x7f0000000240)=""/93, 0x41100, 0x78, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000400)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x5, 0xe, 0x2, 0xffffff81}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000480)=[r1], &(0x7f00000004c0)=[{0x0, 0x1, 0xf, 0x4}, {0x4, 0x3, 0xc, 0x4}, {0x4, 0x1, 0xd}, {0x5, 0x5, 0x5, 0x2}, {0x1, 0x4, 0xb, 0x4}, {0x2, 0x1, 0x1, 0x8}], 0x10, 0x8}, 0x94) 4m56.852000323s ago: executing program 1 (id=21): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000280)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socket(0xa, 0x3, 0x4) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") vmsplice(r6, &(0x7f0000000640)=[{&(0x7f0000000080)="86a520a50a840aac8665eca130f20250b4f4b7fa6f51ffdd9ec3aa10f5fee381e175b9ad8f6903363d8eb16a7140b1095ba6da", 0x33}, {&(0x7f0000000380)="bfe67ecb83cc89005771a0d024b47a7a502bb894d5dbcd363bd3df97b7cd1f441b1a33aee6a0cf469ac15f1b32c03cfd197ea0025af1c11599da6c699dbd8455e7268123682fcd39fea6ddb01b41983432e32813efe9463eb1c8c0703720a5696a33747b878a9beac8c34b58294b09e9ab2f96f90a33809a90cca627f0a850863f62b05606915418f46c74822d52d8e492ec9188d9588b442abc", 0x9a}, {&(0x7f0000000440)="2fd62bdea34f6871a7b0356ee4aafc", 0xf}, {&(0x7f0000000480)="a79dec8cbb552d8e7fe1c0910a969d9c2102dc61b65c49dd865355d985c0d1b0e7a47145fe728378a39411de645e201d185d7876ca39acf97e471049e5da2443302d8773187050217df52006e9e931c21c091a273626f4aa524f8591e0075121627728b6b066f9a4d18838fcb945432d3a6d0919f8a5ad0f1a726283022adc27e9588c85b3dae4abefbffcb33f78ff6106d9bacae74178b7e6ca40f826269ecd932b5728b199a6a2bf6718365ebc5d4a9c915fba7b88104a2e892086b70d65e841d1f92442178f7b5d17b4f73a67abc0f2d035d4a7746db7a4fddac7e24b", 0xde}, {&(0x7f0000000580)="dd30f6a586f0bcba2a198aac8f7fbcb54b99d785b7a2622ff0fa5cc616ed08a0bd3af06cd046b5c14c8e145cff9511d8da8dd418e8f0df4457ff2f2b4c71892a74e4ff4460680be5e78524d6a71290c469d010b48c5061bf798505688a042353309ff51d537948846635ab46c62509f4fe42749dd8e8e8374f18479140fce0a8e47656eb423cbe3fbd3b2df3f59a5d4b2ecef2c30ed622", 0x97}], 0x5, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) 4m54.911876513s ago: executing program 1 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x50) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 4m54.910691133s ago: executing program 32 (id=43): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000}, 0x50) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r1, 0x1) 3m28.991387955s ago: executing program 5 (id=1294): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newqdisc={0x84, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0xc, 0x8, 0x5, 0xfffff312, 0xd21e, 0xfffffffb}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x84, 0x401, 0x0, 0xffffffad, 0xfffffffffffffff7, 0x7}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x8}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x55}, 0x4004040) 3m28.944825855s ago: executing program 5 (id=1295): setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f00000000c0)=0x1, 0x4) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0xfff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 3m28.804706578s ago: executing program 5 (id=1298): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x9c) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) (async) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001c80)) (async) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r10 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x1c, r10, 0x1, 0x0, 0x25dfdbfd, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYRES8=r2, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES64=r4, @ANYRES32, @ANYRES32, @ANYBLOB="3075253f97c78b70e75f469022b12c3de45ca0c79c5217f2f164e61a5f0967ad748f3e080d98a0bd726374b642dda15d32f838df70ab74d927f8eef21675a01f18cc2a8a1a94005aa96ffde0a7d0c10ec126e5ad3b33a9b21f814bac9b701c92d22baa8ef2ff024dc09d10", @ANYRES16, @ANYRES32=r10, @ANYRES32], 0xffffffffffffff41}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r3) (async) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r3) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x3) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003100000002010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) 3m28.120489469s ago: executing program 5 (id=1302): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000200)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="130000003020000000000000", @ANYRES32=0x0, @ANYBLOB="57e3523d0f13ba0d55", @ANYRES64=0x0], 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000759, &(0x7f0000000740)={[{@dioread_nolock}, {@noblock_validity}, {@usrquota}, {@errors_remount}, {@abort, 0x0}, {@noauto_da_alloc}, {@noload}, {@minixdf}, {@mblk_io_submit}, {@lazytime}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@norecovery}, {@nouser_xattr}, {@journal_checksum}, {@sysvgroups}], [{@fsuuid={'fsuuid', 0x3d, {[0x36, 0x34, 0x31, 0x65, 0x34, 0x62, 0x62, 0x56], 0x2d, [0x39, 0x63, 0x36, 0x66], 0x2d, [0x35, 0x33, 0x30, 0x62], 0x2d, [0x31, 0x62, 0x63, 0x61], 0x2d, [0x36, 0x63, 0x30, 0x64, 0x65, 0x31, 0x64, 0x62]}}}, {@fowner_gt={'fowner>', 0xee00}}], 0x2c}, 0x1, 0x4fc, &(0x7f0000001a40)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=@delqdisc={0x11c, 0x25, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x7, 0xe}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x6, 0x2d}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xe}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x0, 0x9, 0x8, 0x1, 0x101, 0x6, 0x7}}, {0x12, 0x2, [0xb3, 0x1, 0x7fff, 0x4, 0x7, 0xba, 0x6]}}, {{0x1c, 0x1, {0x99, 0xf6, 0x6, 0x43, 0x0, 0x8001, 0x6, 0x3}}, {0xa, 0x2, [0x9, 0x67, 0x8000]}}, {{0x1c, 0x1, {0xa8, 0x9, 0x0, 0x3, 0x0, 0x7f, 0x8, 0x4}}, {0xc, 0x2, [0x4, 0x5, 0x4, 0x4]}}, {{0x1c, 0x1, {0x9, 0x6c, 0x2, 0x6161, 0x1, 0x4, 0x7, 0x6}}, {0x10, 0x2, [0xcc6b, 0x101, 0x6, 0x8, 0x1400, 0x6]}}, {{0x1c, 0x1, {0x8d, 0x1, 0xf99, 0xf9, 0x1, 0x9, 0x8, 0x7}}, {0x12, 0x2, [0x9, 0x2, 0xfff, 0x3, 0x7, 0x5, 0x5e01]}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x800}, 0x28004010) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f100000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000f339ac17000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r5, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6}, 0x20) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1bd4c2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbb6a18ffaeac85d575050081004c0008004519101400e4000001469078ac141429ac1e0001"], 0x2e) ptrace(0x10, r7) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000bac00000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r10, @ANYRES16=r6], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xffffffffffffff82, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r11}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xe, &(0x7f0000000600)={[{@nomblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee01}}, {@sysvgroups}, {@lazytime}, {@quota}, {@noauto_da_alloc}]}, 0x4, 0x443, &(0x7f0000000dc0)="$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") mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f00000005c0)={0x8, 0x70, 0x80000}, 0x20) rt_sigqueueinfo(r7, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) ptrace$peeksig(0x4209, r7, &(0x7f0000000100)={0x7ff, 0x1, 0x1}, &(0x7f0000000440)=[{}]) close(0x3) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0), 0x8) 3m27.731750334s ago: executing program 5 (id=1305): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newqdisc={0x84, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0xfff2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0xc, 0x8, 0x5, 0xfffff312, 0xd21e, 0xfffffffb}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x84, 0x401, 0x0, 0xffffffad, 0xfffffffffffffff7, 0x7}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x8}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x55}, 0x4004040) 3m27.36561177s ago: executing program 5 (id=1310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000280)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socket(0xa, 0x3, 0x4) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") vmsplice(r6, &(0x7f0000000640)=[{&(0x7f0000000080)="86a520a50a840aac8665eca130f20250b4f4b7fa6f51ffdd9ec3aa10f5fee381e175b9ad8f6903363d8eb16a7140b1095ba6da", 0x33}, {&(0x7f0000000380)="bfe67ecb83cc89005771a0d024b47a7a502bb894d5dbcd363bd3df97b7cd1f441b1a33aee6a0cf469ac15f1b32c03cfd197ea0025af1c11599da6c699dbd8455e7268123682fcd39fea6ddb01b41983432e32813efe9463eb1c8c0703720a5696a33747b878a9beac8c34b58294b09e9ab2f96f90a33809a90cca627f0a850863f62b05606915418f46c74822d52d8e492ec9188d9588b442abc", 0x9a}, {&(0x7f0000000440)="2fd62bdea34f6871a7b0356ee4aafc", 0xf}, {&(0x7f0000000480)="a79dec8cbb552d8e7fe1c0910a969d9c2102dc61b65c49dd865355d985c0d1b0e7a47145fe728378a39411de645e201d185d7876ca39acf97e471049e5da2443302d8773187050217df52006e9e931c21c091a273626f4aa524f8591e0075121627728b6b066f9a4d18838fcb945432d3a6d0919f8a5ad0f1a726283022adc27e9588c85b3dae4abefbffcb33f78ff6106d9bacae74178b7e6ca40f826269ecd932b5728b199a6a2bf6718365ebc5d4a9c915fba7b88104a2e892086b70d65e841d1f92442178f7b5d17b4f73a67abc0f2d035d4a7746db7a4fddac7e24b", 0xde}, {&(0x7f0000000580)="dd30f6a586f0bcba2a198aac8f7fbcb54b99d785b7a2622ff0fa5cc616ed08a0bd3af06cd046b5c14c8e145cff9511d8da8dd418e8f0df4457ff2f2b4c71892a74e4ff4460680be5e78524d6a71290c469d010b48c5061bf798505688a042353309ff51d537948846635ab46c62509f4fe42749dd8e8e8374f18479140fce0a8e47656eb423cbe3fbd3b2df3f59a5d4b2ecef2c30ed622", 0x97}], 0x5, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) 3m27.36532704s ago: executing program 33 (id=1310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x3, 0x2) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000000280)=0x2, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x2) readv(r5, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) socket(0xa, 0x3, 0x4) r6 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") vmsplice(r6, &(0x7f0000000640)=[{&(0x7f0000000080)="86a520a50a840aac8665eca130f20250b4f4b7fa6f51ffdd9ec3aa10f5fee381e175b9ad8f6903363d8eb16a7140b1095ba6da", 0x33}, {&(0x7f0000000380)="bfe67ecb83cc89005771a0d024b47a7a502bb894d5dbcd363bd3df97b7cd1f441b1a33aee6a0cf469ac15f1b32c03cfd197ea0025af1c11599da6c699dbd8455e7268123682fcd39fea6ddb01b41983432e32813efe9463eb1c8c0703720a5696a33747b878a9beac8c34b58294b09e9ab2f96f90a33809a90cca627f0a850863f62b05606915418f46c74822d52d8e492ec9188d9588b442abc", 0x9a}, {&(0x7f0000000440)="2fd62bdea34f6871a7b0356ee4aafc", 0xf}, {&(0x7f0000000480)="a79dec8cbb552d8e7fe1c0910a969d9c2102dc61b65c49dd865355d985c0d1b0e7a47145fe728378a39411de645e201d185d7876ca39acf97e471049e5da2443302d8773187050217df52006e9e931c21c091a273626f4aa524f8591e0075121627728b6b066f9a4d18838fcb945432d3a6d0919f8a5ad0f1a726283022adc27e9588c85b3dae4abefbffcb33f78ff6106d9bacae74178b7e6ca40f826269ecd932b5728b199a6a2bf6718365ebc5d4a9c915fba7b88104a2e892086b70d65e841d1f92442178f7b5d17b4f73a67abc0f2d035d4a7746db7a4fddac7e24b", 0xde}, {&(0x7f0000000580)="dd30f6a586f0bcba2a198aac8f7fbcb54b99d785b7a2622ff0fa5cc616ed08a0bd3af06cd046b5c14c8e145cff9511d8da8dd418e8f0df4457ff2f2b4c71892a74e4ff4460680be5e78524d6a71290c469d010b48c5061bf798505688a042353309ff51d537948846635ab46c62509f4fe42749dd8e8e8374f18479140fce0a8e47656eb423cbe3fbd3b2df3f59a5d4b2ecef2c30ed622", 0x97}], 0x5, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169) 3m24.78942s ago: executing program 6 (id=1311): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000300), 0x4001) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b4000000534da0098896e423e7dd76a84ba39797d22000630a00f8a64b3fd294d507da876000070ba61fc5bfab3fd6893cb10b997cb07bfa7519bea87d8227eaf547b6758224374d879c120f2e"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0xfffffffd, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x2, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8002}, 0x0, 0xfffd, 0x0, 0x1, 0xa, 0x20002, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0x2) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000009786458a000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m23.931041104s ago: executing program 6 (id=1355): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, &(0x7f0000000000)) 3m23.815511356s ago: executing program 6 (id=1357): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (fail_nth: 1) 3m23.51943037s ago: executing program 6 (id=1359): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x8, 0x4, @tid=r0}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000005e40)={0x0, 0x0, &(0x7f0000005e00)={&(0x7f0000000080)=ANY=[@ANYBLOB="001a0000", @ANYRES16=r3, @ANYBLOB="21008d000000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x8004) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x800002, &(0x7f0000000700)=ANY=[], 0x5, 0x57b, &(0x7f0000000140)="$eJzs3V9v29YZx/EfHRsx1CEYtiEIgjQ9TTbAAVKFkhsFQq846khmK5ECSRX2VRE0dmFEboe4AxbfdLnJNmB7D+vtXsRewq53v+tiL2DDNJCUHMm2LMeurCT4foSWFPXwnIeUwgcn4R8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA5fsN1K47aQdjbNNP5jTjqnPL5qL17E5Mj/rn/ql/Jyf7T6qpuFItu/OJV5PXsf3d0q3h3S6vZZFUH713/6Sc/X14arX9KQpdi//nB08f9/vazRSeyIC0bBkkUdLyWNUESmXqt5j7YaCbSDdlk67t/2I7xY+ulUWzW/HumUq+vG1veinphq+G17Wjho4+qrlszn5a71ouTKHzwaTnxN4J2OwhbeUz2cRbzKPshfhakJrVex5id3f72+qwks6DKWYKqs4KqbrVaqVSrldrD+sNHrrt8bIE76aqORSz+R4vFmsdhHDiXpWH9V1uBQvW0KXPiy1dDsSJ1pnw+NKr/v3pQ1Oxpxuv/qMrfePXxTeX1/3bx7va0+j8ll8t77eu5DvRUj9VXX9t6djzmcDecp/2/XmDdOb0Gg7F3LVmFCpQoUqCOvHyJGS4xqqummlx9oQ01lcioqUBtWSXaUqJUNv9F+Ypl5SlVpFhGa/J1T0YV1VXXuoysytpSpJ5CtdSQl7eyo918v6+fkvFhUOUsQdWpIVeG38Vr1H+X+v/OWx79ET2rix+0gR/JYFT/JS0vOhkAAAAAADAXTv6379n4f0Xv53PNoG3dqdEAAAAAAODtk4/ob2WTlWzufTmnjf8BAAAAAMDbyMmvsXMklfSBpMHg8Eool3/wBwAAAADg3ZAP8G9nk1I294GcifE/AAAAAAB4B/xx1j32V5PuVefv/9YVrTgvupu/dPa8LM7bG94O9crRFtPmzff+M8gt523VlodN+vaW85Mi6PAmmD8MJzuz8nDi+OwJONeGa08moD/rwyLmwyfF9Mnok6KXUjNo27IftT+pyPOuLaV2M/3t17u/k7Le/xR2rjna2e1vl7/8pv8kz+VF1sqLveF5EsdOlzgll2/z+y3k11ycuMUr+YUYw35LRb/u+PYvFasvvUafL3WniLlTKqalye1fzfqslKdt/TCLygW3/KXuFjF31+4WkxOyqM7Kojqexbn2xRmyWJ+VxfoFswCARdmZXoX+VxTxwdG6e46j3OVU95dak/Qvae1mfmBdvnnCEd2ddUR3L1jd/nbsGUjTamzW71+OVNXvsxW+n9pv0q462S688u3eb3R9//nBR7t7j7/a/mr762p1veZ+7LoPq1rJN2M4OZ7pKrUHAHDSM3ZGNbd4xs7Mp/A4H88YVf/s8JSCsr7UN+rrie7nVxvkZxyc2Gpp7DSE+zNGraWxJ7zcnzGqK4096OXssetz/hYAALhcd2bU4bPU//ujceqUcfdkLT99dDxeywEAwHzY+AenlP7BieOg+0WlXq946YY1ceR/ZuKg0bImCFMb+xte2LKmG0dp5EftbObzoGETk/S63ShOTTOKTTdKgk3TDNrWJFtJajsmsR0vTAM/6batN/hOisLU81PTCBLfdHu/bgfJho3zlZOu9YNm4HtpEIUmiXqxb8vGJNaOBQYNG6ZBM8hmQ9ONg44Xb5nPo3avY03DJn4cdNOoaNAf9hWEzSju5M2WF72zAQB4Q+w/P3j6uN/ffjbHmUVvIwAAmESVBgAAAAAAAAAAAAAAAAAAAADgzXcZ1/9NzFydY6fO7y/WzpImlzj/HQxeu53BnHbd6H69l/x9jc+saJ5dvAEbeO6Zq/rRW16StMjtWuBBCcCl+H8AAAD//5JXWjA=") setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000240)={0x8, {{0x2, 0x4e24, @multicast1}}, {{0x2, 0x4e21, @private=0xa010100}}}, 0x108) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="6000eb163ec6fe22b2ff", @ANYRES16=r6, @ANYBLOB="01002dbd7000fcdbdf256a0000000c0099000c0000005d0000000500d2000a0000000a00060008021100000000000500d200040000000500d200000000000500d200030000000500d2000a0000000a000600ffffffffffff0000"], 0x60}, 0x1, 0x0, 0x0, 0x22028005}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a010800000000000000000000140000001000010000000000000000000084000a0000"], 0x3c}}, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) syz_clone3(&(0x7f0000000e00)={0xa204000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000004700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x18) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) sendto$packet(r4, &(0x7f0000000240)='V', 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @dev}, 0x14) 3m23.127918626s ago: executing program 6 (id=1365): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) (fail_nth: 1) 3m20.572153136s ago: executing program 6 (id=1395): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) (fail_nth: 1) 3m20.523089107s ago: executing program 34 (id=1395): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) (fail_nth: 1) 3.590432972s ago: executing program 3 (id=3910): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000200009c04b19981a9bae6d43476000000000000090000000000000000"], 0x0, 0x26}, 0x20) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_clone(0x100000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) tgkill(r2, r3, 0x38) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="3800009500d62be27721b0be5832a5f41af072fb6cf7ae53430a329c838c0b0d7c338312196633bcc0325dfcd7a4ff44881e890f9f5b845f6646db7a480e21e369e922607accef8b20c97f2bdc2236d0d750dcf2c0f22e236778f9ef6d98c8f52e72cddd9810d9f8ae74e844b9fed97883e229f320329fefc36ba86777b2427eb09d0e285bed826199672136b199e625862be304d5b9b5057c2193214d3f572b587fa7ff0dd83d99b0f0e2da7ff1f9dd7c91ce73b0676448a16072c1b5f15705408010cb95d5cb85fa39141be21c21ec98d745841ed0d934612e1c3886c5315832e744cd87"], &(0x7f00000000c0)='GPL\x00', 0x20005, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x10000, 0x0) 3.519715373s ago: executing program 3 (id=3912): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000580)={0x7, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/209, 0xd1}, {&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000340)=""/65, 0x41}, {&(0x7f00000003c0)=""/150, 0x96}], &(0x7f0000000500)=[0xffffffff, 0x1, 0x6, 0x8000000000000000, 0x9, 0xfffffffffffff40f, 0x10001, 0x2, 0xfffffffffffff735], 0x5}, 0x20) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r1, r1, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x97a3}, 0x18) syz_io_uring_setup(0x22f, &(0x7f0000000a80)={0x0, 0x6b57, 0x10000, 0x0, 0x108002ce}, &(0x7f0000000000)=0x0, &(0x7f0000000a00)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7) r5 = syz_clone(0x4020000, &(0x7f0000000280)="5bfa0b8ef6bc8368db43759bba85c5fc656c1e5cba4e543757d307692d32d1eba2d76f0c8ae7006966187584a805aef4135f87680679959ca52a", 0x3a, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="246d7a802220ecf9553a3d63e859bd25cb9c4225dbbfda91f4a720ca76ff216471edab76ec8f3bf7b8624357d64bd9173b2f96b48ebed86a02480cd9d5a364d91d5cbfe0a972a2a3ed6364ef5d3d49ae051e1c198c9f14ee9c60ac3daec01838ce078b4e9209d00f59c1d5286044b2f3cc04e6d33d044b2cdf7e2232ed72346178a54bdea2abbc1b51f40801d8ee5cad62bcc2fcea17458ffbde") r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) process_vm_writev(r5, &(0x7f0000000e00)=[{&(0x7f0000000c80)=""/175, 0xaf}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000940)=""/33, 0x21}, {&(0x7f0000000d40)=""/186, 0xba}, {&(0x7f0000000980)=""/42, 0x2a}], 0x6, &(0x7f0000000a40)=[{&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000f80)=""/255, 0xff}], 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8a) 3.473806724s ago: executing program 7 (id=3914): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x46, 0x0, 0xa}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2000018, &(0x7f00000005c0)=ANY=[], 0x1, 0x728, &(0x7f0000000b80)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) syz_io_uring_setup(0xcd8, &(0x7f0000000200)={0x0, 0x465e, 0x400, 0x3, 0x234}, &(0x7f0000000340), &(0x7f0000000300)) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 3.338613596s ago: executing program 0 (id=3916): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081054e81f782db44b9040a1d3b020a000000040000a11800020000e9400084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6e94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9561b4a29c828f6a3aa2fcf72baa7ea67e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a753916647f616b762439deec51", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004cc0)={0x34, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x79c8, 0x0, 0x0, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r11) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r12, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x61}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "481c1a42272721b76f5267ea7009d278"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040044}, 0x4008000) 3.338153796s ago: executing program 7 (id=3917): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x10}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)='5', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 3.303197217s ago: executing program 3 (id=3918): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40088a01, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioperm(0x2, 0x8, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) 3.288754197s ago: executing program 7 (id=3919): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 2.651895137s ago: executing program 4 (id=3925): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) 2.589550898s ago: executing program 4 (id=3926): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) 2.51326228s ago: executing program 4 (id=3928): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000580)={0x7, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/209, 0xd1}, {&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000340)=""/65, 0x41}, {&(0x7f00000003c0)=""/150, 0x96}], &(0x7f0000000500)=[0xffffffff, 0x1, 0x6, 0x8000000000000000, 0x9, 0xfffffffffffff40f, 0x10001, 0x2, 0xfffffffffffff735], 0x5}, 0x20) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r1, r1, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x97a3}, 0x18) syz_io_uring_setup(0x22f, &(0x7f0000000a80)={0x0, 0x6b57, 0x10000, 0x0, 0x108002ce}, &(0x7f0000000000)=0x0, &(0x7f0000000a00)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7) r5 = syz_clone(0x4020000, &(0x7f0000000280)="5bfa0b8ef6bc8368db43759bba85c5fc656c1e5cba4e543757d307692d32d1eba2d76f0c8ae7006966187584a805aef4135f87680679959ca52a", 0x3a, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="246d7a802220ecf9553a3d63e859bd25cb9c4225dbbfda91f4a720ca76ff216471edab76ec8f3bf7b8624357d64bd9173b2f96b48ebed86a02480cd9d5a364d91d5cbfe0a972a2a3ed6364ef5d3d49ae051e1c198c9f14ee9c60ac3daec01838ce078b4e9209d00f59c1d5286044b2f3cc04e6d33d044b2cdf7e2232ed72346178a54bdea2abbc1b51f40801d8ee5cad62bcc2fcea17458ffbde") r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) process_vm_writev(r5, &(0x7f0000000e00)=[{&(0x7f0000000c80)=""/175, 0xaf}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000940)=""/33, 0x21}, {&(0x7f0000000d40)=""/186, 0xba}, {&(0x7f0000000980)=""/42, 0x2a}], 0x6, &(0x7f0000000a40)=[{&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000f80)=""/255, 0xff}], 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8a) 2.44355569s ago: executing program 0 (id=3929): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x14, 0x4, 0x8, 0xb}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f0000000900)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e294aaf5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f00000003c0)="d48c8225ddfdf23dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffc08e41d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe7520000000000000000000000000000000b00000000000000e052788fed8f7db246f0be4929a5afc2222845e9008620c4535c6c2c96868c32b827ae4357bbccf7f99a1daa6d2e9ceca5ed14f752105d6499a3ea31ed4559fa7e44d418a8b0be769fd383e91a80bc5ae6a2623d4e9e700744f66614535805b84e14d7d27bfd2e0bfcfa7c17bd55cb59b8d003137c", 0xcf}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060", 0x3b}], 0x4}}], 0x1, 0xc0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r4 = syz_io_uring_setup(0x272f, &(0x7f0000001600)={0x0, 0x2838, 0x4000, 0x3, 0x18b}, &(0x7f0000001680), &(0x7f00000016c0)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000040)=0x4, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000040)) io_uring_setup(0x5271, &(0x7f0000001700)={0x0, 0x90ea, 0x200, 0x0, 0x169, 0x0, r4}) sendto$inet(r1, &(0x7f0000000580)="17", 0xffffffffffffff16, 0x10008095, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="0100230100003402000001ffffe30800010067"], 0x1c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 2.364175412s ago: executing program 3 (id=3930): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES8=r2, @ANYBLOB='\"\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='f2fs_unlink_enter\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = dup(r4) writev(r6, &(0x7f0000001540), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) recvfrom(r7, 0x0, 0x0, 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x9, 0x0, 0xf, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x8000}, 0x18500, 0x9, 0x10000c9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 2.363781012s ago: executing program 4 (id=3931): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(0xffffffffffffffff, 0x409, 0xb) 2.059733136s ago: executing program 4 (id=3933): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x168, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x138, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x20, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x1c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7fff}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0x6}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xdc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x79}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @local}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4) socket(0x1e, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000040), 0x22, 0x65f, &(0x7f0000002980)="$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") symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000006c0)={[{@grpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}]}, 0xfd, 0x50f, &(0x7f0000000140)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOUCQqgSokeQtiHxRlHsOIqd0oQ9pGeuSFTiBEf+AG5IPSFx5ILgxqUckPgRgRokDoNmPMk6WbuJNokdxZ+PNJr35s36+32bnffWL4lfACPrdkTsR8RERLwbEbP59UJ+xFudI73vk4NHK4cHj1YKkSTv/LOQtafXouvPpG7lr1mOiO9/O+JHhSfjtnb3Npbr9dp2Xp9vN7bmW7t799Yby2u1tdpmtbq0uLTwxv3Xq5fW15caE3npix//Yf9rP0nTmsmvdPfjMnW6XjqOkxqPiO9eRbAhGMv7MzHsRHgqxYh4PiJezp7/2RjLvpoAwE2WJLORzHbXAYCbrpitgRWKlXwtYCaKxUqls4b3QkwX681W++7D5s7mametbC5KxYfr9dpCvlY4F6VCWl/Myo/r1VP1+xHxXET8bHIqq1dWmvXVYf7HBwBG2K1T8/9/JjvzPwBww5WHnQAAMHDmfwAYPeZ/ABg95n8AGD2d+X9q2GkAAAPk/T8AjB7zPwCMlO+9/XZ6JIf551+vvre7s9F8795qrbVRaeysVFaa21uVtWZzLfvMnsZZr1dvNrcWX4ud9+e+vtVqz7d29x40mjub7QfZ53o/qJWyu/YH0DMAoJ/nXvroz4V0Rn5zKjuiay+H0lAzA65acdgJAEMzNuwEgKGx2xeMrgu8x7c8ADdEjy16j/3+W0lS7vULQkmSJFebFnCF7nzO+j+Mqq71fz8FDCPG+j+MLuv/MLqSpHDePf/jvDcCANebNX6gz/f/n8/Pv86/OfDD1dN3fHiVWQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD1drT/byXfC3wmisVKJeKZiJiLUuHher22EBHPRsSfJkuTaX1xyDkDABdV/Fsh3//rzuyrMyeaXrx1XJyIiB//4p2fv7/cbm//MWKi8K/Jo+vtD/Pr1cFnDwCc7Wiezs5db+Q/OXi0cnQMMp+/fzMiyp34hwcTcXgcfzzGs3M5ShEx/e9CXu8odK1dXMT+BxHx2V79L8RMtgbS2fn0dPw09jMDjV88Eb+YtXXO6d/FZy4hFxg1H6Xjz1u9nr9i3M7OvZ//cjZCXVw+/qUvtXKYjYGP4x+Nf2N9xr/b543x2u++0ylNPdn2QcTnxyOOYh92jT9H8Qt94r96+sX6DIh/+cKLL/fLLfllxJ3oHb871ny7sTXf2t27t95YXqut1Tar1aXFpYU37r9enc/WqOf7zwb/ePPus/3a0v5P94lfPqP/X+4b8aRf/e/dH3zpU+J/9ZVe8YvxwqfET+fEr5wz/vL0b8r92tL4q336f9bX/+4543/8170ntg0HAIantbu3sVyv17b7Fn47ffY9CgoDKaT/ZK9BGj0L3xhUrIno3fTTVzrP9KmmJHmqWCfHicfvHC9j1Q24Do4f+oj477CTAQAAAAAAAAAAAAAAehrEbywNu48AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcXP8PAAD//9140jY=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 1.82980155s ago: executing program 7 (id=3935): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff73}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000005304", @ANYRES32=0x0, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x240088c0) 1.797563731s ago: executing program 3 (id=3936): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4) socket(0x1e, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e58, &(0x7f0000000040), 0x22, 0x65f, &(0x7f0000002980)="$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") symlinkat(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f00000006c0)={[{@grpid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nodiscard}]}, 0xfd, 0x50f, &(0x7f0000000140)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 1.737167132s ago: executing program 7 (id=3938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000001010101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c0019800800010005"], 0x40}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xc}, {0xfff3}}}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x0, 0xf, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9c2c89b6f5becfd", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000800)={{r1}, "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"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x78}}, 0x0) setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20082, 0x0) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000780), 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4010) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r8 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r8, 0x0, 0x0) 1.735718242s ago: executing program 2 (id=3939): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000150081054e81f782db44b9040a1d3b020a000000040000a11800020000e9400084150e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6e94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad9561b4a29c828f6a3aa2fcf72baa7ea67e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a753916647f616b762439deec51", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1, 0x4, 0x17fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000a00)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004cc0)={0x34, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_io_uring_setup(0x79c8, 0x0, 0x0, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_getoverrun(r11) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) sendmsg$DEVLINK_CMD_RATE_DEL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendmsg$NL80211_CMD_DEL_PMKSA(r8, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r12, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3ff, 0x61}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "481c1a42272721b76f5267ea7009d278"}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040044}, 0x4008000) 1.431863777s ago: executing program 0 (id=3940): close(0x3) shutdown(0xffffffffffffffff, 0x0) close(0x3) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000340)=ANY=[], 0x7c8) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000003"], 0x44}}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 1.315920509s ago: executing program 0 (id=3941): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x3, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 846.536626ms ago: executing program 2 (id=3942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) 785.240358ms ago: executing program 7 (id=3943): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a010100f7e50000000000010000010900010073797a3000000000090003fb72797a310000000060000000060a010400000000000100060008000b400000000038000480340001800b0001006e756d67656e00002400028008000140000000170800044000000006080002400000000708000340000000010900010073797a3000000000140000001100010000000000000000000100000a"], 0xd4}}, 0x0) r2 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) fcntl$addseals(r2, 0x409, 0xb) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}}, 0x4) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8010}, 0x200000c4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x268, 0x33a, 0x130, 0x268, 0x268, 0x460, 0x460, 0x268, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0x108, 0x130, 0xd8000000, {0x9402}, [@common=@unspec=@connlabel={{0x28}, {0x2, 0x1}}, @common=@unspec=@statistic={{0x38}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) gettid() r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) process_vm_writev(r6, &(0x7f0000000000), 0x1, &(0x7f0000121000)=[{&(0x7f0000000540)=""/237, 0xffffffad}], 0x23a, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 766.698678ms ago: executing program 2 (id=3944): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="7ff46f5ed310e22821cb6c547b851f8071dc0e3531b995fd86e696024140604ee6ad2c5d45390af33a7592f59be4ba54ef2b35c3a2b7e7a188ae4858e10f", 0x3e}, {&(0x7f0000000c00)="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", 0xff}], 0x2, 0x10, 0x8) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, &(0x7f0000000440)={'#! ', './file0'}, 0xb) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%pK \x00'}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0xa, &(0x7f0000000980)=ANY=[@ANYBLOB="78b21800040000001852000006000000183100000300000000f8c10000000000183700000500000000007ea5348d4047858dab7b46a62fcf000000000000430800010800000018400000feff000000000000000200"/94], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x33, &(0x7f00000006c0)=""/51, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xd, 0x6f4c, 0x101}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x1, 0xffffffffffffffff, r2, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000040000000200000004000000", @ANYRES32, @ANYBLOB="00000000000000f300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000500)='devlink_health_reporter_state_update\x00', r4}, 0x18) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r6, &(0x7f0000000040)}, 0x20) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdfce8d06fcee6a67250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 475.668203ms ago: executing program 4 (id=3945): r0 = socket$netlink(0x10, 0x3, 0x0) timer_create(0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) setpriority(0x1, 0x0, 0x79) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(&(0x7f0000000400)='rootfs\x00', 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x7}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x4}, @TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @private=0xa010100}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x20084084) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@journal_dev={'journal_dev', 0x3d, 0x2d353}}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 433.067933ms ago: executing program 2 (id=3946): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r1, 0x325, 0x70bd2b}, 0x14}, 0x1, 0x0, 0x0, 0x20040890}, 0x8040) (fail_nth: 2) 366.349764ms ago: executing program 0 (id=3947): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES8=r2, @ANYBLOB='\"\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000003c0)='f2fs_unlink_enter\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000280)="61df718305a35997984d4763fcac", 0x0, 0xe697, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = dup(r4) writev(r6, &(0x7f0000001540), 0x0) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000100)={0x1a, 0x102, 0x9, 0x0, 0x5, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}, 0x10) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0) recvfrom(r7, 0x0, 0x0, 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x9, 0x0, 0xf, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x8000}, 0x18500, 0x9, 0x10000c9, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) 83.764419ms ago: executing program 0 (id=3948): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x14000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sys_exit\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e00000000000000fdff07000800000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000068ef00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/15], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000001000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='cachefiles_ondemand_fd_write\x00', r6}, 0x18) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000fc0)='system_u:object_r:cgroup_t:s0\x00', 0x1e, 0x2) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYRESDEC=r9], 0x48) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r10, 0x5608) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4001d}, 0x0) r11 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=@newtfilter={0x74, 0x28, 0xd27, 0x1003ffd, 0x0, {0x0, 0x0, 0x0, r12, {0xd, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0xfeb3, 0x0, 0x80000000, {0x5e, 0x0, 0x0, 0x6, 0x800, 0x2}, {0xe, 0x1, 0xffff, 0xf001, 0xa, 0x6}, 0x8a, 0x28a, 0x7}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) 27.7093ms ago: executing program 3 (id=3949): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) (async) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x814552, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRES64=r4, @ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="c7282db03d00976e8821"], 0xfb, 0x1207, &(0x7f0000003680)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/key-users\x00', 0x0, 0x0) (async) preadv2(0xffffffffffffffff, &(0x7f0000001900), 0x0, 0xffffffff, 0x6, 0x1c) io_setup(0x8f0, &(0x7f0000002400)=0x0) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r11, 0x1, 0x1070bd2c, 0x25dfdbfd, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2a}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r13 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r13, 0x40049366, &(0x7f0000000440)=0x1) (async) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_pgetevents(r8, 0x2, 0x4, &(0x7f0000000640)=[{}, {}, {}, {}], &(0x7f0000000480)={0x0, 0x989680}, &(0x7f00000006c0)={&(0x7f0000000580)={[0x6]}, 0x8}) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 27.48376ms ago: executing program 2 (id=3950): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x24, 0x0) 0s ago: executing program 2 (id=3951): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000580)={0x7, 0x0, &(0x7f0000000480)=[{&(0x7f00000000c0)=""/209, 0xd1}, {&(0x7f0000000240)=""/251, 0xfb}, {&(0x7f00000001c0)=""/40, 0x28}, {&(0x7f0000000340)=""/65, 0x41}, {&(0x7f00000003c0)=""/150, 0x96}], &(0x7f0000000500)=[0xffffffff, 0x1, 0x6, 0x8000000000000000, 0x9, 0xfffffffffffff40f, 0x10001, 0x2, 0xfffffffffffff735], 0x5}, 0x20) r1 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(r1, r1, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x97a3}, 0x18) syz_io_uring_setup(0x22f, &(0x7f0000000a80)={0x0, 0x6b57, 0x10000, 0x0, 0x108002ce}, &(0x7f0000000000)=0x0, &(0x7f0000000a00)=0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x7) r5 = syz_clone(0x4020000, &(0x7f0000000280)="5bfa0b8ef6bc8368db43759bba85c5fc656c1e5cba4e543757d307692d32d1eba2d76f0c8ae7006966187584a805aef4135f87680679959ca52a", 0x3a, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="246d7a802220ecf9553a3d63e859bd25cb9c4225dbbfda91f4a720ca76ff216471edab76ec8f3bf7b8624357d64bd9173b2f96b48ebed86a02480cd9d5a364d91d5cbfe0a972a2a3ed6364ef5d3d49ae051e1c198c9f14ee9c60ac3daec01838ce078b4e9209d00f59c1d5286044b2f3cc04e6d33d044b2cdf7e2232ed72346178a54bdea2abbc1b51f40801d8ee5cad62bcc2fcea17458ffbde370a29dbca") r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) kcmp(r5, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) process_vm_writev(r5, &(0x7f0000000e00)=[{&(0x7f0000000c80)=""/175, 0xaf}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000940)=""/33, 0x21}, {&(0x7f0000000d40)=""/186, 0xba}, {&(0x7f0000000980)=""/42, 0x2a}], 0x6, &(0x7f0000000a40)=[{&(0x7f0000000e80)=""/242, 0xf2}, {&(0x7f0000000f80)=""/255, 0xff}], 0x2, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8a) kernel console output (not intermixed with test programs): 295.383961][T14344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.397443][T14344] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.408317][T14349] xt_CT: No such helper "pptp" [ 295.419100][T13532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.428294][ T3443] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 295.456931][T14352] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3338'. [ 295.485591][T14352] xt_CT: No such helper "pptp" [ 295.825372][T14357] validate_nla: 4 callbacks suppressed [ 295.825391][T14357] netlink: 'syz.0.3339': attribute type 10 has an invalid length. [ 295.839403][T14357] veth1_vlan: entered allmulticast mode [ 295.847657][T14357] team0: Device veth1_vlan failed to register rx_handler [ 295.861526][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.868946][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.876407][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.883914][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.891359][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.898799][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.906240][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.913661][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.921103][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.928518][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.936111][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.943546][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.950982][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.958473][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.965942][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.973395][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.980888][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 295.981721][T14359] loop7: detected capacity change from 0 to 2048 [ 295.988333][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.002146][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.009636][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.017076][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.024536][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.032013][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.039441][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.047156][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.054692][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.062230][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.066938][T14361] random: crng reseeded on system resumption [ 296.069672][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.083570][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.091131][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.098554][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.106018][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.113513][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.121003][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.128418][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.135935][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.143512][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.151026][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.158445][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.165892][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.173317][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.180914][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.188467][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.195961][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.203481][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.210978][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.218476][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.225998][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.233443][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.240852][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.248316][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.255761][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.263239][ T3407] hid-generic 0008:0006:0007.0003: unknown main item tag 0x0 [ 296.271430][ T3407] hid-generic 0008:0006:0007.0003: hidraw0: HID v0.0b Device [syz1] on syz1 [ 296.286439][T14359] loop7: p1 < > p4 [ 296.291416][T14359] loop7: p4 size 8388608 extends beyond EOD, truncated [ 296.369324][T14359] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 296.375887][T14359] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 296.383458][T14359] vhci_hcd vhci_hcd.0: Device attached [ 296.396789][T14371] ipvlan2: entered promiscuous mode [ 296.436660][T14373] vhci_hcd: connection closed [ 296.437113][ T3443] vhci_hcd: stop threads [ 296.446148][ T3443] vhci_hcd: release socket [ 296.450672][ T3443] vhci_hcd: disconnect device [ 296.454488][T14371] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14371 comm=syz.4.3346 [ 296.533352][T14387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3349'. [ 296.556458][T14393] random: crng reseeded on system resumption [ 296.574487][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3349'. [ 296.603076][T14396] random: crng reseeded on system resumption [ 296.764889][T14403] loop2: detected capacity change from 0 to 512 [ 296.804532][T14403] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.827897][T14403] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.001964][T14407] loop3: detected capacity change from 0 to 512 [ 297.008685][T14407] EXT4-fs: Ignoring removed orlov option [ 297.014503][T14407] EXT4-fs: test_dummy_encryption option not supported [ 297.227933][T13746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.309592][T14409] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3356'. [ 297.451780][T14409] xt_CT: No such helper "pptp" [ 297.836004][T14423] loop2: detected capacity change from 0 to 764 [ 297.862980][T14423] rock: directory entry would overflow storage [ 297.869215][T14423] rock: sig=0x4f50, size=4, remaining=3 [ 297.874877][T14423] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 298.043675][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 298.043693][ T29] audit: type=1326 audit(1752939896.366:8437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.7.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 298.081663][T14428] random: crng reseeded on system resumption [ 298.125375][ T29] audit: type=1326 audit(1752939896.396:8438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14416 comm="syz.7.3358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 298.236486][ T29] audit: type=1400 audit(1752939896.516:8439): avc: denied { create } for pid=14429 comm="syz.4.3363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 298.275736][T14436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.284325][T14436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.293323][ T29] audit: type=1326 audit(1752939896.596:8440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa926e9a9 code=0x7ffc0000 [ 298.316988][ T29] audit: type=1326 audit(1752939896.596:8441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa926e9a9 code=0x7ffc0000 [ 298.340665][ T29] audit: type=1326 audit(1752939896.596:8442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa926e9a9 code=0x7ffc0000 [ 298.364335][ T29] audit: type=1326 audit(1752939896.596:8443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa926e9a9 code=0x7ffc0000 [ 298.387913][ T29] audit: type=1326 audit(1752939896.596:8444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa926e9a9 code=0x7ffc0000 [ 298.411532][ T29] audit: type=1326 audit(1752939896.596:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa926e9a9 code=0x7ffc0000 [ 298.435203][ T29] audit: type=1326 audit(1752939896.596:8446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14435 comm="syz.0.3364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0fa926e9a9 code=0x7ffc0000 [ 298.533672][T14440] loop7: detected capacity change from 0 to 512 [ 298.590060][T14440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.603662][T14440] ext4 filesystem being mounted at /400/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.677560][ T8328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.806870][T14461] random: crng reseeded on system resumption [ 298.972447][T14475] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 298.986194][T14475] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 299.080873][T14487] FAULT_INJECTION: forcing a failure. [ 299.080873][T14487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.094076][T14487] CPU: 0 UID: 0 PID: 14487 Comm: syz.4.3379 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 299.094114][T14487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.094132][T14487] Call Trace: [ 299.094141][T14487] [ 299.094150][T14487] __dump_stack+0x1d/0x30 [ 299.094179][T14487] dump_stack_lvl+0xe8/0x140 [ 299.094247][T14487] dump_stack+0x15/0x1b [ 299.094302][T14487] should_fail_ex+0x265/0x280 [ 299.094343][T14487] should_fail+0xb/0x20 [ 299.094375][T14487] should_fail_usercopy+0x1a/0x20 [ 299.094417][T14487] _copy_from_user+0x1c/0xb0 [ 299.094443][T14487] restore_altstack+0x4b/0x2d0 [ 299.094483][T14487] ? __set_task_blocked+0x23a/0x2a0 [ 299.094561][T14487] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 299.094590][T14487] ? _raw_spin_unlock_irq+0x26/0x50 [ 299.094615][T14487] ? signal_setup_done+0x266/0x290 [ 299.094660][T14487] ? xfd_validate_state+0x45/0xf0 [ 299.094759][T14487] ? fpu__clear_user_states+0x63/0x1e0 [ 299.094795][T14487] ? fpregs_mark_activate+0x66/0x140 [ 299.094824][T14487] ? fpu__clear_user_states+0x63/0x1e0 [ 299.094877][T14487] ? __secure_computing+0x82/0x150 [ 299.094909][T14487] x64_sys_call+0x2e8a/0x2fb0 [ 299.094937][T14487] do_syscall_64+0xd2/0x200 [ 299.094960][T14487] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 299.094990][T14487] ? clear_bhb_loop+0x40/0x90 [ 299.095014][T14487] ? clear_bhb_loop+0x40/0x90 [ 299.095037][T14487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.095065][T14487] RIP: 0033:0x7f813cbbab89 [ 299.095085][T14487] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 299.095109][T14487] RSP: 002b:00007f813b286a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 299.095189][T14487] RAX: ffffffffffffffda RBX: 00007f813ce45fa0 RCX: 00007f813cbbab89 [ 299.095206][T14487] RDX: 00007f813b286a80 RSI: 00007f813b286bb0 RDI: 0000000000000021 [ 299.095302][T14487] RBP: 00007f813b287090 R08: 0000000000000000 R09: 0000000000000000 [ 299.095316][T14487] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 299.095328][T14487] R13: 0000000000000000 R14: 00007f813ce45fa0 R15: 00007ffd3360d618 [ 299.095347][T14487] [ 299.395316][T14524] random: crng reseeded on system resumption [ 299.528297][T14549] loop3: detected capacity change from 0 to 512 [ 299.544002][T14549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.561138][T14549] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.575641][T14558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3387'. [ 299.587545][T14558] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.596556][T14558] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.605376][T14558] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.614210][T14558] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.660628][T14558] vxlan0: entered promiscuous mode [ 299.764893][T14565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.798433][T14565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.838932][T14565] netlink: 'syz.2.3390': attribute type 10 has an invalid length. [ 299.902666][T14565] bond0: (slave dummy0): Releasing backup interface [ 299.929739][T14569] netlink: 'syz.2.3390': attribute type 10 has an invalid length. [ 299.940856][T14567] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3391'. [ 299.965098][T14565] team0: Port device dummy0 added [ 299.982207][T14569] team0: Port device dummy0 removed [ 300.000767][T14575] loop7: detected capacity change from 0 to 512 [ 300.013267][T14569] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 300.038658][T14573] xt_CT: No such helper "pptp" [ 300.054059][T14575] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.072110][T14575] ext4 filesystem being mounted at /408/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.118248][ T8328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.157369][T12762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.527475][T14590] random: crng reseeded on system resumption [ 300.560777][T14592] loop3: detected capacity change from 0 to 764 [ 300.570458][T14592] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 300.617046][T14598] loop2: detected capacity change from 0 to 512 [ 300.628068][T14592] rock: directory entry would overflow storage [ 300.634353][T14592] rock: sig=0x4f50, size=4, remaining=3 [ 300.639929][T14592] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 300.668265][T14603] SELinux: ebitmap: map size 3 does not match my size 64 (high bit was 5) [ 300.677025][T14603] SELinux: failed to load policy [ 300.753351][T14616] ALSA: seq fatal error: cannot create timer (-19) [ 300.760678][T14616] netlink: 124 bytes leftover after parsing attributes in process `syz.3.3408'. [ 300.775792][T14616] loop3: detected capacity change from 0 to 256 [ 300.788575][T14616] FAT-fs (loop3): Directory bread(block 64) failed [ 300.796387][T14616] FAT-fs (loop3): Directory bread(block 65) failed [ 300.803192][T14616] FAT-fs (loop3): Directory bread(block 66) failed [ 300.809896][T14616] FAT-fs (loop3): Directory bread(block 67) failed [ 300.817742][T14616] FAT-fs (loop3): Directory bread(block 68) failed [ 300.824496][T14616] FAT-fs (loop3): Directory bread(block 69) failed [ 300.832403][T14616] FAT-fs (loop3): Directory bread(block 70) failed [ 300.839162][T14616] FAT-fs (loop3): Directory bread(block 71) failed [ 300.845984][T14616] FAT-fs (loop3): Directory bread(block 72) failed [ 300.854320][T14616] FAT-fs (loop3): Directory bread(block 73) failed [ 300.876952][T14616] GPL: attempt to access beyond end of device [ 300.876952][T14616] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 300.890555][T14616] GPL: attempt to access beyond end of device [ 300.890555][T14616] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 300.929754][T14622] random: crng reseeded on system resumption [ 301.084107][T14626] loop4: detected capacity change from 0 to 512 [ 301.090734][T14626] EXT4-fs: Ignoring removed orlov option [ 301.096552][T14626] EXT4-fs: test_dummy_encryption option not supported [ 301.228364][T14629] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3412'. [ 301.250465][T14628] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3412'. [ 301.359744][T14633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3414'. [ 301.393738][T14628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.403147][T14628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.466783][T14633] xt_CT: No such helper "pptp" [ 301.673269][T14641] loop2: detected capacity change from 0 to 764 [ 301.695146][T14641] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 301.775655][T14648] rock: directory entry would overflow storage [ 301.781923][T14648] rock: sig=0x4f50, size=4, remaining=3 [ 301.787563][T14648] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 301.810276][T14649] loop3: detected capacity change from 0 to 2048 [ 301.837935][T14649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.866797][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3418'. [ 301.925458][T12762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.005144][T14660] random: crng reseeded on system resumption [ 302.092053][T14666] loop7: detected capacity change from 0 to 764 [ 302.099423][T14664] loop2: detected capacity change from 0 to 1024 [ 302.107689][T14666] rock: directory entry would overflow storage [ 302.114195][T14666] rock: sig=0x4f50, size=4, remaining=3 [ 302.119793][T14666] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 302.129643][T14664] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 302.142848][T14664] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3424: Invalid block bitmap block 0 in block_group 0 [ 302.178962][T14664] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3424: Failed to acquire dquot type 0 [ 302.233701][T14664] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.3424: Freeing blocks not in datazone - block = 0, count = 4096 [ 302.277982][T14664] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3424: Invalid inode bitmap blk 0 in block_group 0 [ 302.303850][T14483] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 302.328652][T14664] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 302.356669][T14664] EXT4-fs (loop2): 1 orphan inode deleted [ 302.375304][T14664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.631284][T14686] loop4: detected capacity change from 0 to 512 [ 302.643563][T14686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.657781][T14686] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.685372][T13532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.725561][T14692] loop4: detected capacity change from 0 to 764 [ 302.743762][T14692] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 302.772834][T13746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.784653][T14483] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 302.805631][T14692] rock: directory entry would overflow storage [ 302.811932][T14692] rock: sig=0x4f50, size=4, remaining=3 [ 302.818128][T14692] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 302.822427][T14697] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 302.833470][T14697] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 302.876235][T14702] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3437'. [ 302.904095][T14702] xt_CT: No such helper "pptp" [ 303.146509][T14725] loop2: detected capacity change from 0 to 8192 [ 303.167172][T14727] xt_CT: No such helper "pptp" [ 303.183708][T14730] xt_CT: No such helper "pptp" [ 303.274699][T14736] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 303.282146][T14736] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 303.309222][T14738] loop7: detected capacity change from 0 to 764 [ 303.318065][T14738] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 303.355307][T14738] rock: directory entry would overflow storage [ 303.361649][T14738] rock: sig=0x4f50, size=4, remaining=3 [ 303.367364][T14738] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 303.432523][ T29] kauditd_printk_skb: 334 callbacks suppressed [ 303.432606][ T29] audit: type=1326 audit(1752939901.756:8777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 303.462600][ T29] audit: type=1326 audit(1752939901.756:8778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 303.486593][ T29] audit: type=1326 audit(1752939901.756:8779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 303.510387][ T29] audit: type=1326 audit(1752939901.756:8780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 303.534167][ T29] audit: type=1326 audit(1752939901.756:8781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 303.557856][ T29] audit: type=1326 audit(1752939901.756:8782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 303.581377][ T29] audit: type=1326 audit(1752939901.756:8783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 303.604996][ T29] audit: type=1326 audit(1752939901.756:8784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 303.628577][ T29] audit: type=1326 audit(1752939901.756:8785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 303.652149][ T29] audit: type=1326 audit(1752939901.756:8786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14739 comm="syz.7.3449" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e07d8e9a9 code=0x7ffc0000 [ 303.777971][T14749] loop3: detected capacity change from 0 to 518 [ 303.846860][T14763] random: crng reseeded on system resumption [ 303.857303][T14765] random: crng reseeded on system resumption [ 303.884719][T14767] loop7: detected capacity change from 0 to 764 [ 303.894648][T14767] rock: directory entry would overflow storage [ 303.900961][T14767] rock: sig=0x4f50, size=4, remaining=3 [ 303.906595][T14767] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 303.962736][T14773] loop7: detected capacity change from 0 to 512 [ 303.995261][T14773] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.011735][T14780] SELinux: Context system_u:object_r:cgroup_t:s0 is not valid (left unmapped). [ 304.031285][T14773] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.072538][T14780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3465'. [ 304.173248][T14796] loop2: detected capacity change from 0 to 764 [ 304.203409][T14796] rock: directory entry would overflow storage [ 304.209719][T14796] rock: sig=0x4f50, size=4, remaining=3 [ 304.215426][T14796] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 304.368531][T14808] xt_CT: No such helper "pptp" [ 304.377190][T14813] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 304.389540][T14813] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 304.473130][T14819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3479'. [ 304.496291][T14819] xt_CT: No such helper "pptp" [ 304.536508][T14825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.544525][ T8328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.547252][T14825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.607550][T14825] loop3: detected capacity change from 0 to 8192 [ 305.150732][T14838] loop3: detected capacity change from 0 to 764 [ 305.158940][T14838] rock: directory entry would overflow storage [ 305.165225][T14838] rock: sig=0x4f50, size=4, remaining=3 [ 305.170781][T14838] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 305.199560][T14840] loop4: detected capacity change from 0 to 512 [ 305.213843][T14840] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.227830][T14840] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.253515][T13532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.280670][T14849] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 305.289390][T14849] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 305.318811][T14851] loop3: detected capacity change from 0 to 1024 [ 305.334207][T14851] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 305.370721][T14851] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3491: Invalid block bitmap block 0 in block_group 0 [ 305.386961][T14859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3494'. [ 305.397271][T14851] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3491: Failed to acquire dquot type 0 [ 305.464967][T14867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3494'. [ 305.485186][T14851] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.3491: Freeing blocks not in datazone - block = 0, count = 4096 [ 305.567774][T14851] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3491: Invalid inode bitmap blk 0 in block_group 0 [ 305.582829][T14483] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 305.585534][T14874] xt_CT: No such helper "pptp" [ 305.623846][T14881] FAULT_INJECTION: forcing a failure. [ 305.623846][T14881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.636979][T14881] CPU: 1 UID: 0 PID: 14881 Comm: syz.0.3500 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 305.637059][T14881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.637076][T14881] Call Trace: [ 305.637083][T14881] [ 305.637092][T14881] __dump_stack+0x1d/0x30 [ 305.637119][T14881] dump_stack_lvl+0xe8/0x140 [ 305.637144][T14881] dump_stack+0x15/0x1b [ 305.637164][T14881] should_fail_ex+0x265/0x280 [ 305.637239][T14881] should_fail+0xb/0x20 [ 305.637266][T14881] should_fail_usercopy+0x1a/0x20 [ 305.637307][T14881] _copy_from_user+0x1c/0xb0 [ 305.637390][T14881] ___sys_sendmsg+0xc1/0x1d0 [ 305.637453][T14881] __x64_sys_sendmsg+0xd4/0x160 [ 305.637568][T14881] x64_sys_call+0x2999/0x2fb0 [ 305.637598][T14881] do_syscall_64+0xd2/0x200 [ 305.637642][T14881] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 305.637692][T14881] ? clear_bhb_loop+0x40/0x90 [ 305.637714][T14881] ? clear_bhb_loop+0x40/0x90 [ 305.637785][T14881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.637814][T14881] RIP: 0033:0x7f0fa926e9a9 [ 305.637833][T14881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.637932][T14881] RSP: 002b:00007f0fa78d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.637955][T14881] RAX: ffffffffffffffda RBX: 00007f0fa9495fa0 RCX: 00007f0fa926e9a9 [ 305.637968][T14881] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 305.637981][T14881] RBP: 00007f0fa78d7090 R08: 0000000000000000 R09: 0000000000000000 [ 305.637995][T14881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.638008][T14881] R13: 0000000000000000 R14: 00007f0fa9495fa0 R15: 00007ffe81be36e8 [ 305.638032][T14881] [ 305.682047][T14851] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 305.987344][T14888] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 305.999296][T14851] EXT4-fs (loop3): 1 orphan inode deleted [ 306.004136][T14888] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 306.023305][T14851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.416598][T14902] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3509'. [ 306.434332][T14906] loop4: detected capacity change from 0 to 1024 [ 306.442696][T14906] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 306.456213][T14906] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3511: Invalid block bitmap block 0 in block_group 0 [ 306.474520][T14915] netlink: 256 bytes leftover after parsing attributes in process `syz.7.3512'. [ 306.482073][T14906] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3511: Failed to acquire dquot type 0 [ 306.517630][T14919] loop2: detected capacity change from 0 to 1024 [ 306.524589][T14906] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.3511: Freeing blocks not in datazone - block = 0, count = 4096 [ 306.538919][T14919] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 306.569112][T12762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.569896][T14919] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3513: Invalid block bitmap block 0 in block_group 0 [ 306.592145][T14508] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 0 [ 306.592571][T14906] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3511: Invalid inode bitmap blk 0 in block_group 0 [ 306.616778][T14508] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 0 [ 306.629349][T14919] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3513: Failed to acquire dquot type 0 [ 306.644072][T14906] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 306.652911][T14906] EXT4-fs (loop4): 1 orphan inode deleted [ 306.653411][T14919] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.3513: Freeing blocks not in datazone - block = 0, count = 4096 [ 306.665813][T14906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.691397][T14919] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3513: Invalid inode bitmap blk 0 in block_group 0 [ 306.741127][T14483] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 0 [ 306.754165][T14919] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 306.763141][T14919] EXT4-fs (loop2): 1 orphan inode deleted [ 306.769601][T14919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.972995][T13532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.991058][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 307.064423][T14935] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.086192][T14939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3520'. [ 307.092043][T14937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.113395][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3520'. [ 307.113418][T14935] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 307.131452][T14937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.152549][T14937] netlink: 'syz.0.3519': attribute type 10 has an invalid length. [ 307.171435][T14939] team0: Port device team_slave_0 removed [ 307.202357][T14937] netlink: 'syz.0.3519': attribute type 10 has an invalid length. [ 307.224096][T14937] team0: Port device dummy0 removed [ 307.245444][T14937] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 307.269347][T14947] loop4: detected capacity change from 0 to 512 [ 307.304094][T13746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.314237][T14947] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 307.325287][T14531] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0 [ 307.396853][T14947] EXT4-fs (loop4): 1 truncate cleaned up [ 307.404227][T14947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.477224][T14959] loop7: detected capacity change from 0 to 1024 [ 307.511790][T14959] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 307.604468][T13532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.774645][T14959] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3527: Invalid block bitmap block 0 in block_group 0 [ 307.799034][T14959] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3527: Failed to acquire dquot type 0 [ 307.830898][T14959] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3527: Freeing blocks not in datazone - block = 0, count = 4096 [ 307.935559][T14959] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3527: Invalid inode bitmap blk 0 in block_group 0 [ 307.953111][T14959] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 307.963496][ T37] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 307.981083][T14959] EXT4-fs (loop7): 1 orphan inode deleted [ 307.989086][T14968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.994334][T14959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.008206][T14969] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 308.028249][T14968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.055015][T14969] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 308.074450][T14973] random: crng reseeded on system resumption [ 308.126996][T14968] loop4: detected capacity change from 0 to 8192 [ 308.371024][T14990] FAULT_INJECTION: forcing a failure. [ 308.371024][T14990] name failslab, interval 1, probability 0, space 0, times 0 [ 308.383763][T14990] CPU: 1 UID: 0 PID: 14990 Comm: syz.2.3540 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 308.383792][T14990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.383807][T14990] Call Trace: [ 308.383815][T14990] [ 308.383825][T14990] __dump_stack+0x1d/0x30 [ 308.383870][T14990] dump_stack_lvl+0xe8/0x140 [ 308.383892][T14990] dump_stack+0x15/0x1b [ 308.383909][T14990] should_fail_ex+0x265/0x280 [ 308.384000][T14990] should_failslab+0x8c/0xb0 [ 308.384023][T14990] kmem_cache_alloc_node_noprof+0x57/0x320 [ 308.384050][T14990] ? __alloc_skb+0x101/0x320 [ 308.384118][T14990] __alloc_skb+0x101/0x320 [ 308.384189][T14990] netlink_alloc_large_skb+0xba/0xf0 [ 308.384230][T14990] netlink_sendmsg+0x3cf/0x6b0 [ 308.384254][T14990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.384323][T14990] __sock_sendmsg+0x142/0x180 [ 308.384353][T14990] __sys_sendto+0x268/0x330 [ 308.384409][T14990] __x64_sys_sendto+0x76/0x90 [ 308.384446][T14990] x64_sys_call+0x2eb6/0x2fb0 [ 308.384540][T14990] do_syscall_64+0xd2/0x200 [ 308.384564][T14990] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 308.384640][T14990] ? clear_bhb_loop+0x40/0x90 [ 308.384663][T14990] ? clear_bhb_loop+0x40/0x90 [ 308.384690][T14990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.384715][T14990] RIP: 0033:0x7f9e933de9a9 [ 308.384730][T14990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.384750][T14990] RSP: 002b:00007f9e91a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 308.384772][T14990] RAX: ffffffffffffffda RBX: 00007f9e93605fa0 RCX: 00007f9e933de9a9 [ 308.384788][T14990] RDX: 0000000000000012 RSI: 0000200000000740 RDI: 0000000000000003 [ 308.384811][T14990] RBP: 00007f9e91a47090 R08: 0000000000000000 R09: 0000000000000000 [ 308.384823][T14990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.384835][T14990] R13: 0000000000000000 R14: 00007f9e93605fa0 R15: 00007fff87ab3768 [ 308.384892][T14990] [ 308.752252][T14993] 9pnet_fd: Insufficient options for proto=fd [ 308.766201][T14996] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3543'. [ 308.776359][T14996] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 308.785551][ T8328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.786593][ T29] kauditd_printk_skb: 237 callbacks suppressed [ 308.786620][ T29] audit: type=1400 audit(1752939907.106:9009): avc: denied { append } for pid=14995 comm="syz.0.3543" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 308.794857][T14531] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-7 [ 308.833370][T14531] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 0 [ 308.919194][T15002] loop3: detected capacity change from 0 to 764 [ 308.954350][T15002] rock: directory entry would overflow storage [ 308.960586][T15002] rock: sig=0x4f50, size=4, remaining=3 [ 308.966333][T15002] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 308.992366][T15009] loop7: detected capacity change from 0 to 764 [ 309.019538][T15009] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 309.073559][T15012] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 309.085147][T15015] rock: directory entry would overflow storage [ 309.091517][T15015] rock: sig=0x4f50, size=4, remaining=3 [ 309.097137][T15015] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 309.169941][ T29] audit: type=1326 audit(1752939907.496:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813cc1e9a9 code=0x7ffc0000 [ 309.193743][ T29] audit: type=1326 audit(1752939907.496:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f813cc1e9a9 code=0x7ffc0000 [ 309.217371][ T29] audit: type=1326 audit(1752939907.496:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813cc1e9a9 code=0x7ffc0000 [ 309.241228][ T29] audit: type=1326 audit(1752939907.496:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813cc1e9a9 code=0x7ffc0000 [ 309.264756][ T29] audit: type=1326 audit(1752939907.496:9014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813cc1e9a9 code=0x7ffc0000 [ 309.288586][ T29] audit: type=1326 audit(1752939907.496:9015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15011 comm="syz.4.3549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f813cc1e9a9 code=0x7ffc0000 [ 309.313195][T15019] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 309.340971][ T29] audit: type=1400 audit(1752939907.656:9016): avc: denied { unmount } for pid=8328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 309.400572][ T29] audit: type=1400 audit(1752939907.696:9017): avc: denied { read write } for pid=12762 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 309.435602][T15024] loop7: detected capacity change from 0 to 764 [ 309.457650][T15027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3553'. [ 309.468284][T15024] rock: directory entry would overflow storage [ 309.474644][T15024] rock: sig=0x4f50, size=4, remaining=3 [ 309.480337][T15024] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 309.532941][T15032] random: crng reseeded on system resumption [ 309.568164][T15034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3557'. [ 309.578658][T15037] smc: net device bond0 erased user defined pnetid SYZ0 [ 309.625534][T15041] loop7: detected capacity change from 0 to 764 [ 309.629047][T15040] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3559'. [ 309.643111][T15041] rock: directory entry would overflow storage [ 309.649340][T15041] rock: sig=0x4f50, size=4, remaining=3 [ 309.649918][T15040] 0·: renamed from hsr0 (while UP) [ 309.655175][T15041] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 309.673557][T15040] 0·: entered allmulticast mode [ 309.678472][T15040] hsr_slave_0: entered allmulticast mode [ 309.684196][T15040] hsr_slave_1: entered allmulticast mode [ 309.695577][T15040] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 309.832220][T15049] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 309.843203][T15053] loop7: detected capacity change from 0 to 1024 [ 309.882457][T15053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.901868][T15058] loop3: detected capacity change from 0 to 512 [ 309.918468][T15053] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28 [ 309.930873][T15053] EXT4-fs (loop7): This should not happen!! Data will be lost [ 309.930873][T15053] [ 309.940666][T15053] EXT4-fs (loop7): Total free blocks count 0 [ 309.946756][T15053] EXT4-fs (loop7): Free/Dirty block details [ 309.952763][T15053] EXT4-fs (loop7): free_blocks=0 [ 309.955239][T15058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 309.957714][T15053] EXT4-fs (loop7): dirty_blocks=0 [ 309.971355][T15053] EXT4-fs (loop7): Block reservation details [ 309.977365][T15053] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 309.998972][T15058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.021159][T15058] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 310.047365][ T8328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.155642][T15078] random: crng reseeded on system resumption [ 310.187481][T15079] FAULT_INJECTION: forcing a failure. [ 310.187481][T15079] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.200638][T15079] CPU: 0 UID: 0 PID: 15079 Comm: syz.0.3567 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 310.200669][T15079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.200682][T15079] Call Trace: [ 310.200691][T15079] [ 310.200761][T15079] __dump_stack+0x1d/0x30 [ 310.200783][T15079] dump_stack_lvl+0xe8/0x140 [ 310.200804][T15079] dump_stack+0x15/0x1b [ 310.200826][T15079] should_fail_ex+0x265/0x280 [ 310.200866][T15079] should_fail+0xb/0x20 [ 310.200968][T15079] should_fail_usercopy+0x1a/0x20 [ 310.201054][T15079] _copy_to_user+0x20/0xa0 [ 310.201080][T15079] simple_read_from_buffer+0xb5/0x130 [ 310.201113][T15079] proc_fail_nth_read+0x100/0x140 [ 310.201157][T15079] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 310.201206][T15079] vfs_read+0x1a0/0x6f0 [ 310.201240][T15079] ? percpu_counter_add_batch+0xb6/0x130 [ 310.201288][T15079] ? __rcu_read_unlock+0x4f/0x70 [ 310.201315][T15079] ? __fget_files+0x184/0x1c0 [ 310.201409][T15079] ksys_read+0xda/0x1a0 [ 310.201441][T15079] __x64_sys_read+0x40/0x50 [ 310.201543][T15079] x64_sys_call+0x2d77/0x2fb0 [ 310.201566][T15079] do_syscall_64+0xd2/0x200 [ 310.201634][T15079] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 310.201662][T15079] ? clear_bhb_loop+0x40/0x90 [ 310.201683][T15079] ? clear_bhb_loop+0x40/0x90 [ 310.201774][T15079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.201802][T15079] RIP: 0033:0x7f0fa926d3bc [ 310.201822][T15079] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 310.201855][T15079] RSP: 002b:00007f0fa7862030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 310.201919][T15079] RAX: ffffffffffffffda RBX: 00007f0fa9496160 RCX: 00007f0fa926d3bc [ 310.201932][T15079] RDX: 000000000000000f RSI: 00007f0fa78620a0 RDI: 000000000000000b [ 310.201985][T15079] RBP: 00007f0fa7862090 R08: 0000000000000000 R09: 0000000000000000 [ 310.202002][T15079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.202018][T15079] R13: 0000000000000001 R14: 00007f0fa9496160 R15: 00007ffe81be36e8 [ 310.202041][T15079] [ 310.419453][T15085] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 310.427085][T15085] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 310.485863][T15092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3573'. [ 310.527551][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3573'. [ 310.573929][T15097] loop2: detected capacity change from 0 to 1024 [ 310.593385][T15097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.616088][T15097] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 1 with error 28 [ 310.628504][T15097] EXT4-fs (loop2): This should not happen!! Data will be lost [ 310.628504][T15097] [ 310.638227][T15097] EXT4-fs (loop2): Total free blocks count 0 [ 310.644360][T15097] EXT4-fs (loop2): Free/Dirty block details [ 310.650280][T15097] EXT4-fs (loop2): free_blocks=0 [ 310.655339][T15097] EXT4-fs (loop2): dirty_blocks=0 [ 310.661622][T15097] EXT4-fs (loop2): Block reservation details [ 310.667732][T15097] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 310.706766][T13746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.952004][T15106] loop7: detected capacity change from 0 to 1024 [ 310.958996][T15106] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 310.971540][T15106] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3577: Invalid block bitmap block 0 in block_group 0 [ 310.985760][T15106] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3577: Failed to acquire dquot type 0 [ 310.999764][T15106] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3577: Freeing blocks not in datazone - block = 0, count = 4096 [ 311.028803][T15106] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3577: Invalid inode bitmap blk 0 in block_group 0 [ 311.041795][T14508] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 0 [ 311.070617][T15106] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 311.094255][T15106] EXT4-fs (loop7): 1 orphan inode deleted [ 311.109054][T15106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.124597][T15109] FAULT_INJECTION: forcing a failure. [ 311.124597][T15109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 311.137904][T15109] CPU: 0 UID: 0 PID: 15109 Comm: syz.4.3578 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 311.137999][T15109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.138017][T15109] Call Trace: [ 311.138027][T15109] [ 311.138037][T15109] __dump_stack+0x1d/0x30 [ 311.138089][T15109] dump_stack_lvl+0xe8/0x140 [ 311.138173][T15109] dump_stack+0x15/0x1b [ 311.138190][T15109] should_fail_ex+0x265/0x280 [ 311.138223][T15109] should_fail+0xb/0x20 [ 311.138263][T15109] should_fail_usercopy+0x1a/0x20 [ 311.138345][T15109] _copy_to_user+0x20/0xa0 [ 311.138372][T15109] simple_read_from_buffer+0xb5/0x130 [ 311.138415][T15109] proc_fail_nth_read+0x100/0x140 [ 311.138503][T15109] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 311.138540][T15109] vfs_read+0x1a0/0x6f0 [ 311.138579][T15109] ? _raw_spin_unlock+0x26/0x50 [ 311.138606][T15109] ? __rcu_read_unlock+0x4f/0x70 [ 311.138629][T15109] ? __fget_files+0x184/0x1c0 [ 311.138654][T15109] ksys_read+0xda/0x1a0 [ 311.138777][T15109] __x64_sys_read+0x40/0x50 [ 311.138825][T15109] x64_sys_call+0x2d77/0x2fb0 [ 311.138852][T15109] do_syscall_64+0xd2/0x200 [ 311.138953][T15109] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 311.139005][T15109] ? clear_bhb_loop+0x40/0x90 [ 311.139028][T15109] ? clear_bhb_loop+0x40/0x90 [ 311.139080][T15109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.139108][T15109] RIP: 0033:0x7f813cc1d3bc [ 311.139196][T15109] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 311.139215][T15109] RSP: 002b:00007f813b287030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 311.139238][T15109] RAX: ffffffffffffffda RBX: 00007f813ce45fa0 RCX: 00007f813cc1d3bc [ 311.139254][T15109] RDX: 000000000000000f RSI: 00007f813b2870a0 RDI: 0000000000000004 [ 311.139266][T15109] RBP: 00007f813b287090 R08: 0000000000000000 R09: 0000000000000000 [ 311.139280][T15109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.139292][T15109] R13: 0000000000000000 R14: 00007f813ce45fa0 R15: 00007ffd3360d618 [ 311.139350][T15109] [ 311.445245][T15123] random: crng reseeded on system resumption [ 311.486884][T15125] __nla_validate_parse: 2 callbacks suppressed [ 311.486903][T15125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3584'. [ 311.580769][T15130] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3585'. [ 311.607706][T15133] loop2: detected capacity change from 0 to 1024 [ 311.623262][T15133] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.665352][ T8328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.688775][T15133] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 311.729789][T15133] lo speed is unknown, defaulting to 1000 [ 311.736002][T15133] lo speed is unknown, defaulting to 1000 [ 311.739118][T15143] vhci_hcd: default hub control req: 6003 v07de i0001 l0 [ 311.743532][T15133] lo speed is unknown, defaulting to 1000 [ 311.756899][T15133] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 311.806210][T15146] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3590'. [ 311.817890][T15146] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 311.829707][T15133] lo speed is unknown, defaulting to 1000 [ 311.842618][T15133] lo speed is unknown, defaulting to 1000 [ 311.855851][T15133] lo speed is unknown, defaulting to 1000 [ 311.869732][T15133] lo speed is unknown, defaulting to 1000 [ 311.876217][T15133] lo speed is unknown, defaulting to 1000 [ 311.897948][T13746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.981248][T15164] lo speed is unknown, defaulting to 1000 [ 312.038921][T15167] loop7: detected capacity change from 0 to 512 [ 312.064134][T15169] loop2: detected capacity change from 0 to 1024 [ 312.074116][T15169] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 312.086920][T15169] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3600: Invalid block bitmap block 0 in block_group 0 [ 312.102942][T15169] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3600: Failed to acquire dquot type 0 [ 312.116040][T15167] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.131417][T15167] ext4 filesystem being mounted at /447/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.142725][T15169] EXT4-fs error (device loop2): ext4_free_blocks:6587: comm syz.2.3600: Freeing blocks not in datazone - block = 0, count = 4096 [ 312.159699][T15169] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3600: Invalid inode bitmap blk 0 in block_group 0 [ 312.173530][T14508] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 0 [ 312.185738][T15169] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 312.195639][T15169] EXT4-fs (loop2): 1 orphan inode deleted [ 312.213541][ T8328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.225254][T15169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.466528][T13746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.477065][T14508] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:28: Failed to release dquot type 0 [ 312.778640][T12762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.790338][T15181] loop2: detected capacity change from 0 to 764 [ 312.823710][T15181] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 312.911599][T15185] FAULT_INJECTION: forcing a failure. [ 312.911599][T15185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.924851][T15185] CPU: 1 UID: 0 PID: 15185 Comm: syz.3.3605 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 312.924880][T15185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.924893][T15185] Call Trace: [ 312.924905][T15185] [ 312.924913][T15185] __dump_stack+0x1d/0x30 [ 312.924941][T15185] dump_stack_lvl+0xe8/0x140 [ 312.924968][T15185] dump_stack+0x15/0x1b [ 312.925079][T15185] should_fail_ex+0x265/0x280 [ 312.925120][T15185] should_fail+0xb/0x20 [ 312.925152][T15185] should_fail_usercopy+0x1a/0x20 [ 312.925275][T15185] _copy_from_user+0x1c/0xb0 [ 312.925306][T15185] __sys_sendto+0x19e/0x330 [ 312.925354][T15185] __x64_sys_sendto+0x76/0x90 [ 312.925389][T15185] x64_sys_call+0x2eb6/0x2fb0 [ 312.925411][T15185] do_syscall_64+0xd2/0x200 [ 312.925499][T15185] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 312.925531][T15185] ? clear_bhb_loop+0x40/0x90 [ 312.925553][T15185] ? clear_bhb_loop+0x40/0x90 [ 312.925578][T15185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.925620][T15185] RIP: 0033:0x7f24bfe3e9a9 [ 312.925635][T15185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.925657][T15185] RSP: 002b:00007f24be4a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 312.925682][T15185] RAX: ffffffffffffffda RBX: 00007f24c0065fa0 RCX: 00007f24bfe3e9a9 [ 312.925748][T15185] RDX: 0000000000000001 RSI: 0000200000001300 RDI: 0000000000000003 [ 312.925765][T15185] RBP: 00007f24be4a7090 R08: 0000200000000240 R09: 000000000000001c [ 312.925779][T15185] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 312.925791][T15185] R13: 0000000000000000 R14: 00007f24c0065fa0 R15: 00007ffe0023de78 [ 312.925840][T15185] [ 313.243609][T15193] xt_CT: No such helper "pptp" [ 313.305456][T15201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3612'. [ 313.320614][T15187] rock: directory entry would overflow storage [ 313.326945][T15187] rock: sig=0x4f50, size=4, remaining=3 [ 313.332657][T15187] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 313.473782][T15208] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 313.599369][T15222] FAULT_INJECTION: forcing a failure. [ 313.599369][T15222] name failslab, interval 1, probability 0, space 0, times 0 [ 313.612099][T15222] CPU: 0 UID: 0 PID: 15222 Comm: syz.2.3620 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 313.612137][T15222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.612150][T15222] Call Trace: [ 313.612158][T15222] [ 313.612166][T15222] __dump_stack+0x1d/0x30 [ 313.612192][T15222] dump_stack_lvl+0xe8/0x140 [ 313.612219][T15222] dump_stack+0x15/0x1b [ 313.612242][T15222] should_fail_ex+0x265/0x280 [ 313.612283][T15222] should_failslab+0x8c/0xb0 [ 313.612307][T15222] kmem_cache_alloc_noprof+0x50/0x310 [ 313.612404][T15222] ? getname_flags+0x80/0x3b0 [ 313.612435][T15222] getname_flags+0x80/0x3b0 [ 313.612461][T15222] __se_sys_statx+0x5e/0x1b0 [ 313.612520][T15222] ? vfs_write+0x75e/0x8e0 [ 313.612560][T15222] ? __rcu_read_unlock+0x4f/0x70 [ 313.612667][T15222] ? __fget_files+0x184/0x1c0 [ 313.612690][T15222] ? fput+0x8f/0xc0 [ 313.612756][T15222] ? ksys_write+0x192/0x1a0 [ 313.612798][T15222] __x64_sys_statx+0x67/0x80 [ 313.612826][T15222] x64_sys_call+0x27cb/0x2fb0 [ 313.612848][T15222] do_syscall_64+0xd2/0x200 [ 313.612871][T15222] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 313.612951][T15222] ? clear_bhb_loop+0x40/0x90 [ 313.612998][T15222] ? clear_bhb_loop+0x40/0x90 [ 313.613028][T15222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.613181][T15222] RIP: 0033:0x7f9e933de9a9 [ 313.613199][T15222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.613218][T15222] RSP: 002b:00007f9e91a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 313.613241][T15222] RAX: ffffffffffffffda RBX: 00007f9e93605fa0 RCX: 00007f9e933de9a9 [ 313.613259][T15222] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 313.613306][T15222] RBP: 00007f9e91a47090 R08: 0000000000000000 R09: 0000000000000000 [ 313.613323][T15222] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 313.613400][T15222] R13: 0000000000000000 R14: 00007f9e93605fa0 R15: 00007fff87ab3768 [ 313.613420][T15222] [ 313.913116][T15227] loop2: detected capacity change from 0 to 512 [ 313.929445][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 313.929460][ T29] audit: type=1400 audit(1752939912.246:9200): avc: denied { mac_admin } for pid=15228 comm="syz.4.3623" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.957380][ T29] audit: type=1400 audit(1752939912.246:9201): avc: denied { relabelto } for pid=15228 comm="syz.4.3623" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:cgroup_t:s0" [ 313.984299][ T29] audit: type=1400 audit(1752939912.246:9202): avc: denied { associate } for pid=15228 comm="syz.4.3623" name="cgroup.procs" dev="cgroup" ino=200 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cgroup_t:s0" [ 314.051913][T15229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3623'. [ 314.060991][ T29] audit: type=1400 audit(1752939912.376:9203): avc: denied { write } for pid=15228 comm="syz.4.3623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 314.089463][T15227] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 314.101488][ T29] audit: type=1400 audit(1752939912.386:9204): avc: denied { mount } for pid=15233 comm="syz.0.3624" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 314.123989][ T29] audit: type=1400 audit(1752939912.386:9205): avc: denied { unmount } for pid=15233 comm="syz.0.3624" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 314.144221][ T29] audit: type=1400 audit(1752939912.406:9206): avc: denied { sqpoll } for pid=15233 comm="syz.0.3624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 314.170411][T15227] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3622: invalid indirect mapped block 2683928664 (level 1) [ 314.221252][T15238] loop7: detected capacity change from 0 to 764 [ 314.335229][T15238] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 314.335237][T15227] EXT4-fs (loop2): Remounting filesystem read-only [ 314.335412][T15227] EXT4-fs (loop2): 1 truncate cleaned up [ 314.359723][ T29] audit: type=1400 audit(1752939912.526:9207): avc: denied { mount } for pid=15200 comm="syz.3.3612" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 314.382107][ T29] audit: type=1400 audit(1752939912.526:9208): avc: denied { execute } for pid=15200 comm="syz.3.3612" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=43605 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 314.459629][T15241] rock: directory entry would overflow storage [ 314.459640][T15241] rock: sig=0x4f50, size=4, remaining=3 [ 314.459698][T15241] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 314.471655][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3627'. [ 314.573541][ T29] audit: type=1400 audit(1752939912.886:9209): avc: denied { create } for pid=15243 comm="syz.2.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 314.842251][T15260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.865728][T15263] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3632'. [ 314.891964][T15260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.913159][T15255] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3632'. [ 314.922652][T15264] xt_CT: No such helper "pptp" [ 314.982879][T15270] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3636'. [ 315.036676][T15266] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3636'. [ 315.047950][T15260] loop4: detected capacity change from 0 to 8192 [ 315.136486][T15280] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.202933][T15284] loop2: detected capacity change from 0 to 512 [ 315.212625][T15280] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.231741][T15286] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 315.256886][T15284] EXT4-fs mount: 2 callbacks suppressed [ 315.256907][T15284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.277694][T15286] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 315.288629][T15284] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.303109][T15280] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.366926][T15280] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.436360][T15280] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.462559][T15280] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.486773][T15280] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.513813][T15280] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.230268][T15309] loop4: detected capacity change from 0 to 1024 [ 316.436110][T15309] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 316.447047][T13746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.511950][T15309] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3648: Invalid block bitmap block 0 in block_group 0 [ 316.566702][T15309] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3648: Failed to acquire dquot type 0 [ 316.578948][T15317] __nla_validate_parse: 2 callbacks suppressed [ 316.578966][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3652'. [ 316.638767][T15309] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.3648: Freeing blocks not in datazone - block = 0, count = 4096 [ 316.673621][T15309] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3648: Invalid inode bitmap blk 0 in block_group 0 [ 316.691142][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 316.716809][T15309] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 316.725992][T15309] EXT4-fs (loop4): 1 orphan inode deleted [ 316.729145][T15332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.740659][T15309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.757565][T15332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.779433][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3656'. [ 316.829397][T15336] loop7: detected capacity change from 0 to 1024 [ 316.907518][T15336] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 316.942594][T15336] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3658: Invalid block bitmap block 0 in block_group 0 [ 317.065735][T15336] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3658: Failed to acquire dquot type 0 [ 317.109747][T15336] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3658: Freeing blocks not in datazone - block = 0, count = 4096 [ 317.140566][T15336] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3658: Invalid inode bitmap blk 0 in block_group 0 [ 317.167496][ T37] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 317.188422][T13532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.196043][T15336] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 317.206710][T14511] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:31: Failed to release dquot type 0 [ 317.216510][T15336] EXT4-fs (loop7): 1 orphan inode deleted [ 317.231509][T15336] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.269890][T15348] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.324502][T15349] loop4: detected capacity change from 0 to 512 [ 317.343018][T15348] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.366869][T15349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.413097][T15349] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.487700][T15348] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.578889][T15357] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3664'. [ 317.624249][T15348] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.662160][T15365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3664'. [ 317.705870][T15348] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.741467][ T8328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.762028][T14502] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 0 [ 317.782586][T15348] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.808250][T15370] loop7: detected capacity change from 0 to 764 [ 317.834711][T15348] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.838454][T15370] rock: directory entry would overflow storage [ 317.849560][T15370] rock: sig=0x4f50, size=4, remaining=3 [ 317.855238][T15370] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 317.872095][T15348] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.916151][T15373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3669'. [ 317.952262][T15376] random: crng reseeded on system resumption [ 317.971878][T15377] loop7: detected capacity change from 0 to 1024 [ 317.979826][T15377] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.113556][T15379] lo speed is unknown, defaulting to 1000 [ 318.139338][T13532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.219238][T15377] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3670: Invalid block bitmap block 0 in block_group 0 [ 318.271649][T15377] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3670: Failed to acquire dquot type 0 [ 318.286186][T15377] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3670: Freeing blocks not in datazone - block = 0, count = 4096 [ 318.302424][T15377] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3670: Invalid inode bitmap blk 0 in block_group 0 [ 318.325639][T14489] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 318.349630][T15385] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3676'. [ 318.352357][T15377] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 318.374826][T15387] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 318.392094][T15377] EXT4-fs (loop7): 1 orphan inode deleted [ 318.398355][T15377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.451156][T15385] xt_CT: No such helper "pptp" [ 318.513426][T15396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3679'. [ 318.570832][T15400] loop3: detected capacity change from 0 to 1024 [ 318.578090][T15400] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 318.589977][T15400] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3680: Invalid block bitmap block 0 in block_group 0 [ 318.654245][T15406] xt_CT: No such helper "pptp" [ 318.673054][T15400] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3680: Failed to acquire dquot type 0 [ 318.748291][T15400] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.3680: Freeing blocks not in datazone - block = 0, count = 4096 [ 318.788570][T15400] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3680: Invalid inode bitmap blk 0 in block_group 0 [ 318.819426][T14511] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:31: Failed to release dquot type 0 [ 318.834289][T15400] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 318.869550][T15412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3684'. [ 318.872119][T15400] EXT4-fs (loop3): 1 orphan inode deleted [ 318.904847][T15400] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.954833][ T8328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.964552][T14502] __quota_error: 318 callbacks suppressed [ 318.964568][T14502] Quota error (device loop7): do_check_range: Getting block 0 out of range 1-7 [ 318.979575][T14502] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:23: Failed to release dquot type 0 [ 319.013647][T15417] random: crng reseeded on system resumption [ 319.043768][T15414] loop4: detected capacity change from 0 to 512 [ 319.064968][ T29] audit: type=1400 audit(1752939917.386:9514): avc: denied { write } for pid=15418 comm="syz.7.3687" name="tcp6" dev="proc" ino=4026533446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 319.109887][T15414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.140821][T15414] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.204314][ T29] audit: type=1400 audit(1752939917.506:9515): avc: denied { ioctl } for pid=15422 comm="syz.7.3688" path="socket:[43955]" dev="sockfs" ino=43955 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 319.229352][ T29] audit: type=1400 audit(1752939917.506:9516): avc: denied { bind } for pid=15422 comm="syz.7.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.325214][T15428] loop2: detected capacity change from 0 to 764 [ 319.342234][ T29] audit: type=1400 audit(1752939917.606:9517): avc: denied { read write } for pid=15422 comm="syz.7.3688" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 319.366702][ T29] audit: type=1400 audit(1752939917.606:9518): avc: denied { open } for pid=15422 comm="syz.7.3688" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 319.456139][T15428] rock: directory entry would overflow storage [ 319.462414][T15428] rock: sig=0x4f50, size=4, remaining=3 [ 319.468010][T15428] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 319.545339][T12762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.555497][T14478] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 319.564569][T14478] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 319.625017][ T29] audit: type=1326 audit(1752939917.946:9519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa926e9a9 code=0x7ffc0000 [ 319.687293][ T29] audit: type=1326 audit(1752939917.976:9520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0fa926e9a9 code=0x7ffc0000 [ 319.861618][ T29] audit: type=1326 audit(1752939918.126:9521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fa926e9a9 code=0x7ffc0000 [ 319.988524][T15445] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3696'. [ 320.041442][T13532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.071677][T15440] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3696'. [ 320.112965][T15458] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 320.122381][T15456] random: crng reseeded on system resumption [ 320.141562][T15458] vhci_hcd: default hub control req: 1f07 v0017 i0001 l0 [ 320.402876][T15479] loop4: detected capacity change from 0 to 764 [ 320.425524][T15479] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 320.491026][T15482] lo speed is unknown, defaulting to 1000 [ 320.597458][T15482] loop2: detected capacity change from 0 to 512 [ 320.604411][T15482] EXT4-fs: Ignoring removed orlov option [ 320.610202][T15482] EXT4-fs: test_dummy_encryption option not supported [ 320.630082][T15483] rock: directory entry would overflow storage [ 320.636337][T15483] rock: sig=0x4f50, size=4, remaining=3 [ 320.641944][T15483] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 320.824583][T15490] loop7: detected capacity change from 0 to 512 [ 320.892292][T15490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.988030][T15490] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.043858][T15498] loop4: detected capacity change from 0 to 764 [ 321.323040][T15498] rock: directory entry would overflow storage [ 321.329343][T15498] rock: sig=0x4f50, size=4, remaining=3 [ 321.334994][T15498] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 321.380508][T15501] random: crng reseeded on system resumption [ 321.415483][T15503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.455296][T15503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.626997][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3719'. [ 321.647502][T15503] loop3: detected capacity change from 0 to 8192 [ 321.662749][T15512] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3718'. [ 321.888640][T15516] random: crng reseeded on system resumption [ 321.915487][ T8328] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.242543][T15535] loop3: detected capacity change from 0 to 764 [ 322.250820][T15535] rock: directory entry would overflow storage [ 322.257101][T15535] rock: sig=0x4f50, size=4, remaining=3 [ 322.262747][T15535] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 322.283545][T15538] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3726'. [ 322.293971][T15533] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3726'. [ 322.307384][T15539] FAULT_INJECTION: forcing a failure. [ 322.307384][T15539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.320809][T15539] CPU: 0 UID: 0 PID: 15539 Comm: syz.0.3729 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 322.320843][T15539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 322.320859][T15539] Call Trace: [ 322.320868][T15539] [ 322.320878][T15539] __dump_stack+0x1d/0x30 [ 322.320910][T15539] dump_stack_lvl+0xe8/0x140 [ 322.320936][T15539] dump_stack+0x15/0x1b [ 322.321013][T15539] should_fail_ex+0x265/0x280 [ 322.321055][T15539] should_fail+0xb/0x20 [ 322.321163][T15539] should_fail_usercopy+0x1a/0x20 [ 322.321205][T15539] _copy_from_user+0x1c/0xb0 [ 322.321248][T15539] perf_copy_attr+0x145/0x610 [ 322.321282][T15539] __se_sys_perf_event_open+0x67/0x11c0 [ 322.321318][T15539] ? vfs_write+0x75e/0x8e0 [ 322.321355][T15539] ? kmem_cache_free+0xdf/0x300 [ 322.321510][T15539] __x64_sys_perf_event_open+0x67/0x80 [ 322.321546][T15539] x64_sys_call+0x27ec/0x2fb0 [ 322.321716][T15539] do_syscall_64+0xd2/0x200 [ 322.321800][T15539] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 322.321828][T15539] ? clear_bhb_loop+0x40/0x90 [ 322.321889][T15539] ? clear_bhb_loop+0x40/0x90 [ 322.321913][T15539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.321936][T15539] RIP: 0033:0x7f0fa926e9a9 [ 322.321952][T15539] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.321972][T15539] RSP: 002b:00007f0fa78d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 322.321992][T15539] RAX: ffffffffffffffda RBX: 00007f0fa9495fa0 RCX: 00007f0fa926e9a9 [ 322.322081][T15539] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000200000000380 [ 322.322094][T15539] RBP: 00007f0fa78d7090 R08: 0000000000000000 R09: 0000000000000000 [ 322.322141][T15539] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 322.322154][T15539] R13: 0000000000000000 R14: 00007f0fa9495fa0 R15: 00007ffe81be36e8 [ 322.322174][T15539] [ 322.535608][T15543] random: crng reseeded on system resumption [ 322.573978][T15541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3730'. [ 322.715521][T15565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.733455][T15565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.763572][T15572] loop3: detected capacity change from 0 to 764 [ 322.781482][T15572] rock: directory entry would overflow storage [ 322.787852][T15572] rock: sig=0x4f50, size=4, remaining=3 [ 322.793591][T15572] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 322.891755][T15584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3745'. [ 322.920551][T15565] loop7: detected capacity change from 0 to 8192 [ 323.011761][T15587] loop4: detected capacity change from 0 to 1024 [ 323.034529][T15587] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 323.048520][T15589] random: crng reseeded on system resumption [ 323.058475][T15587] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.079759][T15587] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 323.089373][T15587] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.3745: lblock 2 mapped to illegal pblock 2 (length 1) [ 323.111409][T15587] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.3745: lblock 0 mapped to illegal pblock 48 (length 1) [ 323.141779][T15587] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3745: Failed to acquire dquot type 0 [ 323.155162][T15587] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 323.188239][T15587] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.3745: mark_inode_dirty error [ 323.238860][T15587] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 323.251426][T15599] FAULT_INJECTION: forcing a failure. [ 323.251426][T15599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.264544][T15599] CPU: 0 UID: 0 PID: 15599 Comm: syz.0.3751 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 323.264614][T15599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 323.264685][T15599] Call Trace: [ 323.264693][T15599] [ 323.264702][T15599] __dump_stack+0x1d/0x30 [ 323.264730][T15599] dump_stack_lvl+0xe8/0x140 [ 323.264757][T15599] dump_stack+0x15/0x1b [ 323.264780][T15599] should_fail_ex+0x265/0x280 [ 323.264869][T15599] should_fail+0xb/0x20 [ 323.264900][T15599] should_fail_usercopy+0x1a/0x20 [ 323.264942][T15599] _copy_from_user+0x1c/0xb0 [ 323.264965][T15599] ___sys_sendmsg+0xc1/0x1d0 [ 323.265030][T15599] __x64_sys_sendmsg+0xd4/0x160 [ 323.265075][T15599] x64_sys_call+0x2999/0x2fb0 [ 323.265112][T15599] do_syscall_64+0xd2/0x200 [ 323.265135][T15599] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 323.265162][T15599] ? clear_bhb_loop+0x40/0x90 [ 323.265187][T15599] ? clear_bhb_loop+0x40/0x90 [ 323.265230][T15599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.265258][T15599] RIP: 0033:0x7f0fa926e9a9 [ 323.265279][T15599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.265372][T15599] RSP: 002b:00007f0fa78d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 323.265398][T15599] RAX: ffffffffffffffda RBX: 00007f0fa9495fa0 RCX: 00007f0fa926e9a9 [ 323.265415][T15599] RDX: 0000000004004800 RSI: 0000200000000c80 RDI: 0000000000000003 [ 323.265474][T15599] RBP: 00007f0fa78d7090 R08: 0000000000000000 R09: 0000000000000000 [ 323.265491][T15599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.265507][T15599] R13: 0000000000000000 R14: 00007f0fa9495fa0 R15: 00007ffe81be36e8 [ 323.265533][T15599] [ 323.301492][T15587] EXT4-fs (loop4): 1 orphan inode deleted [ 323.321896][T14489] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 323.347494][T15587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.385985][T14489] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:18: Failed to release dquot type 0 [ 323.658389][T15620] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3756'. [ 323.676870][T15587] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.692699][T15587] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.3745: Invalid inode table block 1 in block_group 0 [ 323.711633][T15617] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3756'. [ 323.731948][T15587] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 323.786797][T15587] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.3745: mark_inode_dirty error [ 323.976133][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 323.976157][ T29] audit: type=1326 audit(1752939922.296:9678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15621 comm="syz.2.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e933de9a9 code=0x7ffc0000 [ 324.039708][T15634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3760'. [ 324.041142][ T29] audit: type=1400 audit(1752939922.356:9679): avc: denied { unlink } for pid=13532 comm="syz-executor" name="file0" dev="tmpfs" ino=678 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 324.091238][T15637] random: crng reseeded on system resumption [ 324.115728][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3760'. [ 324.119378][ T29] audit: type=1326 audit(1752939922.436:9680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15621 comm="syz.2.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9e933de9a9 code=0x7ffc0000 [ 324.166162][T15624] loop2: detected capacity change from 0 to 512 [ 324.201113][ T29] audit: type=1326 audit(1752939922.486:9681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15621 comm="syz.2.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e933de9a9 code=0x7ffc0000 [ 324.224722][ T29] audit: type=1326 audit(1752939922.486:9682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15621 comm="syz.2.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e933de9a9 code=0x7ffc0000 [ 324.248618][ T29] audit: type=1326 audit(1752939922.486:9683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15621 comm="syz.2.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9e933de9a9 code=0x7ffc0000 [ 324.272262][ T29] audit: type=1326 audit(1752939922.486:9684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15621 comm="syz.2.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e933de9a9 code=0x7ffc0000 [ 324.295819][ T29] audit: type=1326 audit(1752939922.486:9685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15621 comm="syz.2.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e933de9a9 code=0x7ffc0000 [ 324.319394][ T29] audit: type=1326 audit(1752939922.486:9686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15621 comm="syz.2.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9e933de9a9 code=0x7ffc0000 [ 324.342926][ T29] audit: type=1326 audit(1752939922.486:9687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15621 comm="syz.2.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e933de9a9 code=0x7ffc0000 [ 324.367524][T15624] EXT4-fs: Ignoring removed nobh option [ 324.671141][T15624] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3757: corrupted inode contents [ 324.943582][T15624] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.3757: mark_inode_dirty error [ 325.098537][T15661] netlink: 'syz.0.3766': attribute type 1 has an invalid length. [ 325.403497][T15624] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3757: corrupted inode contents [ 325.521525][T15624] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3757: mark_inode_dirty error [ 325.570282][T15674] random: crng reseeded on system resumption [ 325.576995][T15624] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3757: Failed to acquire dquot type 0 [ 325.619564][T15624] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3757: corrupted inode contents [ 325.648083][T15624] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3757: mark_inode_dirty error [ 325.674826][T15676] loop3: detected capacity change from 0 to 764 [ 325.685974][T15676] rock: directory entry would overflow storage [ 325.686348][T15624] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3757: corrupted inode contents [ 325.692329][T15676] rock: sig=0x4f50, size=4, remaining=3 [ 325.709789][T15676] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 325.737210][T15624] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3757: mark_inode_dirty error [ 325.754892][T15624] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3757: corrupted inode contents [ 325.787248][T15624] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 325.821063][T15624] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3757: corrupted inode contents [ 325.892914][T15624] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3757: mark_inode_dirty error [ 325.904540][T15624] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 325.914119][T15624] EXT4-fs (loop2): 1 truncate cleaned up [ 325.923104][T15624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.935748][T15624] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.063361][T15624] lo speed is unknown, defaulting to 1000 [ 326.153490][T15704] loop7: detected capacity change from 0 to 764 [ 326.179808][T15704] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 326.329157][T15706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.349590][T15706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.396927][T15707] rock: directory entry would overflow storage [ 326.403284][T15707] rock: sig=0x4f50, size=4, remaining=3 [ 326.408946][T15707] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 326.737317][T13746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.929313][T15727] __nla_validate_parse: 5 callbacks suppressed [ 326.929334][T15727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3790'. [ 327.067442][T15740] loop3: detected capacity change from 0 to 764 [ 327.126166][T15745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.155250][T15740] rock: directory entry would overflow storage [ 327.161593][T15740] rock: sig=0x4f50, size=4, remaining=3 [ 327.167255][T15740] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 327.263088][T15745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.293124][T15745] netlink: 'syz.4.3797': attribute type 10 has an invalid length. [ 327.318606][T15745] bond0: (slave dummy0): Releasing backup interface [ 327.337597][T15745] team0: Port device dummy0 added [ 327.383196][T15745] netlink: 'syz.4.3797': attribute type 10 has an invalid length. [ 327.393967][T15745] team0: Port device dummy0 removed [ 327.401720][T15745] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 327.498118][T15756] FAULT_INJECTION: forcing a failure. [ 327.498118][T15756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.511327][T15756] CPU: 0 UID: 0 PID: 15756 Comm: syz.7.3801 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 327.511358][T15756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 327.511373][T15756] Call Trace: [ 327.511381][T15756] [ 327.511449][T15756] __dump_stack+0x1d/0x30 [ 327.511474][T15756] dump_stack_lvl+0xe8/0x140 [ 327.511537][T15756] dump_stack+0x15/0x1b [ 327.511560][T15756] should_fail_ex+0x265/0x280 [ 327.511594][T15756] should_fail+0xb/0x20 [ 327.511665][T15756] should_fail_usercopy+0x1a/0x20 [ 327.511761][T15756] _copy_from_user+0x1c/0xb0 [ 327.511784][T15756] __sys_bpf+0x178/0x790 [ 327.511824][T15756] __x64_sys_bpf+0x41/0x50 [ 327.511853][T15756] x64_sys_call+0x2478/0x2fb0 [ 327.511881][T15756] do_syscall_64+0xd2/0x200 [ 327.511985][T15756] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 327.512082][T15756] ? clear_bhb_loop+0x40/0x90 [ 327.512107][T15756] ? clear_bhb_loop+0x40/0x90 [ 327.512137][T15756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.512166][T15756] RIP: 0033:0x7f6e07d8e9a9 [ 327.512243][T15756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.512295][T15756] RSP: 002b:00007f6e063f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.512325][T15756] RAX: ffffffffffffffda RBX: 00007f6e07fb5fa0 RCX: 00007f6e07d8e9a9 [ 327.512342][T15756] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 0000000000000018 [ 327.512400][T15756] RBP: 00007f6e063f7090 R08: 0000000000000000 R09: 0000000000000000 [ 327.512413][T15756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.512429][T15756] R13: 0000000000000000 R14: 00007f6e07fb5fa0 R15: 00007ffc617cb6b8 [ 327.512455][T15756] [ 327.769040][T15759] lo speed is unknown, defaulting to 1000 [ 327.851046][T15759] netlink: 'syz.3.3800': attribute type 3 has an invalid length. [ 328.296706][T15764] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3803'. [ 328.401494][T15770] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3803'. [ 328.441923][T15773] xt_CT: No such helper "pptp" [ 328.449292][T15776] random: crng reseeded on system resumption [ 328.583860][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3809'. [ 328.605040][T15785] team1: entered promiscuous mode [ 328.642987][T15785] team1: entered allmulticast mode [ 329.048507][T15797] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3812'. [ 329.077432][T15796] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.3812'. [ 329.243147][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 329.243165][ T29] audit: type=1326 audit(1752939927.566:9807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.2.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e933d5967 code=0x7ffc0000 [ 329.289483][ T29] audit: type=1326 audit(1752939927.596:9808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.2.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e9337ab89 code=0x7ffc0000 [ 329.313078][ T29] audit: type=1326 audit(1752939927.596:9809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.2.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9e933d5967 code=0x7ffc0000 [ 329.336661][ T29] audit: type=1326 audit(1752939927.596:9810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.2.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9e9337ab89 code=0x7ffc0000 [ 329.360294][ T29] audit: type=1326 audit(1752939927.596:9811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.2.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e933de9a9 code=0x7ffc0000 [ 329.383953][ T29] audit: type=1326 audit(1752939927.596:9812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15800 comm="syz.2.3814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9e933de9a9 code=0x7ffc0000 [ 329.498879][ T29] audit: type=1400 audit(1752939927.746:9813): avc: denied { create } for pid=15802 comm="syz.4.3815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 329.509428][T15807] loop3: detected capacity change from 0 to 512 [ 329.519353][ T29] audit: type=1400 audit(1752939927.816:9814): avc: denied { create } for pid=15805 comm="syz.3.3817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 329.561131][ T29] audit: type=1400 audit(1752939927.886:9815): avc: denied { create } for pid=15808 comm="syz.4.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.589686][ T29] audit: type=1400 audit(1752939927.916:9816): avc: denied { bind } for pid=15808 comm="syz.4.3818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 329.620273][T15807] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.641243][T15816] random: crng reseeded on system resumption [ 329.663518][T15807] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.760422][T15827] FAULT_INJECTION: forcing a failure. [ 329.760422][T15827] name failslab, interval 1, probability 0, space 0, times 0 [ 329.773226][T15827] CPU: 1 UID: 0 PID: 15827 Comm: syz.7.3824 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 329.773256][T15827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.773293][T15827] Call Trace: [ 329.773300][T15827] [ 329.773308][T15827] __dump_stack+0x1d/0x30 [ 329.773331][T15827] dump_stack_lvl+0xe8/0x140 [ 329.773402][T15827] dump_stack+0x15/0x1b [ 329.773423][T15827] should_fail_ex+0x265/0x280 [ 329.773525][T15827] should_failslab+0x8c/0xb0 [ 329.773557][T15827] __kmalloc_noprof+0xa5/0x3e0 [ 329.773587][T15827] ? kernfs_fop_write_iter+0xe1/0x2d0 [ 329.773645][T15827] kernfs_fop_write_iter+0xe1/0x2d0 [ 329.773668][T15827] ? __import_iovec+0x428/0x540 [ 329.773717][T15827] do_iter_readv_writev+0x421/0x4c0 [ 329.773834][T15827] vfs_writev+0x2df/0x8b0 [ 329.773869][T15827] __x64_sys_pwritev+0xfd/0x1c0 [ 329.773892][T15827] x64_sys_call+0x2752/0x2fb0 [ 329.773917][T15827] do_syscall_64+0xd2/0x200 [ 329.773937][T15827] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 329.773969][T15827] ? clear_bhb_loop+0x40/0x90 [ 329.773993][T15827] ? clear_bhb_loop+0x40/0x90 [ 329.774100][T15827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.774123][T15827] RIP: 0033:0x7f6e07d8e9a9 [ 329.774141][T15827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.774161][T15827] RSP: 002b:00007f6e063f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 329.774181][T15827] RAX: ffffffffffffffda RBX: 00007f6e07fb5fa0 RCX: 00007f6e07d8e9a9 [ 329.774264][T15827] RDX: 0000000000000001 RSI: 0000200000000500 RDI: 0000000000000003 [ 329.774277][T15827] RBP: 00007f6e063f7090 R08: 0000000000000002 R09: 0000000000000000 [ 329.774358][T15827] R10: 00000000ffffff01 R11: 0000000000000246 R12: 0000000000000001 [ 329.774371][T15827] R13: 0000000000000000 R14: 00007f6e07fb5fa0 R15: 00007ffc617cb6b8 [ 329.774392][T15827] [ 330.001540][T15832] xt_CT: No such helper "pptp" [ 330.013393][T15828] loop2: detected capacity change from 0 to 512 [ 330.023784][T15828] EXT4-fs: Ignoring removed nobh option [ 330.031733][T15828] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3825: corrupted inode contents [ 330.044102][T15828] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.3825: mark_inode_dirty error [ 330.056015][T15828] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.3825: corrupted inode contents [ 330.068740][T15828] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.3825: mark_inode_dirty error [ 330.081820][T15828] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.3825: Failed to acquire dquot type 0 [ 330.082156][T12762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.096584][T15828] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3825: corrupted inode contents [ 330.114874][T15828] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.3825: mark_inode_dirty error [ 330.126790][T15828] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3825: corrupted inode contents [ 330.129426][T15838] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3827'. [ 330.138956][T15828] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.3825: mark_inode_dirty error [ 330.159765][T15828] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3825: corrupted inode contents [ 330.159921][T15838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3827'. [ 330.172471][T15828] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 330.189538][T15828] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.3825: corrupted inode contents [ 330.203031][T15828] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.3825: mark_inode_dirty error [ 330.214474][T15828] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 330.224171][T15828] EXT4-fs (loop2): 1 truncate cleaned up [ 330.230628][T15828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.243517][T15828] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.365304][T13746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.449058][T15877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3838'. [ 330.450661][T15873] loop2: detected capacity change from 0 to 512 [ 330.483264][T15873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.485485][T15877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3838'. [ 330.509276][T15873] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 330.630614][T15892] lo speed is unknown, defaulting to 1000 [ 330.994637][T15919] FAULT_INJECTION: forcing a failure. [ 330.994637][T15919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.007933][T15919] CPU: 0 UID: 0 PID: 15919 Comm: syz.7.3844 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 331.008031][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.008049][T15919] Call Trace: [ 331.008055][T15919] [ 331.008126][T15919] __dump_stack+0x1d/0x30 [ 331.008148][T15919] dump_stack_lvl+0xe8/0x140 [ 331.008168][T15919] dump_stack+0x15/0x1b [ 331.008185][T15919] should_fail_ex+0x265/0x280 [ 331.008266][T15919] should_fail+0xb/0x20 [ 331.008301][T15919] should_fail_usercopy+0x1a/0x20 [ 331.008410][T15919] _copy_from_user+0x1c/0xb0 [ 331.008430][T15919] __sys_connect+0xd0/0x2b0 [ 331.008474][T15919] __x64_sys_connect+0x3f/0x50 [ 331.008581][T15919] x64_sys_call+0x1daa/0x2fb0 [ 331.008606][T15919] do_syscall_64+0xd2/0x200 [ 331.008626][T15919] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 331.008666][T15919] ? clear_bhb_loop+0x40/0x90 [ 331.008695][T15919] ? clear_bhb_loop+0x40/0x90 [ 331.008720][T15919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.008746][T15919] RIP: 0033:0x7f6e07d8e9a9 [ 331.008766][T15919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.008825][T15919] RSP: 002b:00007f6e063f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 331.008846][T15919] RAX: ffffffffffffffda RBX: 00007f6e07fb5fa0 RCX: 00007f6e07d8e9a9 [ 331.008860][T15919] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000006 [ 331.008925][T15919] RBP: 00007f6e063f7090 R08: 0000000000000000 R09: 0000000000000000 [ 331.008969][T15919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.008981][T15919] R13: 0000000000000000 R14: 00007f6e07fb5fa0 R15: 00007ffc617cb6b8 [ 331.009034][T15919] [ 331.286587][T13746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.296177][T15927] loop7: detected capacity change from 0 to 764 [ 331.308346][T15927] rock: directory entry would overflow storage [ 331.314680][T15927] rock: sig=0x4f50, size=4, remaining=3 [ 331.320350][T15927] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 331.438334][T15936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.459698][T15936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.480509][T15936] netlink: 'syz.4.3852': attribute type 10 has an invalid length. [ 331.542580][T15936] bond0: (slave dummy0): Releasing backup interface [ 331.549710][T15950] netlink: 'syz.4.3852': attribute type 10 has an invalid length. [ 331.561645][T15936] team0: Port device dummy0 added [ 331.574381][T15950] team0: Port device dummy0 removed [ 331.582308][T15950] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 331.688896][T15960] loop7: detected capacity change from 0 to 764 [ 331.712383][T15960] rock: directory entry would overflow storage [ 331.718664][T15960] rock: sig=0x4f50, size=4, remaining=3 [ 331.724358][T15960] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 332.081442][T15986] __nla_validate_parse: 6 callbacks suppressed [ 332.081458][T15986] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3864'. [ 332.104164][T15985] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.3864'. [ 332.365035][T16002] random: crng reseeded on system resumption [ 332.385897][T16001] loop3: detected capacity change from 0 to 764 [ 332.406756][T16005] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3868'. [ 332.416634][T16001] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 332.438355][T16005] xt_CT: No such helper "pptp" [ 332.509408][T16019] rock: directory entry would overflow storage [ 332.515774][T16019] rock: sig=0x4f50, size=4, remaining=3 [ 332.521508][T16019] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 332.613429][T16028] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3879'. [ 332.631419][T16023] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3879'. [ 332.667713][T16034] loop2: detected capacity change from 0 to 764 [ 332.678541][T16034] rock: directory entry would overflow storage [ 332.684806][T16034] rock: sig=0x4f50, size=4, remaining=3 [ 332.690415][T16034] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 332.691291][T16038] loop3: detected capacity change from 0 to 764 [ 332.708076][T16038] rock: directory entry would overflow storage [ 332.714344][T16038] rock: sig=0x4f50, size=4, remaining=3 [ 332.720121][T16038] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 332.751111][T16043] loop2: detected capacity change from 0 to 764 [ 332.766725][T16043] rock: directory entry would overflow storage [ 332.773167][T16043] rock: sig=0x4f50, size=4, remaining=3 [ 332.778913][T16043] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 332.863490][T16067] loop3: detected capacity change from 0 to 512 [ 332.865882][T16071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3893'. [ 332.892619][T16067] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.916611][T16067] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.932312][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3893'. [ 332.988920][T12762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.043243][T16091] loop3: detected capacity change from 0 to 764 [ 333.055445][T16091] rock: directory entry would overflow storage [ 333.061792][T16091] rock: sig=0x4f50, size=4, remaining=3 [ 333.067419][T16091] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 333.133727][T16098] loop3: detected capacity change from 0 to 764 [ 333.147434][T16098] rock: directory entry would overflow storage [ 333.153696][T16098] rock: sig=0x4f50, size=4, remaining=3 [ 333.159463][T16098] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 333.327500][T16116] loop2: detected capacity change from 0 to 512 [ 333.372620][T16116] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.406978][T16116] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.465515][T16124] FAULT_INJECTION: forcing a failure. [ 333.465515][T16124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.478717][T16124] CPU: 1 UID: 0 PID: 16124 Comm: syz.3.3905 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 333.478757][T16124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.478774][T16124] Call Trace: [ 333.478783][T16124] [ 333.478794][T16124] __dump_stack+0x1d/0x30 [ 333.478821][T16124] dump_stack_lvl+0xe8/0x140 [ 333.478921][T16124] dump_stack+0x15/0x1b [ 333.478943][T16124] should_fail_ex+0x265/0x280 [ 333.478983][T16124] should_fail+0xb/0x20 [ 333.479010][T16124] should_fail_usercopy+0x1a/0x20 [ 333.479069][T16124] _copy_from_user+0x1c/0xb0 [ 333.479095][T16124] __sys_bpf+0x178/0x790 [ 333.479143][T16124] __x64_sys_bpf+0x41/0x50 [ 333.479171][T16124] x64_sys_call+0x2478/0x2fb0 [ 333.479216][T16124] do_syscall_64+0xd2/0x200 [ 333.479253][T16124] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 333.479280][T16124] ? clear_bhb_loop+0x40/0x90 [ 333.479349][T16124] ? clear_bhb_loop+0x40/0x90 [ 333.479377][T16124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.479406][T16124] RIP: 0033:0x7f24bfe3e9a9 [ 333.479424][T16124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.479443][T16124] RSP: 002b:00007f24be486038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 333.479475][T16124] RAX: ffffffffffffffda RBX: 00007f24c0066080 RCX: 00007f24bfe3e9a9 [ 333.479516][T16124] RDX: 0000000000000094 RSI: 0000200000000500 RDI: 0000000000000005 [ 333.479533][T16124] RBP: 00007f24be486090 R08: 0000000000000000 R09: 0000000000000000 [ 333.479603][T16124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.479620][T16124] R13: 0000000000000001 R14: 00007f24c0066080 R15: 00007ffe0023de78 [ 333.479645][T16124] [ 333.702791][T16113] loop7: detected capacity change from 0 to 164 [ 333.839769][T16146] loop7: detected capacity change from 0 to 764 [ 333.851551][T16146] rock: directory entry would overflow storage [ 333.857795][T16146] rock: sig=0x4f50, size=4, remaining=3 [ 333.863542][T16146] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 333.905562][T13746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.948936][T16134] loop4: detected capacity change from 0 to 32768 [ 333.980363][T16158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3916'. [ 334.062048][T16134] loop4: p1 p3 < > [ 334.578908][ T29] kauditd_printk_skb: 1144 callbacks suppressed [ 334.578928][ T29] audit: type=1400 audit(1752939932.896:10959): avc: denied { write } for pid=16182 comm="syz.4.3922" name="tcp6" dev="proc" ino=4026532636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 334.628348][T16186] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3924'. [ 334.764155][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3924'. [ 334.920830][T16198] sctp: [Deprecated]: syz.0.3929 (pid 16198) Use of int in max_burst socket option. [ 334.920830][T16198] Use struct sctp_assoc_value instead [ 334.920950][ T29] audit: type=1400 audit(1752939933.006:10960): avc: denied { create } for pid=16181 comm="syz.2.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 334.955422][ T29] audit: type=1400 audit(1752939933.006:10961): avc: denied { bind } for pid=16181 comm="syz.2.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 334.975975][ T29] audit: type=1400 audit(1752939933.006:10962): avc: denied { create } for pid=16181 comm="syz.2.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 334.995996][ T29] audit: type=1400 audit(1752939933.006:10963): avc: denied { ioctl } for pid=16181 comm="syz.2.3924" path="socket:[45035]" dev="sockfs" ino=45035 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 335.021185][ T29] audit: type=1400 audit(1752939933.086:10964): avc: denied { create } for pid=16181 comm="syz.2.3924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.040984][ T29] audit: type=1400 audit(1752939933.096:10965): avc: denied { setopt } for pid=16181 comm="syz.2.3924" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 335.061496][ T29] audit: type=1400 audit(1752939933.126:10966): avc: denied { ioctl } for pid=16192 comm="syz.4.3928" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45048 ioctlcmd=0x2402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 335.087543][ T29] audit: type=1400 audit(1752939933.206:10967): avc: denied { setopt } for pid=16195 comm="syz.2.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.107424][ T29] audit: type=1400 audit(1752939933.206:10968): avc: denied { write } for pid=16195 comm="syz.2.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 335.152652][T16206] FAULT_INJECTION: forcing a failure. [ 335.152652][T16206] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 335.165964][T16206] CPU: 0 UID: 0 PID: 16206 Comm: syz.2.3932 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 335.166002][T16206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 335.166064][T16206] Call Trace: [ 335.166072][T16206] [ 335.166082][T16206] __dump_stack+0x1d/0x30 [ 335.166107][T16206] dump_stack_lvl+0xe8/0x140 [ 335.166127][T16206] dump_stack+0x15/0x1b [ 335.166149][T16206] should_fail_ex+0x265/0x280 [ 335.166198][T16206] should_fail+0xb/0x20 [ 335.166232][T16206] should_fail_usercopy+0x1a/0x20 [ 335.166273][T16206] _copy_from_user+0x1c/0xb0 [ 335.166368][T16206] futex_parse_waitv+0x83/0x290 [ 335.166408][T16206] ? __pfx_futex_wake_mark+0x10/0x10 [ 335.166448][T16206] __se_sys_futex_waitv+0x121/0x1c0 [ 335.166491][T16206] __x64_sys_futex_waitv+0x67/0x80 [ 335.166526][T16206] x64_sys_call+0x2b1a/0x2fb0 [ 335.166555][T16206] do_syscall_64+0xd2/0x200 [ 335.166578][T16206] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 335.166648][T16206] ? clear_bhb_loop+0x40/0x90 [ 335.166670][T16206] ? clear_bhb_loop+0x40/0x90 [ 335.166692][T16206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.166765][T16206] RIP: 0033:0x7f9e933de9a9 [ 335.166786][T16206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.166811][T16206] RSP: 002b:00007f9e91a47038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 335.166876][T16206] RAX: ffffffffffffffda RBX: 00007f9e93605fa0 RCX: 00007f9e933de9a9 [ 335.166889][T16206] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 335.166905][T16206] RBP: 00007f9e91a47090 R08: 0000000000000001 R09: 0000000000000000 [ 335.166920][T16206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.166937][T16206] R13: 0000000000000000 R14: 00007f9e93605fa0 R15: 00007fff87ab3768 [ 335.166962][T16206] [ 335.448818][T16211] loop4: detected capacity change from 0 to 1024 [ 335.456513][T16211] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.518069][T16211] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.3933: Invalid block bitmap block 0 in block_group 0 [ 335.555065][T16211] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3933: Failed to acquire dquot type 0 [ 335.590881][T16224] loop3: detected capacity change from 0 to 1024 [ 335.601263][T16224] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 335.648750][T16211] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.3933: Freeing blocks not in datazone - block = 0, count = 4096 [ 335.681763][T16224] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.3936: Invalid block bitmap block 0 in block_group 0 [ 335.695668][T16211] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3933: Invalid inode bitmap blk 0 in block_group 0 [ 335.885203][ T3443] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 335.906415][T16211] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 335.915319][T16224] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3936: Failed to acquire dquot type 0 [ 335.935540][T16239] random: crng reseeded on system resumption [ 335.957934][T16211] EXT4-fs (loop4): 1 orphan inode deleted [ 336.029399][T16211] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.075982][T16224] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.3936: Freeing blocks not in datazone - block = 0, count = 4096 [ 336.145956][T16224] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.3936: Invalid inode bitmap blk 0 in block_group 0 [ 336.177540][T14554] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 0 [ 336.226717][T16224] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 336.243108][T16224] EXT4-fs (loop3): 1 orphan inode deleted [ 336.249504][T16224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.500217][T16245] random: crng reseeded on system resumption [ 336.599775][T16249] loop2: detected capacity change from 0 to 1764 [ 336.759502][T16252] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 336.870045][T13532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.883110][T14486] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 0 [ 336.923463][T16259] FAULT_INJECTION: forcing a failure. [ 336.923463][T16259] name failslab, interval 1, probability 0, space 0, times 0 [ 336.936255][T16259] CPU: 1 UID: 0 PID: 16259 Comm: syz.2.3946 Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 336.936294][T16259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.936312][T16259] Call Trace: [ 336.936347][T16259] [ 336.936356][T16259] __dump_stack+0x1d/0x30 [ 336.936381][T16259] dump_stack_lvl+0xe8/0x140 [ 336.936401][T16259] dump_stack+0x15/0x1b [ 336.936476][T16259] should_fail_ex+0x265/0x280 [ 336.936585][T16259] should_failslab+0x8c/0xb0 [ 336.936611][T16259] kmem_cache_alloc_node_noprof+0x57/0x320 [ 336.936697][T16259] ? __alloc_skb+0x101/0x320 [ 336.936736][T16259] __alloc_skb+0x101/0x320 [ 336.936775][T16259] netlink_alloc_large_skb+0xba/0xf0 [ 336.936816][T16259] netlink_sendmsg+0x3cf/0x6b0 [ 336.936838][T16259] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.936909][T16259] __sock_sendmsg+0x142/0x180 [ 336.936938][T16259] ____sys_sendmsg+0x31e/0x4e0 [ 336.936985][T16259] ___sys_sendmsg+0x17b/0x1d0 [ 336.937051][T16259] __x64_sys_sendmsg+0xd4/0x160 [ 336.937088][T16259] x64_sys_call+0x2999/0x2fb0 [ 336.937114][T16259] do_syscall_64+0xd2/0x200 [ 336.937189][T16259] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 336.937224][T16259] ? clear_bhb_loop+0x40/0x90 [ 336.937252][T16259] ? clear_bhb_loop+0x40/0x90 [ 336.937281][T16259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.937310][T16259] RIP: 0033:0x7f9e933de9a9 [ 336.937387][T16259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.937417][T16259] RSP: 002b:00007f9e91a47038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.937442][T16259] RAX: ffffffffffffffda RBX: 00007f9e93605fa0 RCX: 00007f9e933de9a9 [ 336.937459][T16259] RDX: 0000000000008040 RSI: 0000200000000000 RDI: 0000000000000004 [ 336.937476][T16259] RBP: 00007f9e91a47090 R08: 0000000000000000 R09: 0000000000000000 [ 336.937494][T16259] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.937507][T16259] R13: 0000000000000000 R14: 00007f9e93605fa0 R15: 00007fff87ab3768 [ 336.937528][T16259] [ 337.230787][T12762] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.241968][T14485] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:15: Failed to release dquot type 0 [ 337.288373][T16272] __nla_validate_parse: 5 callbacks suppressed [ 337.288392][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'. [ 337.386966][T13746] ================================================================== [ 337.395122][T13746] BUG: KCSAN: data-race in shmem_getattr / shmem_recalc_inode [ 337.398426][T16281] loop3: detected capacity change from 0 to 8192 [ 337.402605][T13746] [ 337.402614][T13746] read-write to 0xffff888119d90bb0 of 8 bytes by task 16283 on cpu 1: [ 337.402637][T13746] shmem_recalc_inode+0x36/0x1c0 [ 337.424444][T13746] shmem_get_folio_gfp+0x7a3/0xd60 [ 337.429587][T13746] shmem_write_begin+0xa8/0x190 [ 337.429838][T16281] vfat: Unknown parameter '0x0000000000000006' [ 337.434468][T13746] generic_perform_write+0x184/0x490 [ 337.434493][T13746] shmem_file_write_iter+0xc5/0xf0 [ 337.434518][T13746] __kernel_write_iter+0x256/0x4c0 [ 337.456335][T13746] dump_user_range+0x407/0x8c0 [ 337.461144][T13746] elf_core_dump+0x1dc2/0x1f80 [ 337.465936][T13746] do_coredump+0x1dfa/0x27b0 [ 337.470564][T13746] get_signal+0xd85/0xf70 [ 337.474929][T13746] arch_do_signal_or_restart+0x96/0x480 [ 337.480502][T13746] irqentry_exit_to_user_mode+0x5e/0xa0 [ 337.486107][T13746] irqentry_exit+0x12/0x50 [ 337.490552][T13746] exc_general_protection+0x15b/0x1f0 [ 337.495941][T13746] asm_exc_general_protection+0x26/0x30 [ 337.501595][T13746] [ 337.503930][T13746] read to 0xffff888119d90bb0 of 8 bytes by task 13746 on cpu 0: [ 337.511588][T13746] shmem_getattr+0x41/0x200 [ 337.516146][T13746] vfs_getattr_nosec+0x143/0x1e0 [ 337.521126][T13746] vfs_statx+0x113/0x390 [ 337.525381][T13746] vfs_fstatat+0x115/0x170 [ 337.529807][T13746] __se_sys_newfstatat+0x55/0x260 [ 337.534845][T13746] __x64_sys_newfstatat+0x55/0x70 [ 337.539894][T13746] x64_sys_call+0x2c22/0x2fb0 [ 337.544582][T13746] do_syscall_64+0xd2/0x200 [ 337.549098][T13746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.555007][T13746] [ 337.557341][T13746] value changed: 0x000000000000014e -> 0x0000000000000150 [ 337.564448][T13746] [ 337.566777][T13746] Reported by Kernel Concurrency Sanitizer on: [ 337.572934][T13746] CPU: 0 UID: 0 PID: 13746 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller-00253-g4871b7cb27f4 #0 PREEMPT(voluntary) [ 337.585619][T13746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 337.595686][T13746] ================================================================== [ 337.611588][T16268] loop4: detected capacity change from 0 to 512 [ 337.621598][T16268] EXT4-fs: Ignoring removed nobh option [ 337.722698][T16268] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3945: corrupted inode contents [ 337.741429][T16268] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.3945: mark_inode_dirty error [ 337.753424][T16268] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3945: corrupted inode contents [ 337.771006][T16268] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.3945: mark_inode_dirty error [ 337.798707][T16268] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3945: Failed to acquire dquot type 0 [ 337.930296][T16268] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3945: corrupted inode contents [ 337.944678][T16268] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.3945: mark_inode_dirty error [ 337.956228][T16268] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3945: corrupted inode contents [ 337.969159][T16268] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3945: mark_inode_dirty error [ 337.980666][T16268] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3945: corrupted inode contents [ 337.993606][T16268] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 338.002340][T16268] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3945: corrupted inode contents [ 338.015511][T16268] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.3945: mark_inode_dirty error [ 338.026822][T16268] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 338.037110][T16268] EXT4-fs (loop4): 1 truncate cleaned up [ 338.043342][T16268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.057435][T16268] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.123309][T13532] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.