last executing test programs: 10m48.828542705s ago: executing program 32 (id=987): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 6m32.851695047s ago: executing program 33 (id=4086): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = epoll_create1(0x80000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) 6m20.368502467s ago: executing program 34 (id=4044): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) r2 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) 6m8.165754424s ago: executing program 35 (id=4531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x18) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd2a, 0xffffffff, {0x7, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000cc0) 5m4.260409675s ago: executing program 36 (id=5439): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, 0x0, 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, 0x0}, 0x0) r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080)=r5, 0x12) 5m2.009115657s ago: executing program 37 (id=5468): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = io_uring_setup(0x6c0a, &(0x7f0000000100)={0x0, 0x9705, 0x10, 0x0, 0x71}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) 3m17.405549077s ago: executing program 38 (id=6455): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (fail_nth: 1) 3m5.671410917s ago: executing program 39 (id=6716): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) readv(r1, &(0x7f0000000600)=[{0x0}], 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 3m0.44918874s ago: executing program 40 (id=6792): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) inotify_rm_watch(r0, r1) 2m43.668751439s ago: executing program 41 (id=7091): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000110000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000040aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 2m40.140543504s ago: executing program 42 (id=7155): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4000000000000, &(0x7f00000006c0), 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x106}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="06010000246837f73199aee6fdb9291b3091ec1a2d41d2271b00d8ec030f5919f397867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d25", 0xc0}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2m39.713023759s ago: executing program 43 (id=7159): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0008060001080006040001"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2m38.181245113s ago: executing program 2 (id=7182): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0xc6e}, 0x4) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x10d3, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 2m38.153073186s ago: executing program 2 (id=7183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f0000000200)='./file1\x00', 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x40, 0x80, 0x7, 0x10, {{0x33, 0x4, 0x0, 0x3, 0xcc, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x35, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5aa}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@remote, 0x8}]}, @noop, @generic={0x44, 0x8, "814226d98d4c"}, @timestamp_addr={0x44, 0xc, 0x27, 0x1, 0x4, [{@multicast2}]}, @ssrr={0x89, 0x1b, 0xe2, [@rand_addr=0x64010101, @loopback, @broadcast, @local, @loopback, @empty]}, @noop, @timestamp={0x44, 0x14, 0x91, 0x0, 0x8, [0x80000001, 0x9, 0x6, 0x2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x97, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xed}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xb9f}, {@multicast2, 0x8000}, {@empty}, {@empty, 0x2}, {@rand_addr=0x64010100}, {@empty, 0x401}]}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x10000b}, 0x18) socket$key(0xf, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000240)=0x4) r5 = socket(0x2, 0x80805, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) unshare(0x48000000) sendmmsg(r6, &(0x7f0000009980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x301, &(0x7f0000000080)="$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") r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32, @ANYBLOB="14000600"], 0x54}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="13022cbd7000fbdbdf25010000000000000008410000004c00180002000662726f6164636173742d6c696e6b00"], 0x68}}, 0x4048080) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, 0x0, 0x8050) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x28}, @func_proto, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x5a, 0x0, 0x1}, 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) 2m37.544575395s ago: executing program 2 (id=7187): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2m37.544005035s ago: executing program 2 (id=7188): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x7a0, '\x00', 0x0, r1, 0x4, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 2m37.317674523s ago: executing program 2 (id=7190): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001180)="390000fa461ad7e48489bffa56020040001118680907071200000f0000ff3f21000000170a001700006edc000000000000000000ff271400100003000131d7b2d0370a00f30241", 0x47}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) 2m36.626781429s ago: executing program 44 (id=7200): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 2m36.048506646s ago: executing program 2 (id=7204): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) 2m36.006891459s ago: executing program 45 (id=7204): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) syz_open_dev$vcsn(&(0x7f0000000180), 0x0, 0x26642) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r4, &(0x7f0000000480), &(0x7f0000000340)=@udp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) 2m33.126329192s ago: executing program 7 (id=7238): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="cd93ba71"], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x80040, 0x46) 2m33.095547005s ago: executing program 7 (id=7239): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2704, &(0x7f00000004c0)={0x0, 0x6c0d, 0x40, 0x2, 0x13a}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000e04000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r6, &(0x7f00000000c0)={0x1d, r7}, 0x10) sendmsg$can_bcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@delchain={0x68, 0x65, 0x2, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x3, 0x3}, {0xfff1, 0xf}, {0x9, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0xa3}}, @filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x8}]}}, @TCA_CHAIN={0x8, 0xb, 0xd49}, @TCA_CHAIN={0x8, 0xb, 0x10001}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x68}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r10, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r10, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r10, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2m33.012486381s ago: executing program 7 (id=7241): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d00000085000000230000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r0, 0x0, 0x10000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) getegid() r1 = geteuid() setreuid(r1, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0x2) 2m32.799367479s ago: executing program 7 (id=7246): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000840)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 2m32.369029544s ago: executing program 7 (id=7248): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f0000000840)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000480)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f0000000240)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r4}, 0x18) fsopen(&(0x7f0000000000)='fuse\x00', 0x1) 2m31.973258696s ago: executing program 7 (id=7256): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 2m31.973110176s ago: executing program 46 (id=7256): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 2m29.07465604s ago: executing program 8 (id=7309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 2m28.997241337s ago: executing program 8 (id=7311): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>=0||!') 2m28.887018965s ago: executing program 8 (id=7315): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="cd93"], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2m28.791409323s ago: executing program 8 (id=7318): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 2m28.017860526s ago: executing program 8 (id=7325): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m27.732327259s ago: executing program 5 (id=7330): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[@ANYRESHEX, @ANYBLOB="cd93ba71"], 0x20) r1 = open$dir(0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2m27.704477881s ago: executing program 5 (id=7331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f0000000200)='./file1\x00', 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x40, 0x80, 0x7, 0x10, {{0x33, 0x4, 0x0, 0x3, 0xcc, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x35, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5aa}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@remote, 0x8}]}, @noop, @generic={0x44, 0x8, "814226d98d4c"}, @timestamp_addr={0x44, 0xc, 0x27, 0x1, 0x4, [{@multicast2}]}, @ssrr={0x89, 0x1b, 0xe2, [@rand_addr=0x64010101, @loopback, @broadcast, @local, @loopback, @empty]}, @noop, @timestamp={0x44, 0x14, 0x91, 0x0, 0x8, [0x80000001, 0x9, 0x6, 0x2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x97, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xed}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xb9f}, {@multicast2, 0x8000}, {@empty}, {@empty, 0x2}, {@rand_addr=0x64010100}, {@empty, 0x401}]}]}}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x10000b}, 0x18) socket$key(0xf, 0x3, 0x2) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000240)=0x4) r5 = socket(0x2, 0x80805, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) unshare(0x48000000) sendmmsg(r6, &(0x7f0000009980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x301, &(0x7f0000000080)="$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") r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32, @ANYBLOB="14000600"], 0x54}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="13022cbd7000fbdbdf25010000000000000008410000004c00180002000662726f6164636173742d6c696e6b00"], 0x68}}, 0x4048080) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r9, 0x0, 0x8050) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @remote}]}, &(0x7f0000000180)=0x10) 2m27.524082496s ago: executing program 8 (id=7332): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 2m27.47625092s ago: executing program 47 (id=7332): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 2m27.166166875s ago: executing program 5 (id=7334): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x3, 0x4, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu>=0||!') 2m27.053183684s ago: executing program 5 (id=7337): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000cc0)={[{@user_xattr}, {@nogrpid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@noauto_da_alloc}, {@noauto_da_alloc}, {@grpquota}, {@usrjquota}]}, 0x2, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") chdir(&(0x7f0000000440)='./file0\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 2m26.821658253s ago: executing program 5 (id=7338): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x1400e, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000f800"/28], 0x48) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x6) r5 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) kexec_load(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 2m24.585352484s ago: executing program 5 (id=7397): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2m24.585267504s ago: executing program 48 (id=7397): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 1m46.979766989s ago: executing program 6 (id=8425): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) 1m46.919867113s ago: executing program 6 (id=8427): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001680)=@o_path={&(0x7f0000000640)='./file0\x00', 0x0, 0x4000, r2}, 0x18) 1m46.492348618s ago: executing program 6 (id=8432): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20040768, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)='\t&', 0x2, 0x80, 0x0, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f00000000c0)="ad7b5722779e518222af51abfe0eab09e5823a8306203f75d6bce84557fea705664d5f2eebdf7466422ac4cef25cac5f3b5ca89fb9b29cc4639fac67852c2e0f454de267dcb3fc7d", 0x48) 1m45.60202433s ago: executing program 6 (id=8447): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x67) r0 = syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000080)=0x2e9aa845) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)=0x40000) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) utimensat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r3) ptrace$peeksig(0x4209, r0, &(0x7f0000000140), &(0x7f0000002200)) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000380)='kfree\x00', 0x3) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x2, 0x0, 0x3}, &(0x7f0000000600)=[{}, {}, {}]) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4, 0x0, 0xb}, 0x18) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r5, 0x80047210, &(0x7f00000001c0)) r6 = socket(0x10, 0x3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000200)={0x0, 0xd46, 0x0, 0xffffffff, 0x800000}) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x3c, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x28, 0x1, [{0x10, 0x80, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x3c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000001000000000000", 0x1c) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x3000, 0x3) 1m44.429493615s ago: executing program 6 (id=8450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) link(&(0x7f0000000200)='./file1\x00', 0x0) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x40, 0x80, 0x7, 0x10, {{0x33, 0x4, 0x0, 0x3, 0xcc, 0x65, 0x0, 0x7, 0x2f, 0x0, @remote, @loopback, {[@timestamp_prespec={0x44, 0x34, 0x35, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5aa}, {@multicast1, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7fff}, {@remote, 0x8}]}, @noop, @generic={0x44, 0x8, "814226d98d4c"}, @timestamp_addr={0x44, 0xc, 0x27, 0x1, 0x4, [{@multicast2}]}, @ssrr={0x89, 0x1b, 0xe2, [@rand_addr=0x64010101, @loopback, @broadcast, @local, @loopback, @empty]}, @noop, @timestamp={0x44, 0x14, 0x91, 0x0, 0x8, [0x80000001, 0x9, 0x6, 0x2]}, @end, @timestamp_prespec={0x44, 0x3c, 0x97, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xed}, {@dev={0xac, 0x14, 0x14, 0x2f}, 0xb9f}, {@multicast2, 0x8000}, {@empty}, {@empty, 0x2}, {@rand_addr=0x64010100}, {@empty, 0x401}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000240)=0x4) socket(0x2, 0x80805, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) unshare(0x48000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, 0x0, 0x8050) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) lgetxattr(0x0, &(0x7f0000000040)=@known='trusted.overlay.upper\x00', 0x0, 0x0) 1m43.595384093s ago: executing program 6 (id=8459): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, r3, 0x1000) accept$unix(r0, 0x0, &(0x7f0000003800)) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = getuid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)={[{@usrquota}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@test_dummy_encryption_v1}, {@debug}, {@inlinecrypt}], [{@permit_directio}, {@obj_user={'obj_user', 0x3d, '\x00\x00\x00\x00\x00\x00'}}, {@uid_eq={'uid', 0x3d, r5}}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") stat(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003900), 0x0, 0x0) open$dir(&(0x7f0000005600)='./file0\x00', 0x8000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000005640)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000005680)=0xffffffffffffffff, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x80000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005880)={0x18, 0xa, &(0x7f00000056c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xd0}], &(0x7f0000005740)='GPL\x00', 0x19, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000005780)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000057c0)={0x0, 0xc, 0x64af, 0xf}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000005800)=[r0, r0, r0, r0, r0], &(0x7f0000005840)=[{0x3, 0x3, 0xa, 0x3}], 0x10, 0xbb}, 0x94) fcntl$notify(r0, 0x402, 0x8000001f) close_range(r0, 0xffffffffffffffff, 0x0) 1m43.568870215s ago: executing program 49 (id=8459): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) fstat(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r2, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, r3, 0x1000) accept$unix(r0, 0x0, &(0x7f0000003800)) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r5 = getuid() syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)={[{@usrquota}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@test_dummy_encryption_v1}, {@debug}, {@inlinecrypt}], [{@permit_directio}, {@obj_user={'obj_user', 0x3d, '\x00\x00\x00\x00\x00\x00'}}, {@uid_eq={'uid', 0x3d, r5}}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") stat(&(0x7f0000003840)='./file0\x00', &(0x7f0000003880)) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003900), 0x0, 0x0) open$dir(&(0x7f0000005600)='./file0\x00', 0x8000, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000005640)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000005680)=0xffffffffffffffff, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0x80000}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000005880)={0x18, 0xa, &(0x7f00000056c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xd0}], &(0x7f0000005740)='GPL\x00', 0x19, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000005780)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000057c0)={0x0, 0xc, 0x64af, 0xf}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000005800)=[r0, r0, r0, r0, r0], &(0x7f0000005840)=[{0x3, 0x3, 0xa, 0x3}], 0x10, 0xbb}, 0x94) fcntl$notify(r0, 0x402, 0x8000001f) close_range(r0, 0xffffffffffffffff, 0x0) 3.733789358s ago: executing program 1 (id=10052): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x8, &(0x7f0000000840)=ANY=[], 0xfd, 0x1bf, &(0x7f0000000480)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f0000000240)='.\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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"], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r5}, 0x18) fsopen(&(0x7f0000000000)='fuse\x00', 0x1) 3.514786196s ago: executing program 1 (id=10058): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r1) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r4}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) 3.425060263s ago: executing program 0 (id=10060): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0x5}, {0xfff2, 0xffff}, {0xa, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40480c4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1fe2752ba2963a9dfc0000faff81", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x6, 0xa, 0x9) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x2f, 0x9, 0x9, 0x1, 0xa, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x40, 0xf5, 0x9}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f00000016c0)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001700)="1c9c466f9a5d7b3b2724ac8742ab0b1dd2004873f5e4010000000592bdebdabe44a071023eb3e28b5854d96791ef09099f64cd6afade14b91d159a79614e8efc6ac1fcf690bb0d1592d6978b9b29ffbf8080ceea65185fb61837f8db540145331125fdd849fb7c8a85e8b46ebdbf03b9b9e683ced55fe08867d96a7dfe6aaa8cdfbdb562b16400"/146, 0xfffffffffffffea0, 0x4004044, 0x0, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="c5000000", @ANYRES16=r6, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) (async) r8 = getuid() setreuid(0x0, r8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x2f}, @in6=@mcast2, 0x4e22, 0x0, 0x4e21, 0x0, 0xa, 0x80, 0x180, 0x3b, r3, r8}, {0x1463d6cf, 0x7, 0x1, 0xde, 0xff, 0x5, 0x9, 0x5}, {0x81, 0xffffffffffffffff, 0x6, 0x397ad7d6}, 0xff, 0x0, 0x3, 0x0, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4d6, 0x6c}, 0x2, @in=@loopback, 0x3503, 0x4, 0x1, 0x5, 0xffffd6a7, 0x5, 0x4}}, 0xe8) (async) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000603, r8, &(0x7f0000000040)={0x5, 0x4, 0x1, 0x1}) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001580)={r1, 0x20, &(0x7f0000001540)={&(0x7f0000001400)=""/121, 0x79, 0x0, &(0x7f0000001480)=""/160, 0xa0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0xa, 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="9f81f7cbb0008a02"], &(0x7f0000000140)='GPL\x00', 0x7f, 0x1000, &(0x7f0000000400)=""/4096, 0x41100, 0x31, '\x00', r3, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x4, 0x4, 0x6, 0x78f}, 0x10, r12, r1, 0x0, &(0x7f00000015c0)=[r0, r1, r0, r1], 0xfffffffffffffffc, 0x10, 0x1}, 0x94) 3.348558459s ago: executing program 1 (id=10063): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) 3.348265119s ago: executing program 0 (id=10064): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) socket$key(0xf, 0x3, 0x2) close(r1) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 3.307680913s ago: executing program 0 (id=10066): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x10000000) socket$kcm(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) 3.272309276s ago: executing program 1 (id=10067): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) socket(0x80000000000000a, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 3.227504729s ago: executing program 0 (id=10068): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount$9p_unix(&(0x7f0000002600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='.\x00', 0x0, 0x1b03088, 0x0) 3.198510521s ago: executing program 1 (id=10070): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x23, 0x0, 0x6, 0x2, &(0x7f0000000640), 0x8, 0x0, 0x0, {0x1}}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/172, 0xac}], 0x3, &(0x7f0000000780)=""/244, 0xf4}, 0x4}, {{&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000009c0)=""/201, 0xc9}, {0x0}, {&(0x7f0000000c40)=""/155, 0x9b}, {&(0x7f0000000d40)=""/232, 0xe8}, {0x0}, {&(0x7f0000000f40)=""/87, 0x57}], 0xa}, 0x3}, {{&(0x7f0000001080)=@rc, 0x80, &(0x7f0000002800)=[{&(0x7f0000002140)=""/222, 0xde}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000002240)=""/136, 0x88}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/126, 0x7e}, {0x0}, {&(0x7f0000002500)=""/158, 0x9e}], 0x7}, 0xff}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f00000028c0)=""/111, 0x6f}], 0x2, &(0x7f0000002940)=""/106, 0x6a}, 0x4}, {{&(0x7f00000029c0)=@un=@abs, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/157, 0x9d}, {&(0x7f0000002b80)=""/226, 0xe2}, {&(0x7f00000006c0)=""/24, 0x18}, {&(0x7f0000002c80)=""/125, 0x7d}, {&(0x7f0000002d00)=""/110, 0x6e}], 0x5, &(0x7f0000002e00)=""/187, 0xbb}, 0x5}], 0x5, 0x120, &(0x7f0000003040)) sendmsg$nl_route(r7, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) syz_usb_connect(0x0, 0x5e, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x1}, 0x18) 3.064885742s ago: executing program 0 (id=10072): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x307, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x40, 0x8f, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x3, 0xcc, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0xcf}}, {{{0x9, 0x5, 0x81, 0x3, 0x3e7, 0x7, 0x1, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x5, 0x8}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x3d, 0x5, 0x0, 0x40, 0xf9}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x6, [{0xef, &(0x7f00000003c0)=@string={0xef, 0x3, "ae416c6c584a5613b72923a7027ab1ab0431c55c0ad14aacc5c98381bd69fa1163f727a22813eb2586c3ec22999a451b17ede8b9308e5d0b701b3153559412a8004e613a1a00c67c2a3dd16ed819d6d1eade4b930cb5b52600a25a77a26c1d2f844a660055aec4d43d884a7c3384f3fcee57a5574b158de85974314d00b076324b323891bd1c47c6aac09ec1dbfedf1ee2415f147ce36315103792aa9fb5c6a203df63352a93f9758a86c681d9c4189c3cd8f7795e5db31ff6f3ef6745c6ad618be9fbfdcf725ab843fd54926269f248b40f96dc981a4080318895d85f8a8dfecc6502f8485d3b27467f326190"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x343c}}, {0x97, &(0x7f0000000740)=@string={0x97, 0x3, "fc1aa99645524a2b6260415d2906d545c95ee6c5408a0a9426d740a9dac3cfa64aabe8f7a1cad694194a38e5586f4f76b8d371dc866653edcd88be2ef6c135de7f4ce6372b072fea3833419218edd32b460a5c33a6d6b5b31c457e760ca9cda64b1ce15ad518cd6130f3cd95ca5e4991113f03009f4c2ed97d853a3f7cb95cd01a378ed95ea217de089b065bba602fb9cdd7fce9e1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x421}}]}) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000000d80)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37aafe4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b297271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000004169c712b816791a2776f3d585f0fdb16be3f3fc2ba92b54bcfd", @ANYRES16], 0x1, 0x1207, &(0x7f0000001280)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x40004) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @remote}, 0x14) sendto(r4, &(0x7f0000000300)="d26826916f14ba19175633d3a414a3a154f5ea3431d12772234aff1be7b88d25eada9dce40043d8ee1299a198347a57597386999c0eeaf0583b7265349373900c1", 0x41, 0xb5709aa99d8935e0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x32600) sendto$inet6(r4, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) syz_usb_connect$cdc_ecm(0x4, 0x52, &(0x7f0000000540)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x40, 0x1, 0x1, 0x8, 0xc0, 0x2, [{{0x9, 0x4, 0x0, 0xca, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "1efeea199a"}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x0, 0x8}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0xf6, 0x9, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x8, 0x9}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x300, 0x3, 0x8, 0x8, 0xc7baab97c28f80f2, 0x5}, 0x40, &(0x7f0000000800)={0x5, 0xf, 0x40, 0x5, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0x5, 0x2, 0x1000, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x2, 0x8, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x60, 0x5, 0xff, 0x68, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0xc, "11a5fa3f993617c29eb70d8c48e081ba"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x6, 0xd, 0x80}]}, 0x5, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x437}}, {0xdf, &(0x7f0000000880)=@string={0xdf, 0x3, "535d8448441861cada41ce9427e31235afffa16a9cc0d499d000e6102a850a8a0a28e063c129bc464e98907679b93321295c1bdc7226f3ce1ec2872165bbcfd8e5e8701c8f60b7de58a5fdb3736080028a0b4526808e139eb4905344399f44dc2ffbb9f753ea034ee764b33755e81764c0c15c650bbf5b16831e7ae385ec31c81a18792981635bf8047f2b8e44f905cfc3dcdcc62d07d9c0ae984a758e72e06efd610a9f84cc6664d1fc6be030f12de083054581612d6f442b32fb92757ea35584d89d049c43fbf9cde8427393f7db26e31b2106643daeb7de0212d5b8"}}, {0x9c, &(0x7f00000024c0)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x1409}}, {0x9f, &(0x7f00000010c0)=@string={0x9f, 0x3, "863d1b7ba8905878e00b0916bf0e965dcd6b4c8dd4a3786bbf2ee9398c5e5e6ce417801edcddfeb0d34aa63703a370d75cf71855188721d3dab5368180166bb2b955821f893f58f56d201743f259e2522f786cf1c84b54ca890cf40b827ead55b2127c1de9f098c31945e15795b32f836e274c41c950c97632606ff9335e54b4531d504e8e093c93e1ad61eb6a9e9ebbcb7675ac586b2f3343baf38749"}}]}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)=ANY=[@ANYBLOB="19f29d1d5cd006c07a5080dc611a93556a932d71ba7ea9f937a5f05a60ce565b05f0e2c40dad9118ba4a6687ae9a9888b4b9e93f504755165fdbfaeb", @ANYRES16=r8, @ANYBLOB="00082cbd7000fddbdf2517000000"], 0x14}}, 0x10) 2.285102175s ago: executing program 4 (id=10079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff", @ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB="e527"], 0xffaf}, 0x1, 0x0, 0x0, 0x8d4}, 0x0) r3 = getegid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2040400, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=readahead,dfltgid=', @ANYRESHEX=r3, @ANYBLOB=',access=any,seclabel,rootcontext=root,mask=MAY_EXEC,uid=', @ANYRESDEC=r4, @ANYBLOB="2c7375626a5f747970653d2b292f2b2c736d61636b66736861743d2a2d2d2c736d6163d366736861743d7569642c00"]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000200)={[{@nobh}, {@prjquota}]}, 0x0, 0x4c4, &(0x7f0000000500)="$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") r5 = creat(&(0x7f00000006c0)='./file0\x00', 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x6a, 0x0, &(0x7f00000002c0)="000000e12779484bc1d0857cdb858adf0bdf08c1de93c61df7ab5baa85e91cf719402bbdef32a1bae860bee8357ba1e56379436a6f84d74e83df30197cc8e1d6238fb014a4b6f1dc270391ee80c6c0c83f90100497263bffa4ce75b23dc63b83bd360cb070e73ef78ddf", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x4c) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000140)='./file0\x00', 0x88) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) 2.09919979s ago: executing program 4 (id=10084): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000040), 0x4) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x4000000) 2.071743793s ago: executing program 4 (id=10085): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) 1.893207297s ago: executing program 3 (id=10089): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) getsockopt$sock_timeval(r0, 0x1, 0x15, 0x0, &(0x7f00000010c0)) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x8, 0x4, 0x3, 0x3f00}) r6 = syz_clone(0x8000, &(0x7f0000000180)="9ef3399cbb7755c63342040b284bf44b5702fbe687543e4dcf4fb461c4a78c1d68c00f126163f96cbc900aefeae5a1cb48a8978e7ee4f1574e20516b1ea5196385742eb64ae92e89c6", 0x49, &(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000280)="a237022c9a4df953a2f07fa744786d220d2fa21cfef857dd0ad92392fd1c0c0dd08100f59f5685b80b9395b041b2682a54a2f11b1f9143cd3df7d33646cf2de067d0a9362a4c9643c3bf0eb3a6955baa1b1ce77287e7b7e0da8593e0805bb16aafcd07e1c3d42fa0651eef5be8d83129a090e319f08dfbb75cc0cfcf2c658ec5fa1f59a0d234feaa0ef2c60f888dc1894b1dfcf3a354087ddc450c95335630f9512ea73d149592") mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r7, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r7, &(0x7f0000005300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/16, 0x10}, 0x7}], 0x1, 0x2, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r8 = open(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) getdents(r8, &(0x7f0000001fc0)=""/184, 0x20002078) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000340)=r6) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_buf(r9, 0x29, 0x6, &(0x7f0000000140)=' ', 0x1) r10 = syz_open_dev$sg(&(0x7f0000000000), 0x3, 0x202000) ioctl$SG_BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000000080)={'\x00', 0x7, 0x4, 0x6, 0x3, 0x9, r6}) 1.824688333s ago: executing program 3 (id=10090): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff3000/0xa000)=nil, &(0x7f0000000180)="1010aba3074879b125eb46a64a1849e515f6125d77271f6c0eeb5136d6b4d4b0b1bc752f6945b20008b6fd1d41d5b94d0df8ea88a84209616d88dd20659200f420a12bd88b86a00160f34b4b0fb5f1e5abccf9d05232ac5b19fc9e0488b2c0095aae3327c29595774e03c85234", 0x6d, r0}, 0x68) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000080)={[{@overriderock}, {@dmode={'dmode', 0x3d, 0x6}}, {@check_strict}, {@unhide}, {@utf8}, {@overriderock}, {@showassoc}, {@session={'session', 0x3d, 0x50}}]}, 0x1, 0x698, &(0x7f0000000a80)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x194) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000202, 0x0, 0x0) 1.542327815s ago: executing program 3 (id=10091): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) r2 = socket(0x2, 0x3, 0xff) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000053093acb000000060a0b0400000000000000000200010028811818c2466eab7eb48df9ab34e51212000480240001800a000100717565756500000014000280060001400003000008000440000000150900010073797a3000000000090002001100010000000000000000000000000a"], 0x7c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40004) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r4, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r5 = open(0x0, 0x53f802, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x4000000000000009}, 0x35) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = eventfd2(0x0, 0x0) readv(r7, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendmmsg(r0, &(0x7f0000005740)=[{{&(0x7f0000000100)=@xdp={0x2c, 0x4, r8, 0x1d}, 0x80, 0x0, 0x0, &(0x7f0000001700)=[{0x10, 0x10d, 0x6}], 0x10}}], 0x1, 0x4000040) 1.187652964s ago: executing program 4 (id=10092): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) socket(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 1.137535848s ago: executing program 4 (id=10094): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x400, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$eJzs3U9IHFccB/DfzO7Wqkux7aVQ+gdKKa0g9lboxV5aEIpIKYW2YCmllxYtWKU37SmXHJJjSIKnXCTkFpNj8CK5JARyMokHcwkkkkMkhySwYXcU/LOJxl13gvP5wDoz+ub93jDzfSPiMAEUVl9EDEVEKSL6I6ISEcnWBh9nn76NzbnupbGIWu2Hh0mjXbad2dyvNyJmI+KriFhMk/irHDG98Mvq4+XvPjs+Vfn03MLP3R09yA1rqyvfr58dOXZx+Mvp6zfvjyQxFNVtx9V+SZPvlZOIdw6j2GsiKec9AvZj9L8Lt+q5fzciPmnkvxJpZCfvxOQbi5X44syL9j354Mb7nRwr0H61WqV+D5ytAYWTRkQ1knQgIrL1NB0YyH6Hv13qSf+emPy3/8+JqfE/8p6pgHapRqx8e7nrUu+O/N8rZfkHjqjsj1IrP47O36mvrJfyHhDQER9ki/r9v/+3mc9D/qFw5B+KS/6huOQfikv+4ehp9v+mzcg/FJf8Q3HJPxSX/ENxHTj/p54d3qCAjtiafwCgWGpdB3pquP0PIgMdl/f8AwAAAAAAAAAAAAAAAAAA7DbXvTS2+WlPj+U9W1w9HbH2TdZ0d/1S433EEW82vvY8Srb1mOyrwsv9+lGLHbTofM5PX791N9/61z7Mt/7MeMTs/xExWC43rr1tF1Sycf0d3Nt7/Lzye4sFXtHOdwN8/VNn6+/0dD7f+sPLEVfq889gs/knjfcay+bzT7V+/lqs/8+TFjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgY54HAAD//7UiauA=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17e) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)=0x10000000) socket$kcm(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) 1.057208305s ago: executing program 9 (id=10096): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) socket(0x2a, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000dc0), &(0x7f0000000040)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008000000"], 0x48) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000ffffffffff", @ANYRES8=r1, @ANYRESHEX=r0, @ANYBLOB="e527"], 0xffaf}, 0x1, 0x0, 0x0, 0x8d4}, 0x0) r3 = getegid() r4 = geteuid() setreuid(r4, r4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xee00}}, './file0\x00'}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x2040400, &(0x7f0000000a00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',cache=readahead,dfltgid=', @ANYRESHEX=r3, @ANYBLOB=',access=any,seclabel,rootcontext=root,mask=MAY_EXEC,uid=', @ANYRESDEC=r5, @ANYBLOB="2c7375626a5f747970653d2b292f2b2c736d61636b66736861743d2a2d2d2c736d6163d366736861743d7569642c00"]) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000200)={[{@nobh}, {@prjquota}]}, 0x0, 0x4c4, &(0x7f0000000500)="$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") sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f00000005c0)={0x0, 0x1, 0x0, &(0x7f0000000400), &(0x7f0000000440)}, 0x20) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x101, 0x7, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2c0000001900010000000000000000e47f209000001100050000000008000100e000000208000100ac141425e104bcf1cd9df35cbc9b4736c119db669028bf235dcf602362a68d6c204e00df1652f3459b45ddc62290026019901c5e1917481bb766ea4bfd30d44440f3280c74a8abf33c42ceaa2eec4f519c6bd0d288500e44186e41082c31bec7722caab14a37f1dba2e475c72fe6a092b4db66013b72b193dd122e06d795f3854a0c1fbd1bca663720ef292f6f29bc893a1e6341afa882d4eb204570424d37823aaa55c071ac05"], 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0x1, 0x8b2}, &(0x7f0000000000), &(0x7f0000000cc0)) r10 = creat(&(0x7f00000006c0)='./file0\x00', 0x58) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0x6a, 0x0, &(0x7f00000002c0)="000000e12779484bc1d0857cdb858adf0bdf08c1de93c61df7ab5baa85e91cf719402bbdef32a1bae860bee8357ba1e56379436a6f84d74e83df30197cc8e1d6238fb014a4b6f1dc270391ee80c6c0c83f90100497263bffa4ce75b23dc63b83bd360cb070e73ef78ddf", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40}, 0x4c) r11 = inotify_init1(0x0) inotify_add_watch(r11, &(0x7f0000000140)='./file0\x00', 0x88) 854.718781ms ago: executing program 9 (id=10097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) socket$key(0xf, 0x3, 0x2) close(r2) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {&(0x7f0000000440)="9c74dfbf77572856c809ff86bb648daf351a32ad5ea7e5599da7a5b3d468381d8ff50420", 0x24}], 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="000086dd000411001400006000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001042088be"], 0x7a) 826.044103ms ago: executing program 4 (id=10098): syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x23, 0x0, 0x6, 0x2, &(0x7f0000000640), 0x8, 0x0, 0x0, {0x1}}) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r6, 0x5393, &(0x7f0000000000)) recvmmsg(r5, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)=""/130, 0x82}, {&(0x7f00000004c0)=""/178, 0xb2}, {&(0x7f0000000580)=""/172, 0xac}], 0x3, &(0x7f0000000780)=""/244, 0xf4}, 0x4}, {{&(0x7f0000000640)=@xdp, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000880)=""/72, 0x48}, {&(0x7f0000000900)=""/160, 0xa0}, {&(0x7f0000001140)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f00000009c0)=""/201, 0xc9}, {0x0}, {&(0x7f0000000c40)=""/155, 0x9b}, {&(0x7f0000000d40)=""/232, 0xe8}, {0x0}, {&(0x7f0000000f40)=""/87, 0x57}], 0xa}, 0x3}, {{&(0x7f0000001080)=@rc, 0x80, &(0x7f0000002800)=[{&(0x7f0000002140)=""/222, 0xde}, {&(0x7f0000000280)=""/37, 0x25}, {&(0x7f0000002240)=""/136, 0x88}, {&(0x7f0000002300)=""/206, 0xce}, {&(0x7f0000002400)=""/126, 0x7e}, {0x0}, {&(0x7f0000002500)=""/158, 0x9e}, {&(0x7f00000025c0)=""/174, 0xae}], 0x8}, 0xff}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/10, 0xa}, {0x0}], 0x2, &(0x7f0000002940)=""/106, 0x6a}, 0x4}, {{&(0x7f00000029c0)=@un=@abs, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002a40)=""/157, 0x9d}, {&(0x7f0000002b80)=""/226, 0xe2}, {&(0x7f00000006c0)=""/24, 0x18}, {&(0x7f0000002c80)=""/125, 0x7d}, {&(0x7f0000002d00)=""/110, 0x6e}], 0x5, &(0x7f0000002e00)=""/187, 0xbb}, 0x5}], 0x5, 0x120, &(0x7f0000003040)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000010329bd7000100000000200000403000007020000001400110069616376746170300000000000000000080006002503"], 0x38}, 0x1, 0x0, 0x0, 0x240480c4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c050}, 0x20000000) syz_usb_connect(0x0, 0x5e, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0x1}, 0x18) 686.053055ms ago: executing program 9 (id=10099): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000002400028004"], 0x50}}, 0x0) r1 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0xc8, 0x0, 0x9, 0x1, 0x8, 0x2, 0x0, 0x3, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x5e, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8800000000000000000000000000bbff0200000000000000000000000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e50f2ff113fb5e9c95bd117db9a9754627b5e68121bde7e4de95ddce9adb485f55d8b0f9e9d1c198e8c98baacf7de6f8dc289815a36358d35158e588", @ANYRES16=r1, @ANYRES8=r0], 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r2, 0x28, 0x6, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0x4, 0xa, 0xc}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18001000000000000200000000000000850000002a0000006a80dcfb", @ANYRES32=r5, @ANYRES8=r3], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x53, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000840)={{r5}, &(0x7f00000007c0), &(0x7f0000000800)='%pK \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r6}, 0xc) sendmsg$inet(r4, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x80) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2100) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x8, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0xfffffffffffffd23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee14}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r8}, 0x10) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce8102030400fe08000e40000200875a65969ff57b00ff020000000000000000000000000001"], 0xfdef) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 659.892537ms ago: executing program 9 (id=10100): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x23}]}, 0x0, 0xfffffffe, 0x4e, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x13) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r5 = fcntl$dupfd(r4, 0x406, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000480)={0x0, 0xd, 0x222, 0x0, 0x200}, 0x8, 0x100000ca, 0x0, 0x48000000, 0xfffffffe, 0x40, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r6}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r10 = dup(r9) ioctl$PTP_EXTTS_REQUEST2(r10, 0x43403d05, 0x0) 550.488926ms ago: executing program 9 (id=10101): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) 453.897344ms ago: executing program 9 (id=10102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000007c0)='T', 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000280)=""/230, 0xe6}], 0x1}, 0x0) 144.453058ms ago: executing program 1 (id=10103): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x307, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x40, 0x8f, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x3, 0xcc, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0xcf}}, {{{0x9, 0x5, 0x81, 0x3, 0x3e7, 0x7, 0x1, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x5, 0x8}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x3d, 0x5, 0x0, 0x40, 0xf9}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x6, [{0xef, &(0x7f00000003c0)=@string={0xef, 0x3, "ae416c6c584a5613b72923a7027ab1ab0431c55c0ad14aacc5c98381bd69fa1163f727a22813eb2586c3ec22999a451b17ede8b9308e5d0b701b3153559412a8004e613a1a00c67c2a3dd16ed819d6d1eade4b930cb5b52600a25a77a26c1d2f844a660055aec4d43d884a7c3384f3fcee57a5574b158de85974314d00b076324b323891bd1c47c6aac09ec1dbfedf1ee2415f147ce36315103792aa9fb5c6a203df63352a93f9758a86c681d9c4189c3cd8f7795e5db31ff6f3ef6745c6ad618be9fbfdcf725ab843fd54926269f248b40f96dc981a4080318895d85f8a8dfecc6502f8485d3b27467f326190"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x343c}}, {0x97, &(0x7f0000000740)=@string={0x97, 0x3, "fc1aa99645524a2b6260415d2906d545c95ee6c5408a0a9426d740a9dac3cfa64aabe8f7a1cad694194a38e5586f4f76b8d371dc866653edcd88be2ef6c135de7f4ce6372b072fea3833419218edd32b460a5c33a6d6b5b31c457e760ca9cda64b1ce15ad518cd6130f3cd95ca5e4991113f03009f4c2ed97d853a3f7cb95cd01a378ed95ea217de089b065bba602fb9cdd7fce9e1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x421}}]}) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x1207, &(0x7f0000001280)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x40004) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @remote}, 0x14) sendto(r4, &(0x7f0000000300)="d26826916f14ba19175633d3a414a3a154f5ea3431d12772234aff1be7b88d25eada9dce40043d8ee1299a198347a57597386999c0eeaf0583b7265349373900c1", 0x41, 0xb5709aa99d8935e0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r6, 0x0) sendto$inet6(r4, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 84.279354ms ago: executing program 3 (id=10104): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) socket(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0902000000000000000001"], 0x38}}, 0x0) 83.713574ms ago: executing program 3 (id=10105): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), 0x0}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000100)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 52.869286ms ago: executing program 3 (id=10106): sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x307, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x40, 0x8f, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x3, 0x1, 0x3, 0xcc, {0x9, 0x21, 0x0, 0x6, 0x1, {0x22, 0xcf}}, {{{0x9, 0x5, 0x81, 0x3, 0x3e7, 0x7, 0x1, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x5, 0x8}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x201, 0x3d, 0x5, 0x0, 0x40, 0xf9}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x6, [{0xef, &(0x7f00000003c0)=@string={0xef, 0x3, "ae416c6c584a5613b72923a7027ab1ab0431c55c0ad14aacc5c98381bd69fa1163f727a22813eb2586c3ec22999a451b17ede8b9308e5d0b701b3153559412a8004e613a1a00c67c2a3dd16ed819d6d1eade4b930cb5b52600a25a77a26c1d2f844a660055aec4d43d884a7c3384f3fcee57a5574b158de85974314d00b076324b323891bd1c47c6aac09ec1dbfedf1ee2415f147ce36315103792aa9fb5c6a203df63352a93f9758a86c681d9c4189c3cd8f7795e5db31ff6f3ef6745c6ad618be9fbfdcf725ab843fd54926269f248b40f96dc981a4080318895d85f8a8dfecc6502f8485d3b27467f326190"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x343c}}, {0x97, &(0x7f0000000740)=@string={0x97, 0x3, "fc1aa99645524a2b6260415d2906d545c95ee6c5408a0a9426d740a9dac3cfa64aabe8f7a1cad694194a38e5586f4f76b8d371dc866653edcd88be2ef6c135de7f4ce6372b072fea3833419218edd32b460a5c33a6d6b5b31c457e760ca9cda64b1ce15ad518cd6130f3cd95ca5e4991113f03009f4c2ed97d853a3f7cb95cd01a378ed95ea217de089b065bba602fb9cdd7fce9e1"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x421}}]}) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x1d, 0x2, 0x6) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000000d80)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x1207, &(0x7f0000001280)="$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") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x40004) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x4000000000000200, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'erspan0\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @remote}, 0x14) sendto(r4, &(0x7f0000000300)="d26826916f14ba19175633d3a414a3a154f5ea3431d12772234aff1be7b88d25eada9dce40043d8ee1299a198347a57597386999c0eeaf0583b7265349373900c1", 0x41, 0xb5709aa99d8935e0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r6, 0x0) sendto$inet6(r4, &(0x7f0000000280)="050350038f0b48030102", 0xa, 0x800, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r7, 0x2, {0x3}}, 0x18) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) 0s ago: executing program 0 (id=10107): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf2541000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f7073000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000080001007063690011000200303030303a30303a31302e30000000000d0087006c325f64726f707300000000"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[], 0x38}}, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000002700)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRESHEX, @ANYBLOB="983c7e1b5ee51334aa3024628844df1ee4cdfd258e7a8de74181abfa99e54515c1776254e3f440c91e3b17a6d2e16d0df07d92efcfe1566614a7f9b9d5d48e81509a18f54c61dba5a606969b8e91494c909204614971d6bbfd3c98da8b0fec13c90343b5329845075eef13e556ea294204a8aac723b08936abe99dd5cfadc279f2dc9b23d3844a8ead0b2cab3b25efcb4e6b65d2da5255d4f9719abfbaa528b24f86160ea888bba49b512adb52d418b2e8626cbc2c779d749aac743f79b7a4a8"], 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [""]}, 0x14}}, 0xc044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4ee, &(0x7f0000000880)="$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") sendmsg$inet(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="140000000000000000000000020000000b000000000000002000000000000000100100000d000000070f8cac1414390a0101026401010000140000000000000000000000010000000080000000000000110000000000000000000000010000000900000000000000140000000000000000000000020000000300000000"], 0xb8}, 0x4040) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) kernel console output (not intermixed with test programs): consistent configuration, please check. [ 783.530467][T31882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9410'. [ 783.540069][T31882] program syz.3.9410 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 783.629992][T31893] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 783.681178][T31898] loop9: detected capacity change from 0 to 512 [ 783.702194][T31900] loop4: detected capacity change from 0 to 1024 [ 783.709718][T31900] EXT4-fs: inline encryption not supported [ 783.715820][T31900] EXT4-fs: Ignoring removed bh option [ 783.721368][T31900] EXT4-fs: inline encryption not supported [ 783.723030][T31898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.740494][T31898] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 783.757493][T31898] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 783.764542][T31900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 783.803869][T25968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.806419][T16168] Process accounting resumed [ 783.865523][T31900] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 783.914881][T31921] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 783.945341][T25158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 783.972636][T31921] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9422'. [ 784.035932][T31932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 784.044996][T31932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.251953][T31947] netlink: 100 bytes leftover after parsing attributes in process `syz.9.9425'. [ 784.421983][T31932] loop4: detected capacity change from 0 to 8192 [ 784.458372][T31951] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9426'. [ 784.567626][T31957] loop9: detected capacity change from 0 to 512 [ 784.574393][T31957] EXT4-fs: Ignoring removed mblk_io_submit option [ 784.581157][T31957] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 784.592809][T31957] EXT4-fs (loop9): 1 truncate cleaned up [ 784.599592][T31957] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 784.636402][T25968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.844493][T31969] loop9: detected capacity change from 0 to 128 [ 784.855161][T31980] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9432'. [ 784.948674][T31982] loop9: detected capacity change from 0 to 1024 [ 784.955499][T31982] EXT4-fs: test_dummy_encryption option not supported [ 784.963791][T31984] loop0: detected capacity change from 0 to 512 [ 785.007333][T31987] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 785.015821][T31987] macsec1: left allmulticast mode [ 785.073019][T31984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.096005][T31984] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 785.130854][T31997] loop3: detected capacity change from 0 to 512 [ 785.137489][T31984] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 785.147147][T31997] EXT4-fs: Ignoring removed mblk_io_submit option [ 785.170146][T31997] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 785.181587][T28730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.200548][T31997] EXT4-fs (loop3): 1 truncate cleaned up [ 785.207540][ T29] kauditd_printk_skb: 433 callbacks suppressed [ 785.207558][ T29] audit: type=1326 audit(1755175919.561:18888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32002 comm="syz.1.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 785.237687][ T29] audit: type=1326 audit(1755175919.561:18889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32002 comm="syz.1.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 785.247447][T31997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 785.292425][T32006] program syz.9.9442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 785.305398][ T29] audit: type=1326 audit(1755175919.641:18890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32002 comm="syz.1.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 785.329196][ T29] audit: type=1326 audit(1755175919.641:18891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32002 comm="syz.1.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 785.352947][ T29] audit: type=1326 audit(1755175919.641:18892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32002 comm="syz.1.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 785.376616][ T29] audit: type=1326 audit(1755175919.641:18893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32002 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 785.399982][ T29] audit: type=1326 audit(1755175919.641:18894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32002 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 785.423092][ T29] audit: type=1326 audit(1755175919.641:18895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32002 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 785.446100][ T29] audit: type=1326 audit(1755175919.641:18896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32002 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 785.469172][ T29] audit: type=1326 audit(1755175919.641:18897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32002 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 785.521463][T32012] FAULT_INJECTION: forcing a failure. [ 785.521463][T32012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.534707][T32012] CPU: 1 UID: 0 PID: 32012 Comm: syz.9.9445 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 785.534753][T32012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 785.534814][T32012] Call Trace: [ 785.534824][T32012] [ 785.534834][T32012] __dump_stack+0x1d/0x30 [ 785.534888][T32012] dump_stack_lvl+0xe8/0x140 [ 785.534914][T32012] dump_stack+0x15/0x1b [ 785.534936][T32012] should_fail_ex+0x265/0x280 [ 785.534963][T32012] should_fail+0xb/0x20 [ 785.534986][T32012] should_fail_usercopy+0x1a/0x20 [ 785.535015][T32012] _copy_from_user+0x1c/0xb0 [ 785.535109][T32012] ___sys_sendmsg+0xc1/0x1d0 [ 785.535152][T32012] __x64_sys_sendmsg+0xd4/0x160 [ 785.535184][T32012] x64_sys_call+0x191e/0x2ff0 [ 785.535236][T32012] do_syscall_64+0xd2/0x200 [ 785.535270][T32012] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 785.535302][T32012] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 785.535328][T32012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.535406][T32012] RIP: 0033:0x7fceb8e4ebe9 [ 785.535426][T32012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.535450][T32012] RSP: 002b:00007fceb78b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 785.535474][T32012] RAX: ffffffffffffffda RBX: 00007fceb9075fa0 RCX: 00007fceb8e4ebe9 [ 785.535492][T32012] RDX: 0000000004000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 785.535509][T32012] RBP: 00007fceb78b7090 R08: 0000000000000000 R09: 0000000000000000 [ 785.535605][T32012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 785.535620][T32012] R13: 00007fceb9076038 R14: 00007fceb9075fa0 R15: 00007ffd4a7444e8 [ 785.535644][T32012] [ 785.714722][T25298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.852217][T32016] loop1: detected capacity change from 0 to 256 [ 785.884999][T32015] netlink: 'syz.1.9447': attribute type 1 has an invalid length. [ 785.893374][T32015] __nla_validate_parse: 4 callbacks suppressed [ 785.893417][T32015] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9447'. [ 785.931487][T32024] loop3: detected capacity change from 0 to 128 [ 785.943219][T32024] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 785.963166][T32024] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 786.036563][T32030] IPVS: Error connecting to the multicast addr [ 786.045225][T25298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 786.132034][T32035] loop1: detected capacity change from 0 to 128 [ 786.162164][T32040] loop3: detected capacity change from 0 to 128 [ 786.341725][T32051] loop1: detected capacity change from 0 to 1024 [ 786.349285][T32051] EXT4-fs: test_dummy_encryption option not supported [ 786.371793][T32054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9459'. [ 786.408402][T32054] loop3: detected capacity change from 0 to 512 [ 786.448447][T32054] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 786.458423][T32054] EXT4-fs (loop3): #blocks per group too big: 466944 [ 786.499207][T32056] loop1: detected capacity change from 0 to 128 [ 786.575813][T32065] loop0: detected capacity change from 0 to 512 [ 786.617115][T32065] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.9461: casefold flag without casefold feature [ 786.647500][T32065] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.9461: couldn't read orphan inode 15 (err -117) [ 786.707371][T32065] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 786.806042][T32073] IPVS: Error connecting to the multicast addr [ 786.853122][T32081] loop3: detected capacity change from 0 to 512 [ 786.862132][T32081] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 786.872052][T32081] EXT4-fs (loop3): orphan cleanup on readonly fs [ 786.879514][T32081] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9468: Failed to acquire dquot type 1 [ 786.902236][T32081] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9468: bg 0: block 40: padding at end of block bitmap is not set [ 786.921870][T32081] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 786.932464][T32081] EXT4-fs (loop3): 1 truncate cleaned up [ 786.939474][T32081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 786.974915][T32084] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 786.984918][T32081] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9468'. [ 786.987246][T32084] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9469'. [ 787.024403][T32081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.081311][T32089] tipc: Enabled bearer , priority 0 [ 787.106796][T32088] tipc: Resetting bearer [ 787.123234][T32088] tipc: Disabling bearer [ 787.181427][T32098] loop3: detected capacity change from 0 to 512 [ 787.190404][T32098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 787.205395][T32100] loop1: detected capacity change from 0 to 512 [ 787.212459][T32100] EXT4-fs: Ignoring removed mblk_io_submit option [ 787.219354][T32100] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 787.230722][T32098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.243465][T32098] ext4 filesystem being mounted at /510/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 787.254923][T32100] EXT4-fs (loop1): 1 truncate cleaned up [ 787.265378][T32100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.307120][T25175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.328899][T32109] loop9: detected capacity change from 0 to 128 [ 787.338970][T28730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.353205][T32109] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 787.365572][T32109] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.385284][T32112] IPVS: Error connecting to the multicast addr [ 787.410891][T32117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9480'. [ 787.420127][T32117] netlink: 'syz.1.9480': attribute type 2 has an invalid length. [ 787.427906][T32117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9480'. [ 787.461945][T25968] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 787.494276][T32124] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9483'. [ 787.509994][T32117] netlink: 216 bytes leftover after parsing attributes in process `syz.1.9480'. [ 787.560246][T32130] netlink: 'syz.1.9485': attribute type 12 has an invalid length. [ 787.606981][T32138] loop1: detected capacity change from 0 to 512 [ 787.613708][T32138] EXT4-fs: Ignoring removed mblk_io_submit option [ 787.620881][T32138] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 787.637950][T32138] EXT4-fs (loop1): 1 truncate cleaned up [ 787.647482][T32138] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.669165][T32146] FAULT_INJECTION: forcing a failure. [ 787.669165][T32146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.682387][T32146] CPU: 0 UID: 0 PID: 32146 Comm: syz.0.9487 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 787.682439][T32146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.682468][T32146] Call Trace: [ 787.682476][T32146] [ 787.682485][T32146] __dump_stack+0x1d/0x30 [ 787.682510][T32146] dump_stack_lvl+0xe8/0x140 [ 787.682545][T32146] dump_stack+0x15/0x1b [ 787.682563][T32146] should_fail_ex+0x265/0x280 [ 787.682588][T32146] should_fail+0xb/0x20 [ 787.682658][T32146] should_fail_usercopy+0x1a/0x20 [ 787.682741][T32146] _copy_to_user+0x20/0xa0 [ 787.682780][T32146] simple_read_from_buffer+0xb5/0x130 [ 787.682804][T32146] proc_fail_nth_read+0x10e/0x150 [ 787.682856][T32146] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 787.682884][T32146] vfs_read+0x1a5/0x770 [ 787.682906][T32146] ? __fget_files+0x184/0x1c0 [ 787.682931][T32146] ? __rcu_read_unlock+0x4f/0x70 [ 787.683010][T32146] ? __fget_files+0x184/0x1c0 [ 787.683045][T32146] ksys_read+0xda/0x1a0 [ 787.683072][T32146] __x64_sys_read+0x40/0x50 [ 787.683099][T32146] x64_sys_call+0x27bc/0x2ff0 [ 787.683178][T32146] do_syscall_64+0xd2/0x200 [ 787.683274][T32146] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 787.683305][T32146] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 787.683335][T32146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.683423][T32146] RIP: 0033:0x7f30c5e7d5fc [ 787.683443][T32146] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 787.683465][T32146] RSP: 002b:00007f30c48a5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 787.683489][T32146] RAX: ffffffffffffffda RBX: 00007f30c60a6180 RCX: 00007f30c5e7d5fc [ 787.683504][T32146] RDX: 000000000000000f RSI: 00007f30c48a50a0 RDI: 0000000000000006 [ 787.683520][T32146] RBP: 00007f30c48a5090 R08: 0000000000000000 R09: 0000000000000000 [ 787.683611][T32146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.683625][T32146] R13: 00007f30c60a6218 R14: 00007f30c60a6180 R15: 00007fffdf828488 [ 787.683649][T32146] [ 787.685503][T32144] loop9: detected capacity change from 0 to 512 [ 787.687249][T25175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.698695][T32144] EXT4-fs: Ignoring removed mblk_io_submit option [ 787.739640][T32148] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9494'. [ 787.742680][T32144] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 787.940300][T32144] EXT4-fs (loop9): 1 truncate cleaned up [ 787.946772][T32144] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 787.979630][T32151] FAULT_INJECTION: forcing a failure. [ 787.979630][T32151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.992892][T32151] CPU: 0 UID: 0 PID: 32151 Comm: syz.1.9493 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 787.992930][T32151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 787.992945][T32151] Call Trace: [ 787.993006][T32151] [ 787.993015][T32151] __dump_stack+0x1d/0x30 [ 787.993054][T32157] loop0: detected capacity change from 0 to 512 [ 787.993053][T32151] dump_stack_lvl+0xe8/0x140 [ 787.993080][T32151] dump_stack+0x15/0x1b [ 787.993175][T32151] should_fail_ex+0x265/0x280 [ 787.993207][T32151] should_fail+0xb/0x20 [ 787.993233][T32151] should_fail_usercopy+0x1a/0x20 [ 787.993267][T32151] _copy_to_user+0x20/0xa0 [ 787.993311][T32151] simple_read_from_buffer+0xb5/0x130 [ 787.993356][T32151] proc_fail_nth_read+0x10e/0x150 [ 787.993398][T32151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 787.993487][T32151] vfs_read+0x1a5/0x770 [ 787.993514][T32151] ? __rcu_read_unlock+0x4f/0x70 [ 787.993547][T32151] ? __fget_files+0x184/0x1c0 [ 787.993585][T32151] ksys_read+0xda/0x1a0 [ 787.993677][T32151] __x64_sys_read+0x40/0x50 [ 787.993708][T32151] x64_sys_call+0x27bc/0x2ff0 [ 787.993740][T32151] do_syscall_64+0xd2/0x200 [ 787.993789][T32151] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 787.993887][T32151] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 787.993924][T32151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.993954][T32151] RIP: 0033:0x7fd70403d5fc [ 787.993977][T32151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 787.994004][T32151] RSP: 002b:00007fd702a9f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 787.994100][T32151] RAX: ffffffffffffffda RBX: 00007fd704265fa0 RCX: 00007fd70403d5fc [ 787.994162][T32151] RDX: 000000000000000f RSI: 00007fd702a9f0a0 RDI: 000000000000000e [ 787.994180][T32151] RBP: 00007fd702a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 787.994198][T32151] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 787.994233][T32151] R13: 00007fd704266038 R14: 00007fd704265fa0 R15: 00007ffe395ad338 [ 787.994354][T32151] [ 788.205608][T25968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.277716][T32180] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9499'. [ 788.307312][T32157] netlink: 'syz.0.9496': attribute type 4 has an invalid length. [ 788.339348][T25298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.453192][T32209] loop3: detected capacity change from 0 to 512 [ 788.475933][T32209] ext4: Bad value for 'stripe' [ 788.540863][T32222] loop0: detected capacity change from 0 to 512 [ 788.557473][T32222] EXT4-fs: Ignoring removed mblk_io_submit option [ 788.565217][T32222] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 788.579153][T32222] EXT4-fs (loop0): 1 truncate cleaned up [ 788.585204][T32222] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.615672][T28730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 788.640104][T32234] loop0: detected capacity change from 0 to 1024 [ 788.675385][T32234] EXT4-fs: test_dummy_encryption option not supported [ 788.763100][T32244] loop0: detected capacity change from 0 to 128 [ 788.838975][T32261] IPVS: Error connecting to the multicast addr [ 788.902961][T32273] loop4: detected capacity change from 0 to 512 [ 788.910171][T32273] EXT4-fs: Ignoring removed mblk_io_submit option [ 788.917352][T32273] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 788.941849][T32273] EXT4-fs (loop4): 1 truncate cleaned up [ 788.948863][T32273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 788.990634][T25158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.055306][T32295] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 789.432857][T32330] loop3: detected capacity change from 0 to 128 [ 789.499471][T32330] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 789.548049][T32330] ext4 filesystem being mounted at /514/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.614203][T32335] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 789.876493][T32344] loop9: detected capacity change from 0 to 256 [ 789.883940][T32341] tipc: Enabled bearer , priority 0 [ 789.905504][T32340] tipc: Disabling bearer [ 790.019658][T32351] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 790.077217][T25298] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 790.113061][T32362] loop4: detected capacity change from 0 to 512 [ 790.134734][T32362] EXT4-fs: Ignoring removed mblk_io_submit option [ 790.150837][T32362] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 790.169650][T32366] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 790.171411][T32362] EXT4-fs (loop4): 1 truncate cleaned up [ 790.183426][T32362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.234355][T25158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.252113][T32376] IPVS: Error connecting to the multicast addr [ 790.287916][T32387] loop1: detected capacity change from 0 to 512 [ 790.296222][T32387] EXT4-fs: Ignoring removed mblk_io_submit option [ 790.303289][T32387] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 790.400449][T32402] SELinux: Context Ü is not valid (left unmapped). [ 790.404100][T32387] EXT4-fs (loop1): 1 truncate cleaned up [ 790.417533][T32387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.433753][T32402] wireguard0: entered promiscuous mode [ 790.439690][T32402] wireguard0: entered allmulticast mode [ 790.451141][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 790.451161][ T29] audit: type=1326 audit(1755175924.801:19397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 790.524799][T25175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 790.538292][ T29] audit: type=1326 audit(1755175924.801:19398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 790.562057][ T29] audit: type=1326 audit(1755175924.831:19399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 790.585982][ T29] audit: type=1326 audit(1755175924.831:19400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 790.609726][ T29] audit: type=1326 audit(1755175924.831:19401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 790.622640][T32410] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 790.633514][ T29] audit: type=1326 audit(1755175924.831:19402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 790.664856][ T29] audit: type=1326 audit(1755175924.831:19403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 790.688489][ T29] audit: type=1326 audit(1755175924.831:19404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 790.712110][ T29] audit: type=1326 audit(1755175924.831:19405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 790.735746][ T29] audit: type=1326 audit(1755175924.831:19406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32386 comm="syz.4.9539" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 790.885277][T32434] loop4: detected capacity change from 0 to 128 [ 790.894523][T32428] loop1: detected capacity change from 0 to 256 [ 790.901054][T32431] loop9: detected capacity change from 0 to 512 [ 791.015039][T32445] loop3: detected capacity change from 0 to 512 [ 791.022385][T32445] EXT4-fs: Ignoring removed mblk_io_submit option [ 791.029799][T32445] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 791.041392][T32434] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 791.054722][T32434] ext4 filesystem being mounted at /492/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.079655][T32445] EXT4-fs (loop3): 1 truncate cleaned up [ 791.085910][T32445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.120164][T32431] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 791.134298][T25298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.144313][T32431] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.160738][T32431] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 791.175775][T32431] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 791.188141][T32431] EXT4-fs (loop9): This should not happen!! Data will be lost [ 791.188141][T32431] [ 791.197816][T32431] EXT4-fs (loop9): Total free blocks count 0 [ 791.203816][T32431] EXT4-fs (loop9): Free/Dirty block details [ 791.209941][T32431] EXT4-fs (loop9): free_blocks=65280 [ 791.215299][T32431] EXT4-fs (loop9): dirty_blocks=1 [ 791.220455][T32431] EXT4-fs (loop9): Block reservation details [ 791.226471][T32431] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 791.264119][T25158] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 791.281800][T32452] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 791.310799][T32458] loop1: detected capacity change from 0 to 512 [ 791.317795][T32458] EXT4-fs: Ignoring removed mblk_io_submit option [ 791.331099][T32458] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 791.342626][T25968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.344417][T32461] loop3: detected capacity change from 0 to 512 [ 791.401244][T32461] EXT4-fs: Ignoring removed mblk_io_submit option [ 791.418597][T32461] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 791.428754][T32464] netlink: 'syz.4.9556': attribute type 1 has an invalid length. [ 791.430003][T32458] EXT4-fs (loop1): 1 truncate cleaned up [ 791.444512][T32470] __nla_validate_parse: 6 callbacks suppressed [ 791.444529][T32470] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9557'. [ 791.447339][T32458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.472847][T32461] EXT4-fs (loop3): 1 truncate cleaned up [ 791.479807][T32461] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.499149][T32464] 8021q: adding VLAN 0 to HW filter on device bond1 [ 791.519011][T32464] pim6reg: entered allmulticast mode [ 791.531617][T25175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.553031][T25298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.564556][T32464] pim6reg: left allmulticast mode [ 791.586060][T32479] loop3: detected capacity change from 0 to 256 [ 791.679998][T32492] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 791.810454][T32504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9569'. [ 791.819497][T32504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9569'. [ 791.836495][T32491] loop4: detected capacity change from 0 to 512 [ 791.843116][T32501] loop3: detected capacity change from 0 to 512 [ 791.851318][T32501] EXT4-fs: Ignoring removed mblk_io_submit option [ 791.858224][T32501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 791.870639][T32506] loop1: detected capacity change from 0 to 128 [ 791.879996][T32506] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 791.905440][T32506] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 791.921578][T32491] EXT4-fs (loop4): too many log groups per flexible block group [ 791.929562][T32491] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 791.938867][T32491] EXT4-fs (loop4): mount failed [ 791.956597][T32501] EXT4-fs (loop3): 1 truncate cleaned up [ 791.962769][T32501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.981324][T32491] netlink: 44 bytes leftover after parsing attributes in process `+}[@'. [ 791.992305][T32519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9573'. [ 791.993654][T32518] ip6erspan0: entered promiscuous mode [ 792.001288][T32519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9573'. [ 792.084471][T32523] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 792.096274][T32525] loop9: detected capacity change from 0 to 256 [ 792.106356][T32527] loop4: detected capacity change from 0 to 512 [ 792.143403][T32527] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 792.155809][T32534] IPVS: Error connecting to the multicast addr [ 792.164032][T32527] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.9578: corrupted in-inode xattr: overlapping e_value [ 792.182795][T32537] loop3: detected capacity change from 0 to 512 [ 792.189468][T32527] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.9578: couldn't read orphan inode 15 (err -117) [ 792.216931][T32537] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 792.227423][T32527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9578'. [ 792.236545][T32537] EXT4-fs (loop3): orphan cleanup on readonly fs [ 792.239579][T32544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9585'. [ 792.249362][T32537] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9582: Failed to acquire dquot type 1 [ 792.270736][T32546] loop9: detected capacity change from 0 to 128 [ 792.275597][T32537] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9582: bg 0: block 40: padding at end of block bitmap is not set [ 792.280938][T32527] program syz.4.9578 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 792.307194][T32548] loop1: detected capacity change from 0 to 512 [ 792.313878][T32548] EXT4-fs: Ignoring removed mblk_io_submit option [ 792.318513][T32537] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 792.321187][T32548] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 792.339594][T32537] EXT4-fs (loop3): 1 truncate cleaned up [ 792.347670][T32546] ext4 filesystem being mounted at /393/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.362231][T32548] EXT4-fs (loop1): 1 truncate cleaned up [ 792.435049][T32560] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 792.470496][T32562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9592'. [ 792.515556][T32566] loop9: detected capacity change from 0 to 256 [ 792.529198][T32568] loop1: detected capacity change from 0 to 512 [ 792.548462][T32568] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 792.563224][T32568] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 792.578630][T32568] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 792.590881][T32568] EXT4-fs (loop1): This should not happen!! Data will be lost [ 792.590881][T32568] [ 792.600613][T32568] EXT4-fs (loop1): Total free blocks count 0 [ 792.606681][T32568] EXT4-fs (loop1): Free/Dirty block details [ 792.612696][T32568] EXT4-fs (loop1): free_blocks=65280 [ 792.618061][T32568] EXT4-fs (loop1): dirty_blocks=1 [ 792.623245][T32568] EXT4-fs (loop1): Block reservation details [ 792.629332][T32568] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 792.695127][T32579] FAULT_INJECTION: forcing a failure. [ 792.695127][T32579] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.708289][T32579] CPU: 0 UID: 0 PID: 32579 Comm: syz.1.9597 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 792.708379][T32579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 792.708396][T32579] Call Trace: [ 792.708430][T32579] [ 792.708441][T32579] __dump_stack+0x1d/0x30 [ 792.708466][T32579] dump_stack_lvl+0xe8/0x140 [ 792.708491][T32579] dump_stack+0x15/0x1b [ 792.708511][T32579] should_fail_ex+0x265/0x280 [ 792.708539][T32579] should_fail+0xb/0x20 [ 792.708571][T32579] should_fail_usercopy+0x1a/0x20 [ 792.708644][T32579] _copy_from_user+0x1c/0xb0 [ 792.708678][T32579] __sys_bpf+0x178/0x7b0 [ 792.708766][T32579] __x64_sys_bpf+0x41/0x50 [ 792.708801][T32579] x64_sys_call+0x2aea/0x2ff0 [ 792.708830][T32579] do_syscall_64+0xd2/0x200 [ 792.708906][T32579] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 792.708940][T32579] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 792.708971][T32579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.709000][T32579] RIP: 0033:0x7fd70403ebe9 [ 792.709019][T32579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 792.709081][T32579] RSP: 002b:00007fd702a9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 792.709106][T32579] RAX: ffffffffffffffda RBX: 00007fd704265fa0 RCX: 00007fd70403ebe9 [ 792.709121][T32579] RDX: 0000000000000020 RSI: 0000200000000040 RDI: 0000000000000008 [ 792.709150][T32579] RBP: 00007fd702a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 792.709166][T32579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.709183][T32579] R13: 00007fd704266038 R14: 00007fd704265fa0 R15: 00007ffe395ad338 [ 792.709274][T32579] [ 792.904653][T32582] netlink: 'syz.4.9599': attribute type 3 has an invalid length. [ 792.923847][T32586] loop1: detected capacity change from 0 to 512 [ 792.930695][T32586] EXT4-fs: Ignoring removed mblk_io_submit option [ 792.937765][T32586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 792.966001][T32586] EXT4-fs (loop1): 1 truncate cleaned up [ 792.974923][T32592] loop4: detected capacity change from 0 to 128 [ 792.987438][T32590] loop9: detected capacity change from 0 to 512 [ 793.003388][T32590] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 793.017542][T32590] EXT4-fs (loop9): orphan cleanup on readonly fs [ 793.024363][T32590] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.9602: Failed to acquire dquot type 1 [ 793.035885][T32592] ext4 filesystem being mounted at /500/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.055472][T32590] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9602: bg 0: block 40: padding at end of block bitmap is not set [ 793.082283][T32601] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9605'. [ 793.093306][T32590] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 793.103032][T32590] EXT4-fs (loop9): 1 truncate cleaned up [ 793.140034][T32606] loop4: detected capacity change from 0 to 256 [ 793.161013][T32610] loop3: detected capacity change from 0 to 512 [ 793.186056][T32610] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.303683][T32610] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 793.321593][T32633] loop0: detected capacity change from 0 to 512 [ 793.352229][T32620] loop9: detected capacity change from 0 to 128 [ 793.359604][T32633] ext4: Bad value for 'commit' [ 793.364571][T32610] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 793.376883][T32610] EXT4-fs (loop3): This should not happen!! Data will be lost [ 793.376883][T32610] [ 793.386533][T32610] EXT4-fs (loop3): Total free blocks count 0 [ 793.392842][T32610] EXT4-fs (loop3): Free/Dirty block details [ 793.398804][T32610] EXT4-fs (loop3): free_blocks=65280 [ 793.404215][T32610] EXT4-fs (loop3): dirty_blocks=1 [ 793.409406][T32610] EXT4-fs (loop3): Block reservation details [ 793.415421][T32610] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 793.472476][T32657] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 793.678201][T32682] IPVS: Error connecting to the multicast addr [ 793.900530][T32711] loop0: detected capacity change from 0 to 1024 [ 793.922383][T32711] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 793.932285][T32711] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 793.943727][T32711] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 793.953622][T32711] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 793.962498][T32711] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 794.114370][T32729] tbf_change: 2 callbacks suppressed [ 794.114434][T32729] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 794.226336][T32739] loop1: detected capacity change from 0 to 1024 [ 794.241179][T32739] EXT4-fs: Ignoring removed orlov option [ 794.247010][T32739] EXT4-fs: Ignoring removed mblk_io_submit option [ 794.256252][T32739] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 794.295008][T32743] wireguard1: entered promiscuous mode [ 794.300687][T32743] wireguard1: entered allmulticast mode [ 794.672435][ T320] loop9: detected capacity change from 0 to 512 [ 794.889211][ T320] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 794.971169][ T320] EXT4-fs (loop9): orphan cleanup on readonly fs [ 795.020638][ T320] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.9647: Failed to acquire dquot type 1 [ 795.037591][ T334] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 795.095790][ T320] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9647: bg 0: block 40: padding at end of block bitmap is not set [ 795.258817][ T320] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 795.284920][ T320] EXT4-fs (loop9): 1 truncate cleaned up [ 795.348489][ T343] loop0: detected capacity change from 0 to 1024 [ 795.367623][ T345] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 795.380632][ T343] EXT4-fs: test_dummy_encryption option not supported [ 795.713214][ T355] loop1: detected capacity change from 0 to 128 [ 795.724907][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 795.724924][ T29] audit: type=1326 audit(1755175930.071:19574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb8e4ebe9 code=0x7ffc0000 [ 795.754723][ T29] audit: type=1326 audit(1755175930.071:19575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb8e4ebe9 code=0x7ffc0000 [ 795.842100][ T29] audit: type=1326 audit(1755175930.131:19576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fceb8e4ebe9 code=0x7ffc0000 [ 795.865825][ T29] audit: type=1326 audit(1755175930.131:19577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb8e4ebe9 code=0x7ffc0000 [ 795.889445][ T29] audit: type=1326 audit(1755175930.131:19578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb8e4ebe9 code=0x7ffc0000 [ 795.913197][ T29] audit: type=1326 audit(1755175930.131:19579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb8e4ebe9 code=0x7ffc0000 [ 795.919149][ T365] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 795.936862][ T29] audit: type=1326 audit(1755175930.131:19580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb8e4ebe9 code=0x7ffc0000 [ 795.967712][ T29] audit: type=1326 audit(1755175930.131:19581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fceb8e4ebe9 code=0x7ffc0000 [ 795.991279][ T29] audit: type=1326 audit(1755175930.131:19582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb8e4ebe9 code=0x7ffc0000 [ 796.014811][ T29] audit: type=1326 audit(1755175930.131:19583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=357 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceb8e4ebe9 code=0x7ffc0000 [ 796.127782][ T369] loop4: detected capacity change from 0 to 512 [ 796.208047][ T369] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 796.222083][ T369] EXT4-fs (loop4): orphan cleanup on readonly fs [ 796.235535][ T369] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9661: Failed to acquire dquot type 1 [ 796.237562][ T378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 796.250230][ T376] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 796.255607][ T378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 796.308875][ T369] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9661: bg 0: block 40: padding at end of block bitmap is not set [ 796.342826][ T369] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 796.352756][ T369] EXT4-fs (loop4): 1 truncate cleaned up [ 796.365672][ T378] loop1: detected capacity change from 0 to 8192 [ 796.373049][ T382] loop0: detected capacity change from 0 to 512 [ 796.380028][ T382] EXT4-fs: Ignoring removed mblk_io_submit option [ 796.387689][ T382] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 796.431431][ T382] EXT4-fs (loop0): 1 truncate cleaned up [ 796.564993][ T395] loop0: detected capacity change from 0 to 512 [ 796.573953][ T395] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 796.584021][ T395] EXT4-fs (loop0): orphan cleanup on readonly fs [ 796.596700][ T395] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.9670: Failed to acquire dquot type 1 [ 796.611420][ T402] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 796.619209][ T395] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9670: bg 0: block 40: padding at end of block bitmap is not set [ 796.634709][ T395] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 796.645165][ T395] EXT4-fs (loop0): 1 truncate cleaned up [ 796.671744][ T395] __nla_validate_parse: 9 callbacks suppressed [ 796.671759][ T395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9670'. [ 796.706476][ T408] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9674'. [ 796.715839][ T407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9673'. [ 796.771914][ T413] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 796.794434][ T412] loop0: detected capacity change from 0 to 512 [ 796.812110][ T418] loop4: detected capacity change from 0 to 256 [ 796.823123][ T418] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9677'. [ 796.845980][ T412] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 796.862714][ T412] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 796.877885][ T412] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 796.890157][ T412] EXT4-fs (loop0): This should not happen!! Data will be lost [ 796.890157][ T412] [ 796.899907][ T412] EXT4-fs (loop0): Total free blocks count 0 [ 796.905950][ T412] EXT4-fs (loop0): Free/Dirty block details [ 796.911955][ T412] EXT4-fs (loop0): free_blocks=65280 [ 796.917509][ T412] EXT4-fs (loop0): dirty_blocks=1 [ 796.922569][ T412] EXT4-fs (loop0): Block reservation details [ 796.928609][ T412] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 796.974955][ T423] loop4: detected capacity change from 0 to 512 [ 796.983343][ T423] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 796.991524][ T423] EXT4-fs (loop4): orphan cleanup on readonly fs [ 796.998385][ T423] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9679: Failed to acquire dquot type 1 [ 797.025036][ T423] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9679: bg 0: block 40: padding at end of block bitmap is not set [ 797.042225][ T423] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 797.051323][ T427] loop0: detected capacity change from 0 to 512 [ 797.056846][ T423] EXT4-fs (loop4): 1 truncate cleaned up [ 797.058175][ T427] EXT4-fs: Ignoring removed mblk_io_submit option [ 797.070698][ T427] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 797.081265][ T423] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9679'. [ 797.108377][ T430] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9682'. [ 797.123791][ T427] EXT4-fs (loop0): 1 truncate cleaned up [ 797.213612][ T442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9686'. [ 797.281036][ T448] loop0: detected capacity change from 0 to 256 [ 797.302150][ T450] netlink: 'syz.9.9690': attribute type 12 has an invalid length. [ 797.329630][ T452] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 797.340890][ T448] netlink: 244 bytes leftover after parsing attributes in process `syz.0.9689'. [ 797.424122][ T459] loop0: detected capacity change from 0 to 512 [ 797.433906][ T459] EXT4-fs: Ignoring removed mblk_io_submit option [ 797.452681][ T464] loop3: detected capacity change from 0 to 128 [ 797.460255][ T459] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 797.472524][ T459] EXT4-fs (loop0): 1 truncate cleaned up [ 797.539784][ T461] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9695'. [ 797.599100][ T477] loop3: detected capacity change from 0 to 1024 [ 797.605908][ T477] EXT4-fs: test_dummy_encryption option not supported [ 797.631917][ T478] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9699'. [ 797.659478][ T482] loop0: detected capacity change from 0 to 128 [ 797.675381][ T482] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 797.677068][ T487] loop9: detected capacity change from 0 to 256 [ 797.705704][ T490] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 797.877699][ T514] tipc: Enabled bearer , priority 0 [ 797.895679][ T513] tipc: Resetting bearer [ 797.939264][ T520] loop3: detected capacity change from 0 to 512 [ 797.952759][ T520] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 797.958767][ T513] tipc: Disabling bearer [ 797.961683][ T520] EXT4-fs (loop3): orphan cleanup on readonly fs [ 797.974217][ T520] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9712: Failed to acquire dquot type 1 [ 797.986317][ T520] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9712: bg 0: block 40: padding at end of block bitmap is not set [ 798.007108][ T520] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 798.018894][ T520] EXT4-fs (loop3): 1 truncate cleaned up [ 798.135458][ T540] loop3: detected capacity change from 0 to 512 [ 798.143596][ T540] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 798.153481][ T540] EXT4-fs (loop3): orphan cleanup on readonly fs [ 798.176199][ T540] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9715: Failed to acquire dquot type 1 [ 798.201166][ T540] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9715: bg 0: block 40: padding at end of block bitmap is not set [ 798.228406][ T540] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 798.244157][ T540] EXT4-fs (loop3): 1 truncate cleaned up [ 798.285332][ T553] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 798.470715][ T575] loop3: detected capacity change from 0 to 256 [ 798.821261][ T594] tipc: Enabled bearer , priority 0 [ 798.857322][ T592] tipc: Resetting bearer [ 798.913648][ T592] tipc: Disabling bearer [ 799.371338][ T614] loop0: detected capacity change from 0 to 512 [ 799.424627][ T618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.434497][ T614] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 799.442818][ T614] EXT4-fs (loop0): orphan cleanup on readonly fs [ 799.454418][ T622] loop3: detected capacity change from 0 to 256 [ 799.457088][ T618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.461213][ T614] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.9731: Failed to acquire dquot type 1 [ 799.486860][ T614] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9731: bg 0: block 40: padding at end of block bitmap is not set [ 799.508728][ T614] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 799.518469][ T614] EXT4-fs (loop0): 1 truncate cleaned up [ 799.609867][ T618] loop1: detected capacity change from 0 to 8192 [ 799.760959][ T648] tbf_change: 1 callbacks suppressed [ 799.760979][ T648] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 799.776237][ T643] tipc: Enabled bearer , priority 0 [ 799.783892][ T642] tipc: Resetting bearer [ 799.800029][ T642] tipc: Disabling bearer [ 800.111550][ T687] netlink: 'syz.3.9746': attribute type 12 has an invalid length. [ 800.167829][ T693] loop9: detected capacity change from 0 to 256 [ 800.465534][ T716] loop4: detected capacity change from 0 to 1024 [ 800.501633][ T716] EXT4-fs: Ignoring removed orlov option [ 800.507414][ T716] EXT4-fs: Ignoring removed mblk_io_submit option [ 800.533958][ T716] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 800.546554][ T720] tipc: Enabled bearer , priority 0 [ 800.555509][ T719] tipc: Resetting bearer [ 800.580155][ T719] tipc: Disabling bearer [ 800.739716][ T729] loop0: detected capacity change from 0 to 512 [ 800.775666][ T729] EXT4-fs: Ignoring removed mblk_io_submit option [ 800.784893][ T729] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 800.836837][ T736] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 800.849312][ T735] loop3: detected capacity change from 0 to 512 [ 800.881019][ T729] EXT4-fs (loop0): 1 truncate cleaned up [ 800.965177][ T741] loop9: detected capacity change from 0 to 256 [ 800.972295][ T735] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 800.980455][ T735] EXT4-fs (loop3): orphan cleanup on readonly fs [ 801.006267][ T735] __quota_error: 201 callbacks suppressed [ 801.006287][ T735] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 801.021092][ T735] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 801.030928][ T735] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9758: Failed to acquire dquot type 1 [ 801.058769][ T29] audit: type=1326 audit(1755175935.401:19773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.4.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 801.082332][ T29] audit: type=1326 audit(1755175935.401:19774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.4.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 801.105796][ T29] audit: type=1326 audit(1755175935.401:19775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.4.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 801.129228][ T29] audit: type=1326 audit(1755175935.401:19776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.4.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 801.130295][ T735] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9758: bg 0: block 40: padding at end of block bitmap is not set [ 801.152686][ T29] audit: type=1326 audit(1755175935.401:19777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.4.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 801.190379][ T29] audit: type=1326 audit(1755175935.401:19778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.4.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 801.214071][ T29] audit: type=1326 audit(1755175935.401:19779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.4.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 801.224008][ T735] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 801.237618][ T29] audit: type=1326 audit(1755175935.401:19780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=737 comm="syz.4.9759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 801.270494][ T735] EXT4-fs (loop3): 1 truncate cleaned up [ 801.435053][ T750] loop4: detected capacity change from 0 to 128 [ 801.489746][ T754] tipc: Enabled bearer , priority 0 [ 801.545992][ T763] tipc: Enabled bearer , priority 0 [ 801.598065][ T753] tipc: Resetting bearer [ 801.623668][ T753] tipc: Disabling bearer [ 801.635461][ T761] tipc: Resetting bearer [ 801.650501][ T761] tipc: Disabling bearer [ 801.667397][ T769] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 801.709547][ T772] loop9: detected capacity change from 0 to 512 [ 801.725334][ T772] EXT4-fs: Ignoring removed mblk_io_submit option [ 801.759566][ T772] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 801.897461][ T772] EXT4-fs (loop9): 1 truncate cleaned up [ 802.042611][ T790] loop4: detected capacity change from 0 to 256 [ 802.069437][ T790] __nla_validate_parse: 15 callbacks suppressed [ 802.069456][ T790] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9775'. [ 802.105236][ T795] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9776'. [ 802.448890][ T828] loop4: detected capacity change from 0 to 512 [ 802.468292][ T828] EXT4-fs: Ignoring removed mblk_io_submit option [ 802.484302][ T828] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 802.507127][ T828] EXT4-fs (loop4): 1 truncate cleaned up [ 802.567776][ T843] loop4: detected capacity change from 0 to 256 [ 802.597947][ T843] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9787'. [ 802.639546][ T852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9789'. [ 803.024587][ T883] loop3: detected capacity change from 0 to 256 [ 803.049304][ T883] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9801'. [ 803.105968][ T895] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9803'. [ 803.273441][ T914] netlink: 'syz.3.9807': attribute type 12 has an invalid length. [ 803.798654][ T947] loop1: detected capacity change from 0 to 256 [ 804.334116][ T947] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9814'. [ 804.521298][ T950] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 804.612473][ T954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9816'. [ 804.701203][ T956] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9817'. [ 804.737521][ T965] wireguard0: entered promiscuous mode [ 804.743157][ T965] wireguard0: entered allmulticast mode [ 804.809741][ T969] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9821'. [ 805.051441][ T978] FAULT_INJECTION: forcing a failure. [ 805.051441][ T978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 805.064781][ T978] CPU: 0 UID: 0 PID: 978 Comm: syz.1.9825 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 805.064817][ T978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 805.064835][ T978] Call Trace: [ 805.064844][ T978] [ 805.064877][ T978] __dump_stack+0x1d/0x30 [ 805.064905][ T978] dump_stack_lvl+0xe8/0x140 [ 805.064931][ T978] dump_stack+0x15/0x1b [ 805.065019][ T978] should_fail_ex+0x265/0x280 [ 805.065047][ T978] should_fail+0xb/0x20 [ 805.065071][ T978] should_fail_usercopy+0x1a/0x20 [ 805.065099][ T978] _copy_from_user+0x1c/0xb0 [ 805.065128][ T978] ___sys_sendmsg+0xc1/0x1d0 [ 805.065219][ T978] __x64_sys_sendmsg+0xd4/0x160 [ 805.065262][ T978] x64_sys_call+0x191e/0x2ff0 [ 805.065292][ T978] do_syscall_64+0xd2/0x200 [ 805.065376][ T978] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 805.065402][ T978] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 805.065435][ T978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.065541][ T978] RIP: 0033:0x7fd70403ebe9 [ 805.065638][ T978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 805.065664][ T978] RSP: 002b:00007fd702a9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.065688][ T978] RAX: ffffffffffffffda RBX: 00007fd704265fa0 RCX: 00007fd70403ebe9 [ 805.065804][ T978] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 805.065820][ T978] RBP: 00007fd702a9f090 R08: 0000000000000000 R09: 0000000000000000 [ 805.065837][ T978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.065853][ T978] R13: 00007fd704266038 R14: 00007fd704265fa0 R15: 00007ffe395ad338 [ 805.065872][ T978] [ 805.278936][ T984] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 805.376571][ T990] loop1: detected capacity change from 0 to 512 [ 805.387313][ T987] loop3: detected capacity change from 0 to 128 [ 805.397475][ T990] EXT4-fs: Ignoring removed mblk_io_submit option [ 805.415764][ T990] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 805.436053][ T990] EXT4-fs (loop1): 1 truncate cleaned up [ 805.523349][ T1000] loop1: detected capacity change from 0 to 512 [ 805.531544][ T1000] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 805.540014][ T1000] EXT4-fs (loop1): orphan cleanup on readonly fs [ 805.547046][ T1000] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.9834: Failed to acquire dquot type 1 [ 805.559110][ T1000] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9834: bg 0: block 40: padding at end of block bitmap is not set [ 805.573651][ T1000] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 805.573914][ T1000] EXT4-fs (loop1): 1 truncate cleaned up [ 805.782086][ T1011] loop3: detected capacity change from 0 to 128 [ 806.007102][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 806.007121][ T29] audit: type=1326 audit(1755175940.361:19958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 806.214634][ T29] audit: type=1326 audit(1755175940.391:19959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 806.238365][ T29] audit: type=1326 audit(1755175940.391:19960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 806.261907][ T29] audit: type=1326 audit(1755175940.391:19961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 806.285471][ T29] audit: type=1326 audit(1755175940.391:19962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 806.309121][ T29] audit: type=1326 audit(1755175940.401:19963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 806.309204][ T29] audit: type=1326 audit(1755175940.401:19964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 806.309235][ T29] audit: type=1326 audit(1755175940.401:19965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 806.309305][ T29] audit: type=1326 audit(1755175940.401:19966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 806.309339][ T29] audit: type=1326 audit(1755175940.401:19967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1018 comm="syz.4.9839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 806.337329][ T1026] loop4: detected capacity change from 0 to 512 [ 806.337755][ T1026] EXT4-fs: Ignoring removed mblk_io_submit option [ 806.341216][ T1026] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 806.343519][ T1026] EXT4-fs (loop4): 1 truncate cleaned up [ 806.620030][ T1041] wireguard1: entered promiscuous mode [ 806.625568][ T1041] wireguard1: entered allmulticast mode [ 806.677169][ T1022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.685768][ T1022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.729339][ T1049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.739045][ T1049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.844434][ T1049] loop0: detected capacity change from 0 to 8192 [ 807.065167][ T1057] netlink: 'syz.3.9856': attribute type 12 has an invalid length. [ 807.121504][ T1061] loop3: detected capacity change from 0 to 512 [ 807.130399][ T1061] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 807.138632][ T1061] EXT4-fs (loop3): orphan cleanup on readonly fs [ 807.145520][ T1061] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.9858: Failed to acquire dquot type 1 [ 807.158420][ T1061] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9858: bg 0: block 40: padding at end of block bitmap is not set [ 807.173035][ T1061] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 807.183190][ T1061] EXT4-fs (loop3): 1 truncate cleaned up [ 807.252504][ T1070] loop9: detected capacity change from 0 to 512 [ 807.260016][ T1070] EXT4-fs: Ignoring removed mblk_io_submit option [ 807.267030][ T1070] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 807.278658][ T1070] EXT4-fs (loop9): 1 truncate cleaned up [ 807.805922][ T1081] loop0: detected capacity change from 0 to 1024 [ 807.850466][ T1081] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 807.861654][ T1081] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 807.888984][ T1081] JBD2: no valid journal superblock found [ 807.894767][ T1081] EXT4-fs (loop0): Could not load journal inode [ 807.979351][ T1091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.988079][ T1091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 808.035572][ T1091] loop4: detected capacity change from 0 to 8192 [ 808.131855][ T1096] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 808.170579][ T1094] loop0: detected capacity change from 0 to 512 [ 808.184129][ T1094] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 808.192416][ T1094] EXT4-fs (loop0): orphan cleanup on readonly fs [ 808.199419][ T1094] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.9870: Failed to acquire dquot type 1 [ 808.211554][ T1094] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9870: bg 0: block 40: padding at end of block bitmap is not set [ 808.226465][ T1094] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 808.235907][ T1094] EXT4-fs (loop0): 1 truncate cleaned up [ 808.243656][ T1094] EXT4-fs mount: 66 callbacks suppressed [ 808.243677][ T1094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 808.288203][ T1094] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.351189][ T1107] loop3: detected capacity change from 0 to 256 [ 808.371296][ T1107] netlink: 'syz.3.9875': attribute type 1 has an invalid length. [ 808.379288][ T1107] __nla_validate_parse: 8 callbacks suppressed [ 808.379304][ T1107] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9875'. [ 808.735755][ T1121] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 808.744820][ T1119] loop3: detected capacity change from 0 to 512 [ 808.760360][ T1119] EXT4-fs: Ignoring removed mblk_io_submit option [ 808.761117][ T1117] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9879'. [ 808.769265][ T1119] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 808.796864][ T1124] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9881'. [ 808.876961][ T1119] EXT4-fs (loop3): 1 truncate cleaned up [ 808.920646][ T1132] loop9: detected capacity change from 0 to 512 [ 808.943753][ T1119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.960155][ T1133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9884'. [ 808.977754][ T1132] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 808.986003][ T1132] EXT4-fs (loop9): orphan cleanup on readonly fs [ 808.996905][ T1132] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.9885: Failed to acquire dquot type 1 [ 809.008841][ T1132] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9885: bg 0: block 40: padding at end of block bitmap is not set [ 809.023367][ T1132] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 809.046571][ T1132] EXT4-fs (loop9): 1 truncate cleaned up [ 809.053062][T25298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.053283][ T1132] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 809.079593][ T1139] loop0: detected capacity change from 0 to 512 [ 809.114585][ T1132] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.127764][ T1141] loop1: detected capacity change from 0 to 512 [ 809.138969][ T1141] EXT4-fs: journaled quota format not specified [ 809.148255][ T1139] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 809.157489][ T1139] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 809.171640][ T1139] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 809.172304][ T1141] loop1: detected capacity change from 0 to 512 [ 809.188102][ T1139] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 809.196204][ T1139] System zones: 0-2, 18-18, 34-35 [ 809.202129][ T1139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.208137][ T1141] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 809.254309][ T1152] loop9: detected capacity change from 0 to 128 [ 809.265830][ T1141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.280049][T28730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.290337][ T1141] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 809.339956][ T1154] wireguard2: entered promiscuous mode [ 809.345506][ T1154] wireguard2: entered allmulticast mode [ 809.409239][ T1141] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 809.431781][ T1141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 809.443162][ T1141] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 809.457776][ T1141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 809.467922][ T1141] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm +}[@: corrupted xattr block 19: overlapping e_value [ 809.482325][ T1141] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 809.483073][ T1169] tipc: Enabling of bearer rejected, failed to enable media [ 809.574627][T25175] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.685878][ T1176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9898'. [ 810.248238][ T1203] loop3: detected capacity change from 0 to 512 [ 810.255151][ T1203] EXT4-fs: Ignoring removed mblk_io_submit option [ 810.263055][ T1203] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 810.301474][ T1203] EXT4-fs (loop3): 1 truncate cleaned up [ 810.313085][ T1203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 810.341506][T25298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.373114][ T1205] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9912'. [ 810.421605][ T1214] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 810.431093][ T1217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.485294][ T1221] wireguard0: entered promiscuous mode [ 810.490881][ T1221] wireguard0: entered allmulticast mode [ 810.505591][ T1214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9916'. [ 810.550602][ T1217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.787167][ T1232] loop1: detected capacity change from 0 to 8192 [ 810.929307][ T1246] loop0: detected capacity change from 0 to 512 [ 810.936320][ T1246] EXT4-fs: Ignoring removed mblk_io_submit option [ 810.944238][ T1246] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 810.970641][ T1246] EXT4-fs (loop0): 1 truncate cleaned up [ 810.977434][ T1246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.258942][T28730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.428556][ T1270] loop0: detected capacity change from 0 to 1024 [ 811.435712][ T1270] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 811.446709][ T1270] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 811.465493][ T1270] JBD2: no valid journal superblock found [ 811.471369][ T1270] EXT4-fs (loop0): Could not load journal inode [ 811.567306][ T1283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9931'. [ 811.568336][ T1262] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9927'. [ 811.598198][ T1288] loop0: detected capacity change from 0 to 512 [ 811.604817][ T1288] EXT4-fs: Ignoring removed mblk_io_submit option [ 811.619291][ T1238] chnl_net:caif_netlink_parms(): no params data found [ 811.770061][ T1288] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 811.783529][ T1288] EXT4-fs (loop0): 1 truncate cleaned up [ 811.802305][ T1288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.248443][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.255642][ T1238] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.258326][T28730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.272957][ T1238] bridge_slave_0: entered allmulticast mode [ 812.280316][ T1238] bridge_slave_0: entered promiscuous mode [ 812.289884][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.297191][ T1238] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.304590][ T1238] bridge_slave_1: entered allmulticast mode [ 812.311150][ T1238] bridge_slave_1: entered promiscuous mode [ 812.319299][ T1306] FAULT_INJECTION: forcing a failure. [ 812.319299][ T1306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.332487][ T1306] CPU: 0 UID: 0 PID: 1306 Comm: syz.0.9935 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 812.332517][ T1306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 812.332605][ T1306] Call Trace: [ 812.332612][ T1306] [ 812.332621][ T1306] __dump_stack+0x1d/0x30 [ 812.332650][ T1306] dump_stack_lvl+0xe8/0x140 [ 812.332733][ T1306] dump_stack+0x15/0x1b [ 812.332756][ T1306] should_fail_ex+0x265/0x280 [ 812.332778][ T1306] should_fail+0xb/0x20 [ 812.332800][ T1306] should_fail_usercopy+0x1a/0x20 [ 812.332852][ T1306] _copy_from_user+0x1c/0xb0 [ 812.332953][ T1306] ___sys_sendmsg+0xc1/0x1d0 [ 812.332998][ T1306] __x64_sys_sendmsg+0xd4/0x160 [ 812.333031][ T1306] x64_sys_call+0x191e/0x2ff0 [ 812.333053][ T1306] do_syscall_64+0xd2/0x200 [ 812.333080][ T1306] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 812.333141][ T1306] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 812.333220][ T1306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.333248][ T1306] RIP: 0033:0x7f30c5e7ebe9 [ 812.333264][ T1306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 812.333282][ T1306] RSP: 002b:00007f30c48e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.333301][ T1306] RAX: ffffffffffffffda RBX: 00007f30c60a5fa0 RCX: 00007f30c5e7ebe9 [ 812.333316][ T1306] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 812.333362][ T1306] RBP: 00007f30c48e7090 R08: 0000000000000000 R09: 0000000000000000 [ 812.333436][ T1306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.333453][ T1306] R13: 00007f30c60a6038 R14: 00007f30c60a5fa0 R15: 00007fffdf828488 [ 812.333478][ T1306] [ 812.511781][ T1238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.579278][ T1308] loop9: detected capacity change from 0 to 512 [ 812.587859][ T1238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.597454][ T1308] EXT4-fs: Ignoring removed mblk_io_submit option [ 812.615545][ T1308] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 812.629625][ T1238] team0: Port device team_slave_0 added [ 812.636311][ T1238] team0: Port device team_slave_1 added [ 812.641964][ T1314] loop0: detected capacity change from 0 to 256 [ 812.651908][ T1308] EXT4-fs (loop9): 1 truncate cleaned up [ 812.660530][ T1308] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.692327][T25968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 812.738581][ T1238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.745605][ T1238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.771777][ T1238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.784916][ T1318] tipc: Enabled bearer , priority 0 [ 812.792009][ T1314] netlink: 'syz.0.9940': attribute type 1 has an invalid length. [ 812.793097][ T1238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.799986][ T1314] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9940'. [ 812.806906][ T1238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 812.842038][ T1238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.868350][ T1316] tipc: Resetting bearer [ 812.887560][ T1316] tipc: Disabling bearer [ 812.930787][ T1327] loop0: detected capacity change from 0 to 512 [ 812.935795][ T1238] hsr_slave_0: entered promiscuous mode [ 812.937710][ T1327] EXT4-fs: Ignoring removed mblk_io_submit option [ 812.943958][ T1238] hsr_slave_1: entered promiscuous mode [ 812.950087][ T1327] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 812.969537][ T1327] EXT4-fs (loop0): 1 truncate cleaned up [ 812.981520][ T1327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.071837][T28730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.173911][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 813.173930][ T29] audit: type=1400 audit(1755175947.521:20124): avc: denied { append } for pid=1342 comm="syz.0.9950" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 813.208907][ T29] audit: type=1400 audit(1755175947.561:20125): avc: denied { create } for pid=1342 comm="syz.0.9950" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 813.249407][ T1346] loop4: detected capacity change from 0 to 512 [ 813.274583][ T1346] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 813.283011][ T1346] EXT4-fs (loop4): orphan cleanup on readonly fs [ 813.290491][ T1346] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated! [ 813.299553][ T1346] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota [ 813.309347][ T1346] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9951: Failed to acquire dquot type 1 [ 813.321305][ T1346] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9951: bg 0: block 40: padding at end of block bitmap is not set [ 813.468830][ T1346] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 813.498413][ T1346] EXT4-fs (loop4): 1 truncate cleaned up [ 813.588738][ T1238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 813.600344][ T1346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 813.624772][ T1238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 813.636395][ T1238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 813.693513][ T1238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 813.872405][T25158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.874745][ T1238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.906234][ T1362] tipc: Enabled bearer , priority 0 [ 813.906390][ T1364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.917649][ T1238] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.924770][ T1364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.940498][T24827] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.947695][T24827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.958450][T24827] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.965648][T24827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.993327][ T1364] loop4: detected capacity change from 0 to 8192 [ 814.008760][ T1238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 814.019304][ T1238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 814.042154][ T29] audit: type=1400 audit(1755175948.361:20126): avc: denied { egress } for pid=3396 comm="kworker/0:3" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 814.064767][ T29] audit: type=1400 audit(1755175948.361:20127): avc: denied { sendto } for pid=3396 comm="kworker/0:3" daddr=ff02::16 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 814.095300][ T1361] tipc: Resetting bearer [ 814.118094][ T1361] tipc: Disabling bearer [ 814.128143][ T1371] loop0: detected capacity change from 0 to 512 [ 814.144348][ T1371] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 814.153851][ T1371] EXT4-fs (loop0): orphan cleanup on readonly fs [ 814.161328][ T1371] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 814.163790][ T1238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 814.170512][ T1371] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 814.170537][ T1371] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.9957: Failed to acquire dquot type 1 [ 814.172885][ T1371] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9957: bg 0: block 40: padding at end of block bitmap is not set [ 814.215818][ T1371] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 814.225058][ T1371] EXT4-fs (loop0): 1 truncate cleaned up [ 814.232265][ T1371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 814.266763][ T1238] veth0_vlan: entered promiscuous mode [ 814.277315][ T1238] veth1_vlan: entered promiscuous mode [ 814.302121][ T1238] veth0_macvtap: entered promiscuous mode [ 814.313381][ T1238] veth1_macvtap: entered promiscuous mode [ 814.326210][ T1238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.336559][ T1238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.353814][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.367490][ T1371] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.379876][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.396497][ T29] audit: type=1400 audit(1755175948.741:20128): avc: denied { mounton } for pid=1238 comm="syz-executor" path="/root/syzkaller.FHW64n/syz-tmp" dev="sda1" ino=2097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 814.421185][ T29] audit: type=1400 audit(1755175948.741:20129): avc: denied { mount } for pid=1238 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 814.451681][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.465754][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.502196][ T1390] netlink: 268 bytes leftover after parsing attributes in process `syz.9.9961'. [ 814.568847][ T1407] loop0: detected capacity change from 0 to 1024 [ 814.577562][ T1407] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 814.588681][ T1407] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 814.600868][ T1407] JBD2: no valid journal superblock found [ 814.603189][ T1403] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9964'. [ 814.606726][ T1407] EXT4-fs (loop0): Could not load journal inode [ 814.655976][ T1416] loop9: detected capacity change from 0 to 128 [ 814.690713][ T1420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9968'. [ 814.701253][ T1416] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 814.722005][ T1416] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 814.753246][ T1428] loop4: detected capacity change from 0 to 1024 [ 814.765512][ T1428] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 814.776702][ T1428] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 814.787439][T25968] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 814.797906][ T1428] JBD2: no valid journal superblock found [ 814.803662][ T1428] EXT4-fs (loop4): Could not load journal inode [ 814.825581][ T1427] loop1: detected capacity change from 0 to 128 [ 814.876195][ T1442] loop4: detected capacity change from 0 to 512 [ 814.883758][ T1442] EXT4-fs: Ignoring removed mblk_io_submit option [ 814.891397][ T1442] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 814.910707][ T1442] EXT4-fs (loop4): 1 truncate cleaned up [ 814.928626][ T1442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 814.941709][ T1448] lo speed is unknown, defaulting to 1000 [ 814.957841][ T1448] lo speed is unknown, defaulting to 1000 [ 814.981541][T25158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.983349][ T1448] lo speed is unknown, defaulting to 1000 [ 815.001484][ T1448] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 815.011066][ T1458] loop1: detected capacity change from 0 to 512 [ 815.018906][ T1458] EXT4-fs: Ignoring removed nobh option [ 815.022703][ T1448] lo speed is unknown, defaulting to 1000 [ 815.036047][ T1448] lo speed is unknown, defaulting to 1000 [ 815.043757][ T1448] lo speed is unknown, defaulting to 1000 [ 815.051503][ T1454] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9976'. [ 815.055298][ T1458] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 815.076396][ T1463] loop4: detected capacity change from 0 to 512 [ 815.085537][ T1448] lo speed is unknown, defaulting to 1000 [ 815.091571][ T1463] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 815.100620][ T1463] EXT4-fs (loop4): orphan cleanup on readonly fs [ 815.110450][ T1448] lo speed is unknown, defaulting to 1000 [ 815.112553][ T1468] loop9: detected capacity change from 0 to 512 [ 815.127305][ T1463] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.9977: Failed to acquire dquot type 1 [ 815.147611][ T1463] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9977: bg 0: block 40: padding at end of block bitmap is not set [ 815.164617][ T1463] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 815.173840][ T1463] EXT4-fs (loop4): 1 truncate cleaned up [ 815.180134][ T1463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 815.187206][ T1448] lo speed is unknown, defaulting to 1000 [ 815.201973][ T1468] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.220784][ T1448] lo speed is unknown, defaulting to 1000 [ 815.236293][ T1448] lo speed is unknown, defaulting to 1000 [ 815.239221][ T1468] ext4 filesystem being mounted at /493/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 815.244393][ T1448] lo speed is unknown, defaulting to 1000 [ 815.268751][T25158] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.365760][ T1485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9981'. [ 815.387842][ T3369] IPVS: starting estimator thread 0... [ 815.426779][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.450643][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.464101][ T1491] lo speed is unknown, defaulting to 1000 [ 815.477766][ T1487] IPVS: using max 2352 ests per chain, 117600 per kthread [ 815.490645][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.490691][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.507795][ T1494] loop3: detected capacity change from 0 to 128 [ 815.521904][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.521978][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.529879][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.551011][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.559348][ T1495] wireguard3: entered promiscuous mode [ 815.572375][ T1495] wireguard3: entered allmulticast mode [ 815.576898][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.577968][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.596138][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.635033][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.656826][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.664410][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.672233][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.680306][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.688190][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.695781][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.703526][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.716960][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.727007][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.740229][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.747912][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.755613][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.763344][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.771423][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.779383][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.787877][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.795499][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.805720][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.814478][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.822153][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.830754][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.838483][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.846046][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.854663][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.862630][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.871232][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.880122][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.902931][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 815.928639][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.051524][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.071188][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.094221][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.120385][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.129844][T25968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.170981][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.171031][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.200918][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.222174][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.241808][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.268603][ T1489] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 816.644697][ T1531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.661871][ T1531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.683013][ T1507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.691588][ T1535] loop4: detected capacity change from 0 to 128 [ 816.701114][ T1535] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 816.717675][ T1535] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.756050][ T1531] loop0: detected capacity change from 0 to 8192 [ 816.763852][T25158] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 816.763965][ T1507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.834574][ T1551] wireguard0: entered promiscuous mode [ 816.840188][ T1551] wireguard0: entered allmulticast mode [ 816.929657][ T1570] wireguard2: entered promiscuous mode [ 816.935206][ T1570] wireguard2: entered allmulticast mode [ 816.988604][ T1577] loop3: detected capacity change from 0 to 128 [ 817.117745][ T1577] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 817.154474][ T1577] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 817.387295][ T1588] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 817.393894][ T1588] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 817.401436][ T1588] vhci_hcd vhci_hcd.0: Device attached [ 817.495005][ T1588] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 817.519481][ T1593] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 817.526104][ T1593] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 817.533757][ T1593] vhci_hcd vhci_hcd.0: Device attached [ 817.550575][ T1588] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(13) [ 817.557243][ T1588] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 817.564900][ T1588] vhci_hcd vhci_hcd.0: Device attached [ 817.576683][ T1592] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(16) [ 817.583370][ T1592] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 817.590945][ T1592] vhci_hcd vhci_hcd.0: Device attached [ 817.616762][ T1603] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 817.623412][ T1603] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 817.626279][ T1577] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 817.631127][ T1603] vhci_hcd vhci_hcd.0: Device attached [ 817.637649][ T1577] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 817.637845][ T1577] vhci_hcd vhci_hcd.0: Device attached [ 817.643310][T16168] vhci_hcd: vhci_device speed not set [ 817.662196][ T1610] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 817.670463][ T1593] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(11) [ 817.677104][ T1593] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 817.684874][ T1593] vhci_hcd vhci_hcd.0: Device attached [ 817.691423][ T1610] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(16) [ 817.698169][ T1610] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 817.705882][ T1610] vhci_hcd vhci_hcd.0: Device attached [ 817.711617][ T1588] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(18) [ 817.718017][ T1592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 817.718254][ T1588] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 817.729130][ T1592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 817.734143][ T1588] vhci_hcd vhci_hcd.0: Device attached [ 817.750857][ T1601] vhci_hcd: connection closed [ 817.751040][ T3369] vhci_hcd: vhci_device speed not set [ 817.754783][ T1592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 817.766671][T16168] usb 3-1: new full-speed USB device number 4 using vhci_hcd [ 817.772163][T24826] vhci_hcd: stop threads [ 817.781179][T24826] vhci_hcd: release socket [ 817.785697][T24826] vhci_hcd: disconnect device [ 817.798150][ T1593] vhci_hcd vhci_hcd.0: pdev(9) rhport(4) sockfd(13) [ 817.804866][ T1593] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 817.812676][ T1593] vhci_hcd vhci_hcd.0: Device attached [ 817.823930][ T1592] vhci_hcd vhci_hcd.0: port 0 already used [ 817.833786][ T1593] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(19) [ 817.840494][ T1593] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 817.848309][ T1593] vhci_hcd vhci_hcd.0: Device attached [ 817.853841][T16175] vhci_hcd: vhci_device speed not set [ 817.856694][ T3369] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 817.869413][ T1593] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 817.884431][ T1613] vhci_hcd: connection closed [ 817.884594][ T1589] vhci_hcd: connection reset by peer [ 817.884720][ T1598] vhci_hcd: connection closed [ 817.889567][ T1596] vhci_hcd: connection closed [ 817.895498][T24811] vhci_hcd: stop threads [ 817.899556][ T1604] vhci_hcd: connection closed [ 817.904097][T24811] vhci_hcd: release socket [ 817.904120][T24811] vhci_hcd: disconnect device [ 817.927357][ T1593] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 817.935587][T24811] vhci_hcd: stop threads [ 817.939937][T24811] vhci_hcd: release socket [ 817.944472][T24811] vhci_hcd: disconnect device [ 817.946165][ T1593] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 817.957568][T24811] vhci_hcd: stop threads [ 817.961855][T24811] vhci_hcd: release socket [ 817.966360][T24811] vhci_hcd: disconnect device [ 817.981715][T24811] vhci_hcd: stop threads [ 817.986005][T24811] vhci_hcd: release socket [ 817.990594][T24811] vhci_hcd: disconnect device [ 817.997601][ T1593] vhci_hcd vhci_hcd.0: port 0 already used [ 818.005636][T24811] vhci_hcd: stop threads [ 818.010093][T24811] vhci_hcd: release socket [ 818.014530][T24811] vhci_hcd: disconnect device [ 818.041974][ T1624] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10005'. [ 818.109735][ T1628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10006'. [ 818.223935][ T1619] vhci_hcd: connection closed [ 818.223981][ T1615] vhci_hcd: connection closed [ 818.228830][ T1611] vhci_hcd: connection closed [ 818.233829][ T1607] vhci_hcd: connection closed [ 818.236872][ T1594] vhci_hcd: connection reset by peer [ 818.248765][T24811] vhci_hcd: stop threads [ 818.253022][T24811] vhci_hcd: release socket [ 818.257567][T24811] vhci_hcd: disconnect device [ 818.262789][T24811] vhci_hcd: stop threads [ 818.267084][T24811] vhci_hcd: release socket [ 818.271518][T24811] vhci_hcd: disconnect device [ 818.277999][T24811] vhci_hcd: stop threads [ 818.282305][T24811] vhci_hcd: release socket [ 818.286794][T24811] vhci_hcd: disconnect device [ 818.292924][T24811] vhci_hcd: stop threads [ 818.297251][T24811] vhci_hcd: release socket [ 818.301743][T24811] vhci_hcd: disconnect device [ 818.307858][T24811] vhci_hcd: stop threads [ 818.312148][T24811] vhci_hcd: release socket [ 818.312242][T24811] vhci_hcd: disconnect device [ 818.339763][ T1632] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 818.364787][ T1632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10008'. [ 818.399018][ T1238] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 818.429651][ T1639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 818.457493][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 818.457511][ T29] audit: type=1326 audit(1755175952.811:20243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1642 comm="syz.1.10012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 818.468326][ T1639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 818.506936][ T29] audit: type=1326 audit(1755175952.811:20244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1642 comm="syz.1.10012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 818.506976][ T29] audit: type=1326 audit(1755175952.811:20245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1642 comm="syz.1.10012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 818.507073][ T29] audit: type=1326 audit(1755175952.811:20246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1642 comm="syz.1.10012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd70403d550 code=0x7ffc0000 [ 818.507167][ T29] audit: type=1326 audit(1755175952.851:20247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1642 comm="syz.1.10012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 818.507203][ T29] audit: type=1326 audit(1755175952.851:20248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1642 comm="syz.1.10012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 818.655968][ T29] audit: type=1326 audit(1755175953.001:20249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1642 comm="syz.1.10012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 818.680695][ T29] audit: type=1326 audit(1755175953.031:20250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1642 comm="syz.1.10012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 818.724407][ T1651] loop3: detected capacity change from 0 to 128 [ 818.732805][ T1651] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 818.745239][ T1651] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 818.760273][ T29] audit: type=1326 audit(1755175953.111:20251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1642 comm="syz.1.10012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 818.783977][ T29] audit: type=1326 audit(1755175953.111:20252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1642 comm="syz.1.10012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd70403ebe9 code=0x7ffc0000 [ 818.784082][ T1639] loop4: detected capacity change from 0 to 8192 [ 818.829825][ T1238] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 818.942262][ T1659] FAULT_INJECTION: forcing a failure. [ 818.942262][ T1659] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 818.955548][ T1659] CPU: 0 UID: 0 PID: 1659 Comm: syz.3.10016 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 818.955597][ T1659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 818.955615][ T1659] Call Trace: [ 818.955625][ T1659] [ 818.955635][ T1659] __dump_stack+0x1d/0x30 [ 818.955659][ T1659] dump_stack_lvl+0xe8/0x140 [ 818.955760][ T1659] dump_stack+0x15/0x1b [ 818.955783][ T1659] should_fail_ex+0x265/0x280 [ 818.955807][ T1659] should_fail+0xb/0x20 [ 818.955824][ T1659] should_fail_usercopy+0x1a/0x20 [ 818.955846][ T1659] _copy_to_user+0x20/0xa0 [ 818.955891][ T1659] simple_read_from_buffer+0xb5/0x130 [ 818.955950][ T1659] proc_fail_nth_read+0x10e/0x150 [ 818.955992][ T1659] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 818.956055][ T1659] vfs_read+0x1a5/0x770 [ 818.956083][ T1659] ? __rcu_read_unlock+0x4f/0x70 [ 818.956112][ T1659] ? __fget_files+0x184/0x1c0 [ 818.956150][ T1659] ksys_read+0xda/0x1a0 [ 818.956254][ T1659] __x64_sys_read+0x40/0x50 [ 818.956284][ T1659] x64_sys_call+0x27bc/0x2ff0 [ 818.956306][ T1659] do_syscall_64+0xd2/0x200 [ 818.956338][ T1659] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 818.956417][ T1659] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 818.956460][ T1659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.956490][ T1659] RIP: 0033:0x7fded5a7d5fc [ 818.956508][ T1659] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 818.956531][ T1659] RSP: 002b:00007fded44e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 818.956609][ T1659] RAX: ffffffffffffffda RBX: 00007fded5ca5fa0 RCX: 00007fded5a7d5fc [ 818.956631][ T1659] RDX: 000000000000000f RSI: 00007fded44e70a0 RDI: 0000000000000007 [ 818.956647][ T1659] RBP: 00007fded44e7090 R08: 0000000000000000 R09: 0000000000000000 [ 818.956662][ T1659] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 818.956678][ T1659] R13: 00007fded5ca6038 R14: 00007fded5ca5fa0 R15: 00007ffdd3627318 [ 818.956703][ T1659] [ 819.015750][ T1643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 819.107997][ T1658] netlink: 36 bytes leftover after parsing attributes in process `syz.9.10017'. [ 819.177750][ T1643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 819.212835][ T1663] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 819.247920][ T1666] IPv6: NLM_F_CREATE should be specified when creating new route [ 819.251758][ T1663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10019'. [ 819.353463][ T1673] loop9: detected capacity change from 0 to 512 [ 819.369883][ T1673] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 819.380865][ T1673] EXT4-fs (loop9): orphan cleanup on readonly fs [ 819.390800][ T1673] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.10022: Failed to acquire dquot type 1 [ 819.407323][ T1673] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.10022: bg 0: block 40: padding at end of block bitmap is not set [ 819.435778][ T1673] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 819.447014][ T1673] EXT4-fs (loop9): 1 truncate cleaned up [ 819.453286][ T1673] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 819.539084][T25968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.411399][ T1684] FAULT_INJECTION: forcing a failure. [ 820.411399][ T1684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.424612][ T1684] CPU: 0 UID: 0 PID: 1684 Comm: syz.1.10025 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 820.424721][ T1684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.424739][ T1684] Call Trace: [ 820.424748][ T1684] [ 820.424758][ T1684] __dump_stack+0x1d/0x30 [ 820.424850][ T1684] dump_stack_lvl+0xe8/0x140 [ 820.424876][ T1684] dump_stack+0x15/0x1b [ 820.424899][ T1684] should_fail_ex+0x265/0x280 [ 820.424928][ T1684] should_fail+0xb/0x20 [ 820.424955][ T1684] should_fail_usercopy+0x1a/0x20 [ 820.424979][ T1684] _copy_from_user+0x1c/0xb0 [ 820.425015][ T1684] ___sys_sendmsg+0xc1/0x1d0 [ 820.425116][ T1684] __x64_sys_sendmsg+0xd4/0x160 [ 820.425148][ T1684] x64_sys_call+0x191e/0x2ff0 [ 820.425178][ T1684] do_syscall_64+0xd2/0x200 [ 820.425287][ T1684] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 820.425317][ T1684] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 820.425341][ T1684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.425404][ T1684] RIP: 0033:0x7fd70403ebe9 [ 820.425424][ T1684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.425449][ T1684] RSP: 002b:00007fd702a7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.425474][ T1684] RAX: ffffffffffffffda RBX: 00007fd704266090 RCX: 00007fd70403ebe9 [ 820.425488][ T1684] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000004 [ 820.425512][ T1684] RBP: 00007fd702a7e090 R08: 0000000000000000 R09: 0000000000000000 [ 820.425529][ T1684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.425578][ T1684] R13: 00007fd704266128 R14: 00007fd704266090 R15: 00007ffe395ad338 [ 820.425607][ T1684] [ 820.622133][ T1690] loop0: detected capacity change from 0 to 256 [ 820.644917][ T1690] netlink: 'syz.0.10027': attribute type 1 has an invalid length. [ 820.652852][ T1690] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10027'. [ 820.771463][ T1696] netlink: 'syz.1.10029': attribute type 2 has an invalid length. [ 820.779398][ T1696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10029'. [ 820.871201][ T1700] lo speed is unknown, defaulting to 1000 [ 820.909529][ T1705] loop1: detected capacity change from 0 to 128 [ 820.946923][ T1704] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 820.989286][ T1703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10033'. [ 820.998694][ T1704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10032'. [ 821.056537][ T1714] loop9: detected capacity change from 0 to 128 [ 821.068781][ T1717] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10037'. [ 821.079975][ T1714] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 821.096478][ T1714] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.116225][ T1721] loop0: detected capacity change from 0 to 256 [ 821.130778][ T1721] netlink: 'syz.0.10038': attribute type 1 has an invalid length. [ 821.138885][ T1721] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10038'. [ 821.153144][T25968] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 821.215950][ T1730] loop9: detected capacity change from 0 to 512 [ 821.234842][ T1730] EXT4-fs: Ignoring removed mblk_io_submit option [ 821.242087][ T1730] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 821.271540][ T1730] EXT4-fs (loop9): 1 truncate cleaned up [ 821.278664][T24817] tipc: Subscription rejected, illegal request [ 821.307705][ T1730] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.342931][T25968] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.370832][ T1749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10049'. [ 821.384973][ T1747] lo speed is unknown, defaulting to 1000 [ 821.413738][ T1752] loop1: detected capacity change from 0 to 128 [ 821.426077][ T1754] siw: device registration error -23 [ 821.460248][ T1754] loop0: detected capacity change from 0 to 512 [ 821.474418][ T1754] EXT4-fs: Ignoring removed nobh option [ 821.477653][ T1756] loop9: detected capacity change from 0 to 128 [ 821.486528][ T1758] loop1: detected capacity change from 0 to 256 [ 821.492050][ T1754] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 821.507532][ T1756] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 821.521821][ T1756] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.551373][ T1758] netlink: 'syz.1.10052': attribute type 1 has an invalid length. [ 821.559352][ T1758] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10052'. [ 821.565674][ T1761] loop0: detected capacity change from 0 to 512 [ 821.575781][ T1761] EXT4-fs: Ignoring removed mblk_io_submit option [ 821.588224][T25968] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 821.597608][ T1761] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 821.626178][ T1761] EXT4-fs (loop0): 1 truncate cleaned up [ 821.637351][ T1761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 821.699859][T28730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.736831][ T1773] tipc: Enabling of bearer rejected, failed to enable media [ 821.746026][ T1776] random: crng reseeded on system resumption [ 821.822795][ T1785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10062'. [ 821.876269][ T1794] siw: device registration error -23 [ 821.885494][ T1794] loop3: detected capacity change from 0 to 512 [ 821.892584][ T1794] EXT4-fs: Ignoring removed nobh option [ 821.896722][ T1796] loop0: detected capacity change from 0 to 128 [ 821.908048][ T1796] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 821.914391][ T1794] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 821.921078][ T1796] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 821.947566][ T1771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 821.956180][ T1771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 821.969560][T28730] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 821.986797][ T1801] loop3: detected capacity change from 0 to 256 [ 821.998000][ T1801] netlink: 'syz.3.10069': attribute type 1 has an invalid length. [ 822.006040][ T1801] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10069'. [ 822.134107][ T1811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.143007][ T1811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.308129][ T1811] loop0: detected capacity change from 0 to 8192 [ 822.569731][ T1816] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 822.650975][ T1816] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 822.658645][ T1816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.666547][ T1816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 822.674036][ T1816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 822.692640][ T1818] tipc: Enabling of bearer rejected, failed to enable media [ 822.840916][T16168] usb 3-1: enqueue for inactive port 0 [ 822.848624][T16168] usb 3-1: enqueue for inactive port 0 [ 822.916674][ T3369] usb 19-1: enqueue for inactive port 0 [ 822.924171][ T3369] usb 19-1: enqueue for inactive port 0 [ 822.930072][T16168] vhci_hcd: vhci_device speed not set [ 822.978028][ T1831] siw: device registration error -23 [ 822.989076][ T1835] loop3: detected capacity change from 0 to 256 [ 823.004572][ T1831] loop4: detected capacity change from 0 to 512 [ 823.017238][ T3369] vhci_hcd: vhci_device speed not set [ 823.026024][ T1835] netlink: 'syz.3.10082': attribute type 1 has an invalid length. [ 823.036374][ T1831] EXT4-fs: Ignoring removed nobh option [ 823.048688][ T1831] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 823.151837][ T1844] tipc: Enabling of bearer rejected, failed to enable media [ 823.240144][ T1849] netlink: 'syz.9.10087': attribute type 2 has an invalid length. [ 823.267933][ T1851] wireguard1: entered promiscuous mode [ 823.273639][ T1851] wireguard1: entered allmulticast mode [ 823.419035][ T1856] loop3: detected capacity change from 0 to 764 [ 823.518744][ T1856] rock: directory entry would overflow storage [ 823.525028][ T1856] rock: sig=0x5245, size=8, remaining=5 [ 823.577627][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 823.577642][ T29] audit: type=1400 audit(1755175957.931:20380): avc: denied { mount } for pid=1855 comm="syz.3.10090" name="/" dev="loop3" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 823.649749][ T29] audit: type=1400 audit(1755175958.001:20381): avc: denied { unmount } for pid=1238 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 823.704849][ T1858] lo speed is unknown, defaulting to 1000 [ 823.948563][ T29] audit: type=1326 audit(1755175958.301:20382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded5a7ebe9 code=0x7ffc0000 [ 823.972239][ T29] audit: type=1326 audit(1755175958.301:20383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded5a7ebe9 code=0x7ffc0000 [ 824.073654][ T1866] loop4: detected capacity change from 0 to 128 [ 824.102313][ T1871] siw: device registration error -23 [ 824.111494][ T1871] loop9: detected capacity change from 0 to 512 [ 824.119024][ T1871] EXT4-fs: Ignoring removed nobh option [ 824.125096][ T1871] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 824.157607][ T1866] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 824.171536][ T1866] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 824.176871][ T29] audit: type=1326 audit(1755175958.341:20384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.4.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 824.205647][ T29] audit: type=1326 audit(1755175958.341:20385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1841 comm="syz.4.10085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff12345ebe9 code=0x7ffc0000 [ 824.229311][ T29] audit: type=1326 audit(1755175958.341:20386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fded5a7ebe9 code=0x7ffc0000 [ 824.253004][ T29] audit: type=1400 audit(1755175958.341:20387): avc: denied { create } for pid=1857 comm="syz.3.10091" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 824.274096][ T29] audit: type=1326 audit(1755175958.351:20388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded5a7ebe9 code=0x7ffc0000 [ 824.297706][ T29] audit: type=1326 audit(1755175958.351:20389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1857 comm="syz.3.10091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fded5a7ebe9 code=0x7ffc0000 [ 824.367960][T25158] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 825.055486][ T1890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.064120][ T1890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.154861][ T1896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.172736][ T1890] loop1: detected capacity change from 0 to 8192 [ 825.181101][ T1896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.237784][ T1898] loop0: detected capacity change from 0 to 512 [ 825.257235][ T1898] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 825.269484][ T1896] loop3: detected capacity change from 0 to 8192 [ 825.276756][ T1898] EXT4-fs (loop0): orphan cleanup on readonly fs [ 825.283684][ T1898] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.10107: Failed to acquire dquot type 1 [ 825.296046][ T1898] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.10107: bg 0: block 40: padding at end of block bitmap is not set [ 825.311401][ T1898] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 825.324442][ T1898] EXT4-fs (loop0): 1 truncate cleaned up [ 825.330714][ T1898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 825.429434][ T51] ================================================================== [ 825.437575][ T51] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 825.445973][ T51] [ 825.448321][ T51] write to 0xffff88813bf89308 of 2 bytes by task 1896 on cpu 0: [ 825.455975][ T51] fat16_ent_put+0x28/0x60 [ 825.460428][ T51] fat_alloc_clusters+0x4ce/0xa80 [ 825.465492][ T51] fat_get_block+0x258/0x5e0 [ 825.470103][ T51] __block_write_begin_int+0x400/0xf90 [ 825.475601][ T51] cont_write_begin+0x5fc/0x970 [ 825.480482][ T51] fat_write_begin+0x4f/0xe0 [ 825.485103][ T51] generic_perform_write+0x181/0x490 [ 825.490517][ T51] __generic_file_write_iter+0x9e/0x120 [ 825.496093][ T51] generic_file_write_iter+0x8d/0x2f0 [ 825.501498][ T51] vfs_write+0x527/0x960 [ 825.506277][ T51] ksys_write+0xda/0x1a0 [ 825.510560][ T51] __x64_sys_write+0x40/0x50 [ 825.515182][ T51] x64_sys_call+0x27fe/0x2ff0 [ 825.519895][ T51] do_syscall_64+0xd2/0x200 [ 825.524447][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.530361][ T51] [ 825.532695][ T51] read to 0xffff88813bf89200 of 512 bytes by task 51 on cpu 1: [ 825.540247][ T51] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 825.546165][ T51] generic_perform_write+0x2c2/0x490 [ 825.551465][ T51] shmem_file_write_iter+0xc5/0xf0 [ 825.556590][ T51] lo_rw_aio+0x69d/0x760 [ 825.560889][ T51] loop_process_work+0x52d/0xa60 [ 825.565850][ T51] loop_workfn+0x31/0x40 [ 825.570115][ T51] process_scheduled_works+0x4cb/0x9d0 [ 825.575685][ T51] worker_thread+0x582/0x770 [ 825.580303][ T51] kthread+0x489/0x510 [ 825.584385][ T51] ret_from_fork+0xda/0x150 [ 825.588911][ T51] ret_from_fork_asm+0x1a/0x30 [ 825.593710][ T51] [ 825.596036][ T51] Reported by Kernel Concurrency Sanitizer on: [ 825.602196][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 825.614626][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 825.624693][ T51] Workqueue: loop3 loop_workfn [ 825.629495][ T51] ================================================================== [ 825.661722][ T3410] usb usb4-port1: attempt power cycle [ 825.677921][T28730] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.886950][ T3396] usb usb20-port1: attempt power cycle [ 827.506994][ T3410] usb usb4-port1: unable to enumerate USB device [ 827.736852][ T3396] usb usb20-port1: unable to enumerate USB device