last executing test programs: 6m39.498643364s ago: executing program 32 (id=826): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e230675f802000000440002000800d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c050", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6m32.86932021s ago: executing program 33 (id=934): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff0000deffffffffffffff0000e0000002000000000000000000000000fe8000000000000000000000000000aa3c04"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fchdir(r0) r3 = socket$unix(0x1, 0x1, 0x0) unshare(0x22020600) setns(0xffffffffffffffff, 0x24020000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getsockname$packet(r4, &(0x7f0000000000), &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m31.611538992s ago: executing program 34 (id=948): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="027ffffffe0004000000000004000500a9930000100000000000000020"], 0x24, 0x0) 6m29.548991558s ago: executing program 3 (id=962): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x15}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 6m29.495652763s ago: executing program 3 (id=963): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r1}, 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100013070000000000000000ffffffff000000000000000000000000ff60000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000006a000000000000004c001400636d61632861657329"], 0x13c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) shutdown(0xffffffffffffffff, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b80)={'tunl0\x00', &(0x7f0000000ac0)={'gretap0\x00', 0x0, 0x8, 0x10, 0x4, 0x2df, {{0x17, 0x4, 0x2, 0x38, 0x5c, 0x66, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010101, @loopback, {[@cipso={0x86, 0x18, 0xffffffffffffffff, [{0x1, 0x12, "1e2d0b7e485e1e1e209f4575a8d103b0"}]}, @timestamp_addr={0x44, 0xc, 0xd4, 0x1, 0x6, [{@broadcast, 0x7fff}]}, @timestamp_prespec={0x44, 0x24, 0xfa, 0x3, 0xc, [{@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x9}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}]}]}}}}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000009e40)=ANY=[@ANYBLOB="380000001a000100000000000000000081808000000000000000000014000100fc00000000000000000000000000000008000f"], 0x38}}, 0x0) 6m29.375278453s ago: executing program 3 (id=965): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SPLIT(r3, &(0x7f0000000180)={0x0, 0xffbd, &(0x7f0000000140)={&(0x7f00000001c0)={0x44, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xffffffffffffffb8, 0x9, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket(0x3, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x4}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0x40, 0xfffffffffffffff0}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x9, 0x0, 0x7ffc0002}]}) rmdir(0x0) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r8}, 0x18) r9 = socket(0x10, 0x80003, 0x0) write(r9, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) 6m29.238080164s ago: executing program 3 (id=970): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x1, 0x376, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000ffffffff"]) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r4, r4, 0x0, 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80001, 0x82) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r2, 0x0, 0x3ffff) 6m29.194010447s ago: executing program 35 (id=969): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff0000deffffffffffffff0000e0000002000000000000000000000000fe8000000000000000000000000000aa3c04"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) fchdir(r0) r3 = socket$unix(0x1, 0x1, 0x0) unshare(0x22020600) setns(0xffffffffffffffff, 0x24020000) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50f) getsockname$packet(r4, &(0x7f0000000000), &(0x7f0000000040)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m29.092162785s ago: executing program 3 (id=975): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000140), 0xff, 0x540, &(0x7f0000000b80)="$eJzs3cFvI1cZAPBvvPFudje7SYEDVGoptChbwdpJQ9uIQykSglMlRLkvIXGiKE4cxU67iSrI/gVICAESJ7hwQeIPQEIrceGIkCrBuUhFIARbkMoBOsj2OAnOOPEWx951fj9pdt6b8cz3PW/eeMbzNA7gwnomIl6NiA/SNH0+Iqaz5YVsioP21Hzdew/eWm5OSaTp639LIsmWdfaVZPPr2WaTEfH1r0Z8KzkZt763v7FUrVZ2snq5sbldru/t317fXFqrrFW2FhbmX1p8efHFxbmBtPNGRLzy5T/94Ls/+8orv/rcm3+885db326mNZWtP96OhzRx2sp204tXJrs22PmQwR5FzfYUO5Wr/W1z7xzzAQCgt+Y5/kci4tMR8XxMx6XTT2cBAACAx1D6xan4dxKR5rvcYzkAAADwGCm0xsAmhVI2FmAqCoVSqT2G92NxrVCt1RufXa3tbq20x8rORLGwul6tzGVjhWeimDTr863yUf2FrvpCRDwREd+fvtqql5Zr1ZVRf/kBAAAAF8T1ruv/f063r/8BAACAMTMz6gQAAACAc+f6HwAAAMaf638AAAAYa1977bXmlHZ+/3rljb3djdobt1cq9Y3S5u5yabm2s11aq9XWWs/s2zxrf9VabfvzsbV7t9yo1Bvl+t7+nc3a7lbjznpMDqVBAAAAwAlPfPL+H5KIOPjC1dbUdHnUSQFDMXFYSrJ5Tu9/52Z7/u6QkgKG4lIfr3n3Sv5y5wnweJvoXtCjr7fdeOf9rXNNBxii4qgTAEYuOWN9z8E7v83mnxpsPgAAwODNfiL//v9Z1wMRB4UhpAecI50YLq6u+//p9KgSAYaudf+/34E8ThZgrBT7GgEIjLP/+/7/mdL0oRICAAAGbqo1JYVS9vXeVBQKpVLEjdbPAhST1fVqZS4ibkbE76eLV5r1+daWSR9jBAAAAAAAAAAAAAAAAAAAAAAAAACAaD2VO4kUAAAAGGsRhT8nv24/y392+rmp7u8HLif/av0k8OWIePPHr//w7lKjsTPfXP73w+WNH2XLXxjFNxgAAABAt851emv+/qizAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDcvPfgreXO1MfLrw4q7l+/FBEzefEnYrI1n4xiRFz7RxITx7ZLIuLSAOIf3IuIj+fFT5ppHYbMiz+IN+GM+DGTvQt58a8PID5cZPebx59X8/pfIZ5pzfP730TE/9Q/rN7Hvzg8/l3q0f9v9Bnjybd/Ue4Z/17EkxP5x59O/KRH/GdP7u5mXoxvfmN/v1f89CcRs53Pn9YR73iEo1K5sbldru/t317fXFqrrFW2FhbmX1p8efHFxbny6nq1kv2bG+N7T/3yg9Pafy338y/Jsund/udy9pf3mfSft+8++GincnAy/q1nc+L/5qfZK07GL2RxPpOVm+tnO+WDdvm4p3/+u6dPa//KUfuLD/P/f6vXTrud6ChP5fzpAADDUt/b31iqVis7Y1toXqU/AmkoPIKF7wx0h2maps0+lbPqfkT0s58kBtzSQn4+R4WeR4BRH5kAAIBBOzrpH3UmAAAAAAAAAAAAAAAAAAAAcHEN7kljcdBrVXfMo0cgJ4N4hDYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwED8NwAA///2G9X3") bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0181c200000ee43f6642531e080045000020000002119078000000000000000000004e14000c9078611000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m28.859211114s ago: executing program 3 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xfffffffffffff70b}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}], [{@obj_role}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_eq}, {@obj_type={'obj_type', 0x3d, ',[::{'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x39, 0x37, 0x37, 0x39, 0x62, 0x62, 0x61], 0x2d, [0x39, 0x61, 0x66, 0x35], 0x2d, [0x36, 0x33, 0x35, 0x35], 0x2d, [0x36, 0x38, 0x32, 0x34], 0x2d, [0x66, 0x36, 0x66, 0x64, 0x36, 0x64, 0x33, 0x63]}}}]}, 0x0, 0x55f, &(0x7f0000000f80)="$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") (fail_nth: 2) 6m28.777486981s ago: executing program 36 (id=979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a00)={[{@noblock_validity}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xfffffffffffff70b}}, {@resuid}, {@dioread_lock}, {@jqfmt_vfsv1}], [{@obj_role}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@euid_eq}, {@obj_type={'obj_type', 0x3d, ',[::{'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x39, 0x37, 0x37, 0x39, 0x62, 0x62, 0x61], 0x2d, [0x39, 0x61, 0x66, 0x35], 0x2d, [0x36, 0x33, 0x35, 0x35], 0x2d, [0x36, 0x38, 0x32, 0x34], 0x2d, [0x66, 0x36, 0x66, 0x64, 0x36, 0x64, 0x33, 0x63]}}}]}, 0x0, 0x55f, &(0x7f0000000f80)="$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") (fail_nth: 2) 6m27.840089037s ago: executing program 2 (id=988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000140), 0xff, 0x540, &(0x7f0000000b80)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0181c200000ee43f6642531e080045000020000002119078000000000000000000004e14000c9078611000000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x2000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6m27.255078114s ago: executing program 2 (id=990): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r2, 0x0, 0x1000, 0x7ff, &(0x7f0000000880)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x0, 0x44, 0x1000, &(0x7f0000000340)="e988fca540b9de2643f39ebb0617c53e705d7b435169bc4b5abc01f0c2eaa54a02ba854a974eadbcb42f9ef77bba1899348e2793bf5965f52febe53a6534ebea82647321", &(0x7f00000019c0)=""/4096, 0xc968, 0x0, 0x5b, 0x39, &(0x7f0000000440)="1c70b6c98b9262cd217e2226d3bebd3ea54b17d4dab81e024471e26a40fba2550ce6cb65265d5a22806c10fdc1f90cee8e501163ce9c2a3453b447394073dcb8f164dcba6a82b8cd8ec3833c2ef2bc4502aa61d02603f66a058d8d", &(0x7f0000000040)="a3f74120cb064982d35f21700ecd132a5b8b1b231acaf83f7495619c9e97370c4e30a0cb2a78675ab61b7feb4a4fdb5220f22e105d51015873", 0x1, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) sendmsg$key(r3, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, 0x1, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x10000000) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000005c0), 0x2680) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r7, 0xc02c5341, &(0x7f0000000600)) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r6}}, 0x18) 6m27.189881879s ago: executing program 2 (id=991): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x8}}, @TCA_CT_ACTION={0x6, 0x3, 0x15}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 6m27.095427917s ago: executing program 2 (id=992): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x1, 0x376, &(0x7f00000007c0)="$eJzs3c+LG2UYwPEn2Wwy2dJNDqIoyD7oRS/D7upZG0oLYsCybcRWEKbdiYaMyTITIhFx15NX8eY/IFh6LHgoqP/AXrzVixdP7kUQtIg4Mr92M+nEZGO22Xa/H2jzTN73mXknv3ieQGYP3vniw3bTM5tWT/KGSk5E5IFIVfKSyEU3RcmwJy+f+/3+81ev33izVq9f2lK9XLv2yqaqrq5999En5XjavZLsV987EOOX/af3nz3459oHLU9bnna6PbX0ZvfnnnXTsXW75bVN1SuObXm2tjqe7Ubj3Wi86XR3dgZqdbbPr+y4tuep1Rlo2x5or6s9d6DW+1aro6Zp6vmVrOU+wYwZchq3t7as2owHvDVjHubtL9/3U3dcSG25bs1aEjHLDyU2bp/42gAAwKkzUv9/ldQIVckfFpS5uBcohnG6DQjq/yQO6/+gWTiq/++88EPv3Nt3V+P6/14xq/5/9acoP1X/B0efe/3/zcj2wxXRY2/3OJP/V/2P02Et/Y789ahjjwX1f/BuOOzoP3v3znoYUP8DAAAAAAAAAAAAAAAAAAAAAPA4eOD7Fd/3K8lt8u/oJwTxdrLlL2ypOAHjnv9SfEWBw9cDnkhXr98QI/zhXmFVxPm83+g3ott4PJm4LhX5O3w9xKILTuyFgxqoyvfObr+xHCcshf/XRFQcsWVDKlJN5Yfx5TfqlzY0EuWHx9/tN3KFlSC/Ka0wf1Mq8lR2/mZmflFeenEo35SK/HhLuuLIdvw5luR/uqF68a36SH45nJfl9ZN9SgAAAAAAmDtT1Yjb52q6/436d9NUzRoPenkZ7s/T3w8Uh/vr9cz+vFB5rrDYcwcAAAAA4Kzwih+3LcexXW8wNijLpDmleG8jQwWZsOcgKEwxJxXcD4Pl/5qzNHSG0+65GP8FjWmX4XoDmXrNSfBHSTIfzOQSrqkhI/tRnTJIzn+KycZxnwLXyx//3G3XWwvWoxlDVlmm32HytdG4OXJltkdsfJBcOXfS5Ge+/PrP2Q6Ri6/aOzz02l1jwpmGQW7knr0JL9rffH/iepazPy2+vTi3Dx4AAAAAj1xS9Je95J4Li10QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABn0FwvkzYmWPQ5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfFvwEAAP//L7DzxA==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000ffffffff"]) r4 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r4, r4, 0x0, 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80001, 0x82) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r2, 0x0, 0x3ffff) 6m26.92901866s ago: executing program 2 (id=994): modify_ldt$read(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2'}, 0x29) (fail_nth: 2) 6m26.653961622s ago: executing program 2 (id=996): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff0000deffffffffffffff0000e0000002000000000000000000000000fe8000000000000000000000000000aa3c04"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 6m26.653331213s ago: executing program 37 (id=996): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000640)=ANY=[@ANYBLOB="fc0000001900010027bd700000000000e0000002000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000002000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="040000000000000050001100ac1414aa000000000000000000000000ffffffff0000deffffffffffffff0000e0000002000000000000000000000000fe8000000000000000000000000000aa3c04"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m35.506569022s ago: executing program 7 (id=5352): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000100ffff0000000001000000180100000000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0100008500000006000000850000000f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xfff) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000340)={0x2, {0x2, 0x4, 0x0, 0x10, 0x7, 0xf}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1159e4047a6348de, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000001c0), 0x4) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008002, &(0x7f0000000840)={[], [{@rootcontext={'rootcontext', 0x3d, 'staff_u'}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x12, 0xffffffffffffffff, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)="25a4be9c0ce89cbf9f6699e37603e1b74587b94298ccf0bf22e83e142bea0dfdb0f130961206c868fd9ad415d70013932fd13ff87593d15015e5643df1aa3d4d9ac4d8b4095417d99b967dd587d8891c594bf0aa6949c1eb6f418eec14bdf7c0d9d73e789e7d7b12926bf14c10ae3c8a4e8e002c3370d1d229ad2647c10126e77b6645aa687743473311af671d69128b0181cdb8e68f8e501d020837bf8828c6e01e05e92b31ff8cc07e778ab39c9d4d878000f3730d6272df8070c8b90046c6b152a6c8aec4d04c996a5293d436b35ef0ef516605cf3c9405b322adeafeaa826d3b0aa14d37baa57b5062acfe1176e56269e125eb3225ab80aeaf2b7ade327e144dbfcec7dacff5c74e04ce85d200b2a8ae09cc6f804c73c3db742f204f80b4d3e68ea22de44918490b09fa1f50cf59fad253f6b29a7d98d3909a32820c93aa93dd90127ed3f6c5bb1fc092b4aa73162a095db772e6ce346c66177b482fa24e00027d13696a563bf055916fe34ce24466163da4343ea07b397ce41b3ce145e7f72e2b9072253b3e8be8b921411853284cd70123ac5ab40dae387efd12fb1b0b995329e69c0b9e2268ed6c2639f75ccc4a32e5377078bbd9a4119a1f6bd0752791faf2cac84df0c42e43106819a3a624f3f3995f7a4d892622dda277192f58e948af6a95fad17685f9fe1dc8c5dfb4adee234d7fd18c8b2f29b34a66d2120a1d0f7f0a774247abd9fa595c736750f183761fbd9b029f6601d199ba12734a59be5efaac2b66ba564b65683763e33cc93b1cf125956a5f704b325e1d131e13df01c2eff2a29e65ab02cba302020b5e5f763f15bd9348ac127213822f8ee4021b99bbe8a569a00ea66d9b06498e7e29e6e7d5ba4515e0592a78232e69bc59f049923597ad50abfda79e160e91bb1b4f7574b83727a02343755124ef25abcc7f66eeed248c0b77c33350a42c0e06d69c18745789fe922f5df70e64f6da80e430b836a389ab83b5ec8b4d44965eabcea85bc3b69126263a9a201a72558ad26a3f8b228b389e01d6bd94bc37d145c0e12bba5a6a15685125882193870235dd50eda594cbf40d79b0d0184baea13dfe03705f929e0f727d84a4b98a596a211674ae16a3d61ce76c60d3eb006c232c8e4826a84aadaf60b1fba24e5bfe881622628dbe3776269373cc2405eb9c940b1b2595f8426aa314ded4c3102bb07ace7de03edd73c3fee3846e17a2dac01850b560e5b4c447c4b415e9ed81694810356addfedeb9ce645c73f9297274842d29880d294a4364898d5fea28957a2fb14114c8affa08524949a67419093070e482da553f9690f74bdbfef145f8a0b6bca7573578ea1877d49c67fd8598e763f565bdccc6741e4ce12de0c25568c4c929b19a8d138f52f2e122994c76d9ac032b76cbeabe68d7f98c5c4a5b8bcb43f5b6ce57bbfc3653ae94fc045cc3aa8981f3296ed5adbaf0c7b02c7df26ba9bd5d49c1a9cf7897f08d91d93bcb7568e8cd6ad33bba1bd30a97707c62b9eafa0edd0e9a45bda10ff1f918445a82712848591c50dc01163aad5bc4a564ff57542e9ee6fadd2d30b208c1751b57257f9c0b850dee36ced2c25393819ae623d41873737b2ac3ffb9a412bef3f01acf4038e7d1807419a6a73afaabf4f9c7d36a75a4d2a140479bed2a0c32572c2bc4962a611d31b34d722725391d10dc9152868c1db3a07266dc71d951789db47c0d97b293a6004a26811c5fbfd3bce97dc127febc16ccb2bfae1658aab5fa31d8de69f47ed35be4cdea02884889198245dcc1c7fd9c29d7424b50ac56fb8597d30e8fdc6f6f04bca4f4d3718eddac272b6153d10e805b740d9e8ee35e797334e16a7db9ee53bcf48f512a3b4e82b4b814d5ec90da3d583c3d7b453d5e433572531f4ea632df22ce7c7178fc7a07616969e2a305af4b8efaa1c9a6ab06a1683e563518a303d0dce5fd4d8dc3501734f3a0fbdf0af675a72362e4e47599707bedfbb90fd585969f0973e9a80351c21ea4ebbd1e9b376fe8a2d6a765deb1203e67c6ecd8561138ddbd65dc942f95b0473500efd5c2dbdbecaf948b4f9be93800944aa8f4604d350355d24c913520152db29e698e01fba4dc6b27245fd62d23302fe3a6339c82e93f55bfe8f959bd3443591c0074e32330146fad7ce40bda92d2c0f65fe6f237e21e032c82e1e1a3a1d7848919062f932b175bf21ddeece862791424b1fa3a3504e61840d313ad303fa654f637d2428317055682a2e17d2d2fa44d048baf989306b32427fce31c37eb9f80cedfeb919ce9ae7a8a78a8ccab0f0365c52d8d2d86a274fdd04e849672b7cde631c1ded5014c9186b576e57d50e2f16fbe1564c7d76149e2dd7db7ef0c0aeddda7e5b31db39331e5c715f999fd6a0679275de566f554c0c4a3ece2123976c6a2671d4107f5f833baeb968f9cf10acb9e5a808ce047e8ca227d674ea32e6ad2e7b81fc168d3c85fc6548cf0a4f413064782dea276d27c18f512ce5f5a81211df7024d1cd76e242a87f0ac13068c14606f1eb22bd50155e461e2d4a21e28ea6e64127ceb04a5d85485e09e5b32594156549121cc9ad693763ddc0e7c9ec0a54cf7d54cafb75001b6a5c7562cbe632a717e325f2b5115defcd340842a2a0747b2ea2ac552ad34bdddf66f78a83a18bc83728e5dbb5b00a0a5536e5ee936a958362fc719ff9cade216819b5e32e20fe6ebaf51ae7bcd29bd4121d7e0b13300049a0545aaa63f042f9d865d22bb1632427c40fdf58ce6fdd662ad56401174a05ed3705bca6294b2844e628e4a98e8b4a2b41cd77fc144d7d1de31087859e0b425fd6b9a398a8256ee0c2c0762dde714a958cea0c8f547fe73d1d3b0fc90426613b8f105a07ad9e6bb1fee9c77ad107bbf89e3e4dba32d104be1906485dca8b6d449615ef47507b1ed0479ed316f8b56297fb90c07dd3839a82d27d171d37c4886f3f5bd2022c73eb2ff9d623ce4aac1f0d42f9e09e832a19056758ec0b0eaf2a6848e7fa6434f82294ea950258f05bcd907a84911b88a8f52c00a7951594cdbef410c8b958d4f8618fb98704d4ad298236c5be0c25434a093fb5755af0b6322b63ae2e623f0fee42f14c3c4b95ddf63a5529e90f4433a45b853c483413ef201d1c24a20e88628cfac50ec26ff0cbc83a4c3999ee9f8e93726811fb013e10aa08289e6deb655c391695793a8edf5a9c2a595bb81fe0162e39fd0e9aabf51eaf10186ffb354e5a8da2f5999e8a9958dac6d8cdf4feb07702ea67fc3db7f8ae7874162f00125e298254406cc26f322cdb28273a4e1ead4bcf07b1081e03bd59df5291037d9ce6fb101996f81b4c216c88f4ece75d35f97f54457a8116cc19666ccdfe8d77dbae05656cb184722a1c73dfe5215a241ab7c45a4668a307df243b8f02b3e1a2535155d62e4d8a0a8d583b38d3243d32e573063e3fd55d7a6edeb0a77e51a42a79079a4355739c2ae826d6e8e94356c42127406dce0025448efe36427158f7d64e3a178f723afc33d2b7b56af844350a8db4387c874ffbf4a1035b615bad38bb29d85a5cc4ea81d7de3f5f1f18c31da9459837e80d38a2f735920f6ae5caada66273d059181262e0c66d5832c6e4183f43f3ae37e3dddb0d9fa1e36ec7fdee8aab17fb9f47d080e0d73673f8a3c5d3a70c36aba6a04760e447fd3d6f3afee0dde6c6d2babfca717e3be22e9474df7b1ffcf156e24d36c1f7d45057cdb4840d4164e397db1634544891ad2112655c2cdb321e8f1a2385b7ccdff4a7d1148b47496b6b22d33a9e07761ed7d9ae16fe54b22026e4f068f0ca9127c51cc39812701f3511f6f16e29ab7138b97adfb4c15b94b90c21b358cccc7835e6c5f151222b5138661f62f2b8a527ad7f4a03e2fbed98e1c6d31cbb82e291496775746f091cfe6362aca9fc40d700d95e2ced98115b34d07d12639c7a5fdcc894618a72b6e18fe855768ad94964ee9d039839c01fa3bcfaa6283bee546a96f4a58d654eeb9616c7b67098fcf2a03afe6b6a1dab0197cd1a29bb7e0769cb921ef7e08c113223bf0c586fc23c2971efb3a29957b896b6f0bdfce51ca7be552d734a814eacd4cab06e577f09e7e6c54c913d3b1ea67278fbf1ebe6824312621c3130159528845c4f296ba0e35a8048270efccfd0084ec965f6b72a2a8432ac0b2378b73c3f2a7be1992b36fe87511c06c2844e11a08f7fb618a4764c6bef30779aaf1638ce32492732ce619e74dd4ef694a9c6ab22ab563608fcb065dba5b0844bd90e4cb7c4ae30fa37ad015a359d6fe984904898ac3bf27169a0dc7f59bb35df8a059b3f4c4bc43c7ac077d7289537f39f7d4acdc98b02a728b3449afe9df3dcd3561992b7e5e1e712259a66ea883d5eaa1075a983f613daf02307e8f8f7513e59ccc5bad3bcc1a5747670588941a9d17e06f94f3eeb694744306cfaef10a781c31d7f12664d29749e560d3f1aaf1b8acb8d4822c5141ea40c8f62d7b2e454ee74abf31c850d1413fd7b3e52d3f34942b528b95b0c2b6875d502412abb6490144c6c0adee91ca02cd961d9e505b0e7fd520d2c0bba4a78e2f00d84255958f0571a51f295adc0d4a9a08f8c70b037c214bbb17b94fb0d7b45b1d895243caa1eeb3c7adb2669f4c1913bcffb03d32bdf5c2587254b0c76ce67df28060214d6b524f648385b18cb7114785b0f062acaf3ff4a59ba6c9ad0f4c06e2e1944a390cb2eb990de7cf92ab378c69bb5fd30263b7326d739057050d7b8ca2ed11d497bd194c41e8f8eb6825976879a2f48bff9c0af6b3764d706188d3ec7e812fab8660a3e330889b020bec3cecddf19b66fddadbb1a0cdd9ec61337cf9cca346199b193c11830cc33b8ebdbc524a58c6577fdd2b0589256f4b452274dcf6b72a81e661231333149eb7ecb37b0e5a74e6a9cab2832ad9424a185e9da9d11e619984a3334327ea0aa00d66aa8c06209f57afaa5ea3d8238f8750e99b2b09022c29ee2cc79022a50ea0ff13a36d6e69533156c53a91bbb0c8329ffcfeb78cb66542dafee5f481351b64fb6fe1ff9aeddbf671e2b99497307e8b7daced4258ab4b6fe369255a3158327fca5b213c3320ca2f693aa3564e564b379c32f23b0293c775badb4621471739f0db3b14b1f55db8906aab95556351cb72bcab8f3c32764097903f5c95ab50676a122da5507ff4fcf3b8fe059a9bb8dd6533b3365fc82126a184453aa7101339f9574b80a59f537211ee9d7003de19dea4029dcc6dbe83c8e756cc93c3c8d2e4d3ab175f7abb44fc40be9b83780483c8078d6e8128bf152922d8b442cfb402cb68aeebf6e68e31f15343765be0fbfb6c37f24e51eb55fc4e1b85f5f946ed985558d8222ada03bce8596823c1f3e2ae3abf63b59b01be937bffe8a0c67e587c5eb7c46affcb4ea954b59ee97dba1454f5d708a2fd1100732f308b01e72b39b759d9688af6884a50735773608a71154911812fa2107c59bd720df90a28571efc09b1d7e84c06f8014305a777d10879b96be9b8482192a476bdd9ddd6fee5b9e6d77cfe73bcd6c2e266a243407f513a46f63018217aab326088462dc5b1f133a89facf7dfeac3c98380f9a3e8fc6d1584a491fe64c70d478d6547a9abb7bc45c612ca0d283534e6617754e6f3d789763e20553433ea4bf83d74a7c61f3f67a88c1ecb1379aa6d05b0b0901fb38ff46f81dbb8cae168f0b232780bee5cb26d6308bfa8c5b00ba435adc3a59a6321ffcf1307a09dfa9607d1bbe66a3fca47d527f74df2ab1730a95b327a25c99b23f1589ac676", 0x1000}], 0x1}}], 0x1, 0x4000800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x3, &(0x7f0000003ac0), 0x4) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0003000000", 0x41d) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgctl$IPC_SET(0x0, 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0xc, 0xd, 0xffffe5a7, 0xffffffbe, 0x7, 0x3, 0x6, r8}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f00000003c0)=@assoc_id=r8, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000f59000/0x2000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff81, 0x1, 0x0, 0xfffffffffffffe27}, &(0x7f0000000800)=0x40) 3m35.382112852s ago: executing program 7 (id=5353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x8) r3 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r7 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r6, r7, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r8, 0x400, 0x1) syz_open_dev$loop(0x0, 0x80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$packet(0x11, 0x3, 0x300) fcntl$setown(r8, 0x8, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x4, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r9 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r9, 0x0, 0x400000002000000, 0x2) 3m34.553541989s ago: executing program 7 (id=5368): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m34.522233042s ago: executing program 7 (id=5370): r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbc5, &(0x7f0000002380)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0xcf) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000000400)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '%'}}]}, 0x45, 0x78a, &(0x7f0000000f80)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x4000, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x20400, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) mmap(&(0x7f00003f7000/0x3000)=nil, 0x3000, 0x1000008, 0xbb6e9fe6aa012c38, 0xffffffffffffffff, 0x85750000) sendfile(r4, r5, 0x0, 0x20000023896) close(r4) r6 = gettid() ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x10}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0x6}], 0x1, 0x0, 0x0, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r3}, 0x10) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3m34.343574706s ago: executing program 7 (id=5373): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) 3m33.866007224s ago: executing program 7 (id=5377): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000000}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) r4 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4814}, 0x40004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r9 = syz_open_procfs(r5, 0x0) pread64(r9, &(0x7f0000001240)=""/102390, 0x18ff6, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0xb, 0x8, "a2cce4d5417c6c9878a487debbb1e20db11c504aae9fe38f41480ee976389725ec1a79f8476ab9b163a5d1493cd9d51196bee62cdcc64e479805b6d3e3e7c76f", "4b5586be911d49ffc6d7ca17b0d9bcb70959c2ba50975fa74d29f204963b000fe10a96d55dd632284d8539981b6860424433680b02f8bfc27a78c00475e4a7da", "120410062d6e594b1038b3dc4af0919835c039aacd00a7ea629e59ad6ef5c384", [0x20, 0x6]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r12], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r13, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 3m33.865474074s ago: executing program 38 (id=5377): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x8000000000000}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) r4 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)) r5 = gettid() r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) sendmsg$NL80211_CMD_GET_WIPHY(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000840)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4814}, 0x40004) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) r9 = syz_open_procfs(r5, 0x0) pread64(r9, &(0x7f0000001240)=""/102390, 0x18ff6, 0x0) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0xb, 0x8, "a2cce4d5417c6c9878a487debbb1e20db11c504aae9fe38f41480ee976389725ec1a79f8476ab9b163a5d1493cd9d51196bee62cdcc64e479805b6d3e3e7c76f", "4b5586be911d49ffc6d7ca17b0d9bcb70959c2ba50975fa74d29f204963b000fe10a96d55dd632284d8539981b6860424433680b02f8bfc27a78c00475e4a7da", "120410062d6e594b1038b3dc4af0919835c039aacd00a7ea629e59ad6ef5c384", [0x20, 0x6]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=r12], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r13, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 1m1.438047808s ago: executing program 8 (id=8525): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa0000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x18) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x0, 0x9}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) close_range(r2, 0xffffffffffffffff, 0x0) 1m1.437563569s ago: executing program 8 (id=8526): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b7030000000000008500000075000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.41221553s ago: executing program 8 (id=8527): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="000000000149d4d89a795baf8d2788b3e618460d060000000a00030099fa3a1c872f0000180012800f0001007769726567756172640000"], 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x6, 0xd, 0x8, 0x4}, {0x5, 0x2, 0x8, 0x100}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1m1.28903734s ago: executing program 8 (id=8528): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000200)={[{@fat=@discard}, {@fat=@nfs}, {@dots}, {@fat=@check_strict}, {@fat=@uid}]}, 0x1, 0x22d, &(0x7f0000000300)="$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") keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000140)=""/247, 0xf7) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m1.217784146s ago: executing program 8 (id=8529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x37}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000eb99710c0000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000a05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x8, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) fcntl$getownex(r5, 0x10, &(0x7f00000009c0)={0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0}, &(0x7f0000000a40)=0xc) sendmmsg$unix(r6, &(0x7f0000001380)=[{{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)="ab79f59696aad4c5e4", 0x9}], 0x1, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00'], 0x40, 0x8080}}, {{&(0x7f0000000700)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000780)="7eb90dbd98fde4b75ae9c9073efdea17640d111ae416fab195402bf79bb5c4250a0ab20d0d7877a940ce26fcf61f684b5ca61883345e1bb106c9e77102bfa2eeff719889589de4e4e602293e42d166f54113237abafe35d3c51fccf4eec0223cda3a8e904fba4b11e37a2e19bdde3155a01504aecb468af53632f208f05d5baa", 0x80}, {&(0x7f0000000840)="d5f2a4022a774dc38d54b3528f78d24c79c3c53b7001b3a29fe4", 0x1a}, {&(0x7f0000000880)="897de4edd30f29f0f6db2d268c2f95af82782d22e3db6a54bd05ba23ec79c24118f8739f9b5ee729fb4953cde0c38b6a53276da143a6ab3c9669c7179f845394fb64adc46a1c1f434a85fb407329f350d74eb29e2fff2b70b4191ca9d5ebe69fc32617288169c7b7ba572bceda085de9d4726f784135ce0531a37c3f18ad7ac2102570ffa2bbf233cf7fcf531bea56e27f80abbb951b44851403fe92c48b3d1b702d4c3479ac96aae26318c75841d7a7b6d0318c40b77e6b9f9418baf495878fd4c0be71346082386d8529628740521960c943ed551f30c6079a2df3c55433297a09a77c451ef6a5cd328cae09086d7bcaf6dcc1ed", 0xf5}], 0x3, &(0x7f0000000b40)=[@cred={{0x1c, 0x1, 0x2, {r8, r9}}}], 0x20, 0x40000}}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000b80)="e7333319a39448fe1f9cbf95863c4f2f779f79fcfc95d79e437bbfdc93d1059e781e5ab43443f226dc67e1721484c8359fa135b6d59dbc613cfd61d80de25dab75ed3aa63df3bcd5a96dd46116d3a573db61388e69539300fbe0fdcc05d1c276557f7e3e67188fa64840228e0f620d05fcb2c1823e9ab82e27ab6dba15b114fed3ec7bd841a6927b343f376c9b6546e24018d262cc45f30414ac09c36b3696ba286a8d2c22364454c96aedfe819dc92ba95505856d10a8178a31091751d191171ac40cf3eef40f0b44ee8527eab79dd14482fb843de99a39798d2c22b2af98738c4fc8872565c6a34dd1e3", 0xeb}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="07477e947286c2a2eab2d8584cade9bd5f4f2d748f96dfa3a36286e619dcec", 0x1f}, {&(0x7f0000000f80)="168e1db40d25", 0x6}, {0x0}, {&(0x7f0000001240)="99175a5159467a18b517ee4eef88f123995de416fd24ec8d2463f3faedc488f2242468f2cdbb2a2498ec", 0x2a}], 0x6, 0x0, 0x0, 0x8000}}], 0x3, 0x0) rt_sigqueueinfo(r3, 0x31, &(0x7f0000000140)={0x2a, 0x1, 0x10001}) r10 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380), 0x82, 0x0) write$hidraw(r10, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) geteuid() 1m1.067879308s ago: executing program 8 (id=8530): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 1m1.034323631s ago: executing program 39 (id=8530): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 19.783871561s ago: executing program 9 (id=9371): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) futex(0x0, 0xa, 0x801, 0x0, 0x0, 0xfffffffc) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x145142, 0x0) removexattr(0x0, &(0x7f0000000240)=@known='system.posix_acl_access\x00') 19.728406086s ago: executing program 9 (id=9373): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_io_uring_setup(0x3827, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') lseek(r1, 0x93, 0x3) 19.681607649s ago: executing program 9 (id=9374): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getneightbl={0x14, 0x42, 0x10, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8044}, 0x90) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a0002"], 0x48}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x442, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee0, 0x8031, 0xffffffffffffffff, 0x0) mlockall(0x7) setuid(0xee01) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x50) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x581b03, 0x0) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(0xffffffffffffffff, 0x0, 0xffa8) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r6}, 0x10) 19.499191644s ago: executing program 9 (id=9377): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f00000001c0)=0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0xa4, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x70, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x58, 0x7, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x4, 0x7, 0x400000}, 0xc}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x81}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8, 0x0, 0x5}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 19.285714571s ago: executing program 9 (id=9382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) unshare(0xa000200) semget$private(0x0, 0x4000, 0x40) semtimedop(0x0, &(0x7f0000000000)=[{0x2, 0x40, 0x1800}], 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x78}}, 0x4000040) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) readv(r4, &(0x7f0000000880)=[{&(0x7f0000001cc0)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/44, 0x2c}, {&(0x7f0000000380)=""/17, 0x11}, {&(0x7f0000000580)=""/58, 0x3a}, {&(0x7f0000000800)=""/122, 0x7a}], 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_open_procfs(0x0, &(0x7f0000000440)='net/tcp\x00') 19.088787077s ago: executing program 9 (id=9386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18) 19.088322677s ago: executing program 40 (id=9386): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r2}, 0x18) 2.808911623s ago: executing program 1 (id=9705): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) readv(r1, &(0x7f0000000680)=[{&(0x7f0000000440)=""/196, 0xc4}], 0x1) dup3(r3, r2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r4, 0x0, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x8) 2.313556793s ago: executing program 1 (id=9710): getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 2.153119606s ago: executing program 1 (id=9712): creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d530488c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0xffffffff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f00)=@newtfilter={0xcc, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x80, 0x7, [@m_skbmod={0x7c, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x8, 0x7, 0x400000}, 0xc}}]}, {0x29, 0x6, "77732a752ab66739223c694d7881d1db79bbe576ece0ee6d3c1026a333727309191da35a0d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) 1.665033105s ago: executing program 6 (id=9721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x2, 0x8, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20040081}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x40080) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x40, 0x8000, 0x81, 0x72609c3, {{0xe, 0x4, 0x2, 0x2a, 0x38, 0x67, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@end, @timestamp={0x44, 0x20, 0x39, 0x0, 0x7, [0x8e8, 0x1, 0x2, 0x7, 0x81, 0x81, 0x78a]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x700, 0x80, 0x4, 0xab, {{0xc, 0x4, 0x3, 0x26, 0x30, 0x65, 0x0, 0x27, 0x29, 0x0, @private=0xa010101, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0xc4, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x1}, {@multicast2, 0x629}, {@local, 0x6}]}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r12, &(0x7f00000001c0)={0x1d, r13}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r14}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') ioperm(0xa, 0x7fb, 0xe0f3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_raw(r12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f1, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffe, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0xffff, 0xe, {{0x3d, 0x4, 0x0, 0x32, 0xf4, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x29}, {[@end, @timestamp_addr={0x44, 0x24, 0x4b, 0x1, 0x9, [{@multicast1}, {@broadcast, 0x7}, {@multicast2, 0x1}, {@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x1f, [@empty, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x0, 0x11, "226be21a631617c8f25f7148694c93"}, {0x2, 0xf, "7cc763aee8a8c9e018c855ab90"}, {0x2, 0xe, "720bff14ee2a14b1c2dcb948"}, {0x7, 0x6, "7ebdd369"}, {0x7, 0x10, "ae06be79165b5dde8fef63b82ea5"}]}, @timestamp={0x44, 0x2c, 0xc1, 0x0, 0x9, [0x8, 0xaf, 0x0, 0x1f59, 0xfffffffe, 0xfffffff6, 0x66b5, 0x2, 0x3, 0x8000]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x77, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x45}, {@loopback, 0xa5}, {@multicast1, 0x8}, {@broadcast, 0xb}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="200028bd700008000300010000001400022076657468305f746f5f626f6e64000000080900"/50, @ANYRES32=r5, @ANYBLOB="080003000300000008000300010000000800030003000000140002006e657464657673696d3000000000000008000300030000001400020076657468305f746f5f626f6e640000002000018008000100", @ANYRES32=r6, @ANYBLOB="14000200766574683000000000000000000000005400018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000300010000001400020070696d3672656700000000000000000008000100", @ANYRES32=r16, @ANYBLOB="1400020076657468315f766972745f7769666900"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x48000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26e8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 1.596952501s ago: executing program 6 (id=9724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync_file_range(0xffffffffffffffff, 0x10, 0x6, 0x7) 1.579240152s ago: executing program 6 (id=9725): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010000104000000000000000000000006", @ANYRES32=0x0, @ANYBLOB="000000000149d4d89a795baf8d2788b3e618460d060000000a00030099fa3a1c872f0000180012800f0001007769726567756172640000"], 0x44}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x2}, {0x14, 0x5, [{0x6, 0xd, 0x8, 0x4}, {0x5, 0x2, 0x8, 0x100}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 1.445569043s ago: executing program 6 (id=9727): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) socket(0x400000000010, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105500, &(0x7f0000000040)=@usbdevfs_connect={0x6a0}) 1.397978817s ago: executing program 0 (id=9728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1.36341267s ago: executing program 6 (id=9729): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) time(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001400)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r4 = dup3(0xffffffffffffffff, r3, 0x0) write$UHID_INPUT(r4, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) 1.346205661s ago: executing program 0 (id=9730): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.295268145s ago: executing program 0 (id=9731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sync_file_range(0xffffffffffffffff, 0x10, 0x6, 0x7) 1.263995078s ago: executing program 0 (id=9732): bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000000080), 0x8, 0x601, &(0x7f0000001440)="$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") socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x90, 0x7f, {0x5, 0x4, 0x2, 0x24, 0x5, 0x67, 0x3ff, 0xa7, 0x5c, 0x8, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x34}}}}}}}, 0x0) 1.182670564s ago: executing program 5 (id=9734): io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x1f, 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0}, 0x18) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000a040335727bbc2c5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0xff6, &(0x7f00000014c0)=""/4086}, 0x94) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000075659685c28ec018000002000000000000000c00"/36, @ANYRES32=r7, @ANYBLOB], 0x28}}, 0x0) setuid(r7) quotactl_fd$Q_QUOTAOFF(r4, 0x1, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r8, 0xffffffffffffffff, 0x200000000000000) (fail_nth: 1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)=ANY=[@ANYBLOB="00010000", @ANYRES16=r9, @ANYBLOB="00032cbd7000fbdbdf254400000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x100}}, 0x20004801) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) 1.126536059s ago: executing program 1 (id=9735): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x2, 0x8, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20040081}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x40080) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x40, 0x8000, 0x81, 0x72609c3, {{0xe, 0x4, 0x2, 0x2a, 0x38, 0x67, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@end, @timestamp={0x44, 0x20, 0x39, 0x0, 0x7, [0x8e8, 0x1, 0x2, 0x7, 0x81, 0x81, 0x78a]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x700, 0x80, 0x4, 0xab, {{0xc, 0x4, 0x3, 0x26, 0x30, 0x65, 0x0, 0x27, 0x29, 0x0, @private=0xa010101, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0xc4, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x1}, {@multicast2, 0x629}, {@local, 0x6}]}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r12, &(0x7f00000001c0)={0x1d, r13}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r14}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') ioperm(0xa, 0x7fb, 0xe0f3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_raw(r12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f1, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffe, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0xffff, 0xe, {{0x3d, 0x4, 0x0, 0x32, 0xf4, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x29}, {[@end, @timestamp_addr={0x44, 0x24, 0x4b, 0x1, 0x9, [{@multicast1}, {@broadcast, 0x7}, {@multicast2, 0x1}, {@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x1f, [@empty, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x0, 0x11, "226be21a631617c8f25f7148694c93"}, {0x2, 0xf, "7cc763aee8a8c9e018c855ab90"}, {0x2, 0xe, "720bff14ee2a14b1c2dcb948"}, {0x7, 0x6, "7ebdd369"}, {0x7, 0x10, "ae06be79165b5dde8fef63b82ea5"}]}, @timestamp={0x44, 0x2c, 0xc1, 0x0, 0x9, [0x8, 0xaf, 0x0, 0x1f59, 0xfffffffe, 0xfffffff6, 0x66b5, 0x2, 0x3, 0x8000]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x77, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x45}, {@loopback, 0xa5}, {@multicast1, 0x8}, {@broadcast, 0xb}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="200028bd700008000300010000001400022076657468305f746f5f626f6e64000000080900"/50, @ANYRES32=r5, @ANYBLOB="080003000300000008000300010000000800030003000000140002006e657464657673696d3000000000000008000300030000001400020076657468305f746f5f626f6e640000002000018008000100", @ANYRES32=r6, @ANYBLOB="14000200766574683000000000000000000000005400018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000300010000001400020070696d3672656700000000000000000008000100", @ANYRES32=r16, @ANYBLOB="1400020076657468315f766972745f7769666900"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x48000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26e8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 1.095744702s ago: executing program 0 (id=9736): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") (async) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000b80)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESDEC], 0x2, 0x699, &(0x7f0000000140)="$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") openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x6000000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0xf) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) 802.079515ms ago: executing program 5 (id=9737): syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000), 0x4, 0x4f2, &(0x7f0000000c80)="$eJzs3c9vVF0ZAOD3Tjttv34DBWWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMXY+6dSzu0HVqk7dDO8yR37j3nXuY9Z4ZzztzDDCeAnnUuItYiYiAi7kfESJ6f5FvcbG3pda9fPZlef/VkOolm8+4/kux8mhdtfyb1af6cQxHxg+9G/DjZHrexsjo/Va1WFvP06FJtYbSxsnp5rpDnTEyOT45dv3JtYt/qerb2m5ffmbv9w9/99ksv/rj2zZ+mxSr97ER2rr0e+6lV9WKU2vL6I+L2QQTrkv787w9HT9raPhMR57P2PxJ92bsJABxnzeZINEfa0wDAcZfe/5ciKZTzuYBSFArlcmsO70wMF6r1xtKlkfryw5nI5rBORbHwYK5aGcvnCk9FMUnT49nxZnpiS/pKRJyOiJ8PfpKly9P16kw3P/gAQA/7dMv4/+/B1vgPABxzQ+95va8IAMDR977jPwBw9Bn/AaD3vMf4b+ofAI4J9/8A0HuM/wDQe3Yd/58eTjkAgEPx/Tt30q25nv//1zOPVpa/VXp0eabSmC/XlqfL0/XFhfJsvT5brZSnm83dnq9ary+MX91INlZW79Xqyw+X7s3VpmYr9yrFA64PALC702ef/zmJiLUbn2RbtK3lYKyG463Q7QIAXdPX7QIAXeP3PNC79nCPbxoAjrkdluh9S8evCD2z+CscVRc/b/4fepX5f+hd/9/8/7f3vRzA4TP/D72r2Uys+Q8APcYcP/BB//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaqUbUmhnK0FvpY+FsrliBMRcSqKyYO5amUsIk5GxJ8Gi4NperzbhQYAPlDhb0m+/tfFkQulrWcHkv8MZvuI+Mkv7/7i8dTS0uJ4mv/PjfylZ3n+xEA3KgAAtLu5Pas1Tuf7thv516+eTL/ZDrOIL2+1FhdN467nW+tMf/Rn+6EoRsTwv5I83ZJ+Xunbh/hrTyPic5v1f9wWoZTNgbRWPt0aP4194gDib77+W+MX3opfyM6l+2L2Wnx2H8oCveb5rVY/mbe9tInl7a8Q57L9zu1/KOuhPtyb/m99W/9X2Oj/+rbFT7I2f24j/e6SvLz6++9ty2yOtM49jfhC/07xk434SYf+98Ie6/iXL375fKdzzV9FXIyd47fUsm52dKm2MNpYWb08V5uarcxWHk5MTI5Pjl2/cm1iNJujbj3+YacYf79x6WSn+Gn9hzvEH9ql/l/bY/1//d/7P/rKO+J/46s7v/9n3hE/HRO/vsf4U8M3Oy7fncaf6VD/3d7/S3uM/+KvqzN7vBQAOASNldX5qWq1srjLQfpZc7drHBzNg1iL+AiKkR8MxEdRjJ4/6HbPBBy0zUbf7ZIAAAAAAAAAAAAAAACdNFZW5wfjYH9O1O06AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHz9LwAA//9Jt84K") (async) ioctl$EVIOCGABS2F(0xffffffffffffffff, 0x8018456f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async, rerun: 32) rename(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000180)='./file0/file0\x00') (rerun: 32) 789.406806ms ago: executing program 1 (id=9738): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x702, &(0x7f0000001140)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) (fail_nth: 1) 788.665656ms ago: executing program 0 (id=9739): r0 = socket$packet(0x11, 0xa, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000780)='timer_start\x00', r1, 0x0, 0x1}, 0x18) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x2000}], 0x1, 0x0, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0e9496d2e774f9bf20090000"], 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000840)=@deltaction={0x70, 0x31, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x30, 0x0, 0x0, @TCA_ACT_INDEX={0x4, 0x3, 0x2}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x0, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x40}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x70}}, 0x80) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000ff0f000007363b4016578e0e369cda4a6f4404a883b3ef4849437c612df9b0b078d19d4e4adcd8a57604b16f4de459e9eefc9e3cf06a748fe209dcf4dd7e22337da53a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="e0b7b6dd13ef0c548e9eab4cdf632196e30db0fc058454afc663941ef099908addd791c1a941c6f909282436e7865bcc6eb201da995f60340286419130446ac364cd15ed2d54396605a1eefafd0aa41b789195f3e319aa76ebd5d10d03cb4f0381aecb5a93296c96ca317e48e09ac8a34971ca4b286f6a35eef8d629cf448e8457b041463339fa018e9d0f294995087695fb9e4399"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x7fff}, 0x18) syz_init_net_socket$llc(0x1a, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x200000000000000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5ebe, 0xa00000}}, './file0\x00'}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000001f) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r9, 0x402, 0x8000003d) close_range(r8, r9, 0x0) 764.697499ms ago: executing program 5 (id=9740): socket$inet(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYBLOB="5fc5e0cc89c3068519a1a4d35631da3ac1da1498ccbed34b45633d4cecc0ce311f7adfa5ee00b0ede9ce477b0717355c8145c254b208e7b26c8704f414550ccfcd9f78ef990092397d833e4961136c5ad068266b4af5edbd182a21f3"], 0xff, 0x2b1, &(0x7f0000000100)="$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") 501.69938ms ago: executing program 6 (id=9741): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0xe4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0x2000}, 0x4048010) 492.96274ms ago: executing program 5 (id=9742): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_io_uring_setup(0x83a, &(0x7f0000000180)={0x0, 0x2b94, 0x1000, 0x4, 0x3cf}, &(0x7f0000000040), &(0x7f0000000000)) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x8002, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1500000065ffff", @ANYRESOCT], 0xd) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 440.672994ms ago: executing program 1 (id=9743): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30"], 0x122}}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r4, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/215, 0xd7}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) r6 = creat(&(0x7f0000000580)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @local}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x3}]]}}}]}, 0x40}}, 0x0) setsockopt(r6, 0x9, 0x5, 0x0, 0x0) rename(&(0x7f0000000300)='./file2\x00', &(0x7f0000000780)='./file2/file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='sched_switch\x00', r2, 0x0, 0x400}, 0x18) openat$cgroup_ro(r5, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2190002, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0x208e24b) fdatasync(r8) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='geneve0\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) 440.055924ms ago: executing program 5 (id=9744): r0 = syz_io_uring_setup(0x394f, &(0x7f00000009c0)={0x0, 0x5881, 0x1000, 0x8005, 0x801001c2}, &(0x7f0000000240)=0x0, &(0x7f0000000900)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) 273.258278ms ago: executing program 5 (id=9745): creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d530488c) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0xffffffff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f00)=@newtfilter={0xcc, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_ACT={0x80, 0x7, [@m_skbmod={0x7c, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4cc0, 0x3, 0x8, 0x7, 0x400000}, 0xc}}]}, {0x29, 0x6, "77732a752ab66739223c694d7881d1db79bbe576ece0ee6d3c1026a333727309191da35a0d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x81}, 0x800) 225.984552ms ago: executing program 4 (id=9746): getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b7000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 176.786726ms ago: executing program 4 (id=9747): bpf$ITER_CREATE(0x21, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xb4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xffffffbfffff8000, 0x8) close(r3) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0xe41, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./cgroup\x00', 0x0, 0x75809, 0x0) mount(0x0, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x21a8f5, 0x0) r5 = timerfd_create(0x0, 0x800) io_submit(0x0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xffff, r5, &(0x7f0000000000)="66fe1ff6b94d79", 0x7, 0x7}]) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fd7f000000000000000000180100002020702500000000002120207b1af8ff00000000bfa1000000004bd243d4acef546a000007010000f8ffffffb702000008000000b70300000000008385"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x92ebc4caeab68bb0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x404}, 0x0) 153.767587ms ago: executing program 4 (id=9748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 127.350399ms ago: executing program 4 (id=9749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x2, 0x8, 0x3, 0x0, 0x0, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20040081}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r2}, 0x3d) r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x7, 0x40080) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'team_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000003c0)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'sit0\x00', &(0x7f00000004c0)={'gre0\x00', 0x0, 0x40, 0x8000, 0x81, 0x72609c3, {{0xe, 0x4, 0x2, 0x2a, 0x38, 0x67, 0x0, 0x6, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@end, @timestamp={0x44, 0x20, 0x39, 0x0, 0x7, [0x8e8, 0x1, 0x2, 0x7, 0x81, 0x81, 0x78a]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x700, 0x80, 0x4, 0xab, {{0xc, 0x4, 0x3, 0x26, 0x30, 0x65, 0x0, 0x27, 0x29, 0x0, @private=0xa010101, @private=0xa010102, {[@timestamp_addr={0x44, 0x1c, 0xc4, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x1}, {@multicast2, 0x629}, {@local, 0x6}]}]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r12, &(0x7f00000001c0)={0x1d, r13}, 0x10) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r14}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') ioperm(0xa, 0x7fb, 0xe0f3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$can_raw(r12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r15, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x2, 0x0, 0x0, 0x8000002, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x0, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x3ff, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x7, 0xc3f1, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x0, 0xfffffffc, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x1, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffe, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0x4, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x3, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xb, 0x0, 0x0, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000740)={'syztnl2\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x8000, 0x7, 0xffff, 0xe, {{0x3d, 0x4, 0x0, 0x32, 0xf4, 0x65, 0x0, 0x0, 0x29, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x29}, {[@end, @timestamp_addr={0x44, 0x24, 0x4b, 0x1, 0x9, [{@multicast1}, {@broadcast, 0x7}, {@multicast2, 0x1}, {@multicast1, 0x8}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x1f, [@empty, @broadcast, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @cipso={0x86, 0x4a, 0xffffffffffffffff, [{0x0, 0x11, "226be21a631617c8f25f7148694c93"}, {0x2, 0xf, "7cc763aee8a8c9e018c855ab90"}, {0x2, 0xe, "720bff14ee2a14b1c2dcb948"}, {0x7, 0x6, "7ebdd369"}, {0x7, 0x10, "ae06be79165b5dde8fef63b82ea5"}]}, @timestamp={0x44, 0x2c, 0xc1, 0x0, 0x9, [0x8, 0xaf, 0x0, 0x1f59, 0xfffffffe, 0xfffffff6, 0x66b5, 0x2, 0x3, 0x8000]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x77, 0x1, 0x8, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x45}, {@loopback, 0xa5}, {@multicast1, 0x8}, {@broadcast, 0xb}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="200028bd700008000300010000001400022076657468305f746f5f626f6e64000000080900"/50, @ANYRES32=r5, @ANYBLOB="080003000300000008000300010000000800030003000000140002006e657464657673696d3000000000000008000300030000001400020076657468305f746f5f626f6e640000002000018008000100", @ANYRES32=r6, @ANYBLOB="14000200766574683000000000000000000000005400018008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="08000300010000001400020070696d3672656700000000000000000008000100", @ANYRES32=r16, @ANYBLOB="1400020076657468315f766972745f7769666900"], 0xf8}, 0x1, 0x0, 0x0, 0x1}, 0x48000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x26e8}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 59.274355ms ago: executing program 4 (id=9750): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000300)=0x8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x200000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x3, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x5e, 0x54, 0x0, 0x3, 0x8b008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0x8}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 0s ago: executing program 4 (id=9751): r0 = socket(0x2c, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x1ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}, 0x3, 0x5}, 0x90) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x55e, &(0x7f0000001ac0)="$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") syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0xc0ed0006, &(0x7f0000000240)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@bh}, {@noload}, {@data_err_ignore}, {@noblock_validity}]}, 0xfe, 0x445, &(0x7f0000000900)="$eJzs3MtvG0UYAPBv7Tz6JKGUR0MLgYKIeCRN+qAHLiCQOICEBIciTiFJq1C3QU2QaBVB4BCOqBJ3xBGJv4ATXBBwQuIKd1SpQrm0cDJaezd1HTuNE6cu8e8nbTvjHXfm293xzs7YDaBrDad/JBH7IuKPiBioZm8vMFz96+bK4tQ/K4tTSZTLb/+dVMrdWFmcyovm79tbzZTLWb6/Qb3L70VMlkozl7L82MKFD8fmL195YfbC5LmZczMXJ9J/7UjfqYmTbYkzjevG0Cdzhw+9/u7VN6fOXH3/l+/SGvZl+2vjaJfh6tFt6Ol2V9Zh+2vSSU8HG0JLihGRnq7eSv8fiGLsXt03EK993tHGAduqXC6XG92fM0tlYAdLotMtADojv9Gnz7/5dpeGHveE6y9XH4DSuG9mW3VPTxSyMr11z7ftNBwRZ5b+/TrdYpvmIQAAav2Qjn+ebzT+K8RDNeXuy9ZQBiPi/og4EBEPRMTBiHgwolL24Yh4pMX661dI1o5/Ctc2FdgGpeO/l7K1rdvHf/noLwaLWW5/Jf7e5OxsaeZYdkxGorc/zY+vU8ePr/7+ZbN9teO/dEvrz8eCWTuu9dRN0E1PLkxuJeZa1z+LGOppFH8S+TJOEhGHImJok3XMPvvt4Wb77hz/OtqwzlT+JuKZ6vlfirr4c0nD9cnTp08cH3/x1MTJsV1Rmjk2ll8Va/362/JbzerfUvxtkJ7/PQ2v/9X4B5NdEfOXr5yvrNfOt17H8p9fNH2m2ez135e8U0n3Za99PLmwcGk8oi95Y+3rE7fem+fz8mn8I0cb9/8DcetIPBoR6UV8JCIei4jHs7Y/ERFPRsTRdeL/+ZWnPmg9/nVm5dsojX/6Tuc/as9/64ni+Z++bz3+XHr+T1RSI9krG/n822gDt3LsAAAA4P+iUPkOfFIYXU0XCqOj1e/wH4w9hdLc/MJzZ+c+ujhd/a78YPQW8pmugZr50PFsbjjPT9Tlj2fzxl8Vd1fyo1NzpelOBw9dbm+T/p/6q9jp1gHbzu+1oHvV9f/yp51qCHDXuf9D99L/oXvp/9C9GvV/cwDQHdz/oXvp/9C99H/oXvo/dKWmv40vbOkn/xI7PhGFe6IZOz/Rs+H/zGKTif6Guzr9yQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAe/wUAAP//ziLlLw==") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000000d140e0029bd7000fcdbdf25080001000100000024000300000000000800010000000000"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x9, "0040001e1d113c812e5d6000"}) r7 = syz_open_pts(r6, 0x0) dup3(r7, r6, 0x0) ppoll(&(0x7f0000000140)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x3) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r8, 0x7fff, 0x0) kernel console output (not intermixed with test programs): 444.460651][T30231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 444.460698][T30231] Call Trace: [ 444.460706][T30231] [ 444.460715][T30231] __dump_stack+0x1d/0x30 [ 444.460737][T30231] dump_stack_lvl+0xe8/0x140 [ 444.460757][T30231] dump_stack+0x15/0x1b [ 444.460775][T30231] should_fail_ex+0x265/0x280 [ 444.460802][T30231] should_fail+0xb/0x20 [ 444.460919][T30231] should_fail_usercopy+0x1a/0x20 [ 444.460949][T30231] _copy_from_user+0x1c/0xb0 [ 444.460987][T30231] ___sys_sendmsg+0xc1/0x1d0 [ 444.461029][T30231] __x64_sys_sendmsg+0xd4/0x160 [ 444.461089][T30231] x64_sys_call+0x191e/0x2ff0 [ 444.461141][T30231] do_syscall_64+0xd2/0x200 [ 444.461177][T30231] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 444.461234][T30231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.461260][T30231] RIP: 0033:0x7f562999ebe9 [ 444.461275][T30231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.461380][T30231] RSP: 002b:00007f5628407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.461405][T30231] RAX: ffffffffffffffda RBX: 00007f5629bc5fa0 RCX: 00007f562999ebe9 [ 444.461446][T30231] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003 [ 444.461463][T30231] RBP: 00007f5628407090 R08: 0000000000000000 R09: 0000000000000000 [ 444.461559][T30231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.461576][T30231] R13: 00007f5629bc6038 R14: 00007f5629bc5fa0 R15: 00007ffdf692d918 [ 444.461602][T30231] [ 444.670019][T28297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.832989][T30255] vhci_hcd: invalid port number 23 [ 445.023781][T30273] FAULT_INJECTION: forcing a failure. [ 445.023781][T30273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.036943][T30273] CPU: 0 UID: 0 PID: 30273 Comm: syz.5.9248 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 445.036988][T30273] Tainted: [W]=WARN [ 445.036997][T30273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.037034][T30273] Call Trace: [ 445.037040][T30273] [ 445.037048][T30273] __dump_stack+0x1d/0x30 [ 445.037074][T30273] dump_stack_lvl+0xe8/0x140 [ 445.037099][T30273] dump_stack+0x15/0x1b [ 445.037180][T30273] should_fail_ex+0x265/0x280 [ 445.037274][T30273] should_fail+0xb/0x20 [ 445.037295][T30273] should_fail_usercopy+0x1a/0x20 [ 445.037393][T30273] _copy_to_iter+0xcf/0xe30 [ 445.037430][T30273] ? obj_cgroup_charge_account+0x122/0x1a0 [ 445.037502][T30273] ? xas_load+0x413/0x430 [ 445.037553][T30273] ? xas_load+0x413/0x430 [ 445.037630][T30273] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 445.037660][T30273] __skb_datagram_iter+0x2f4/0x690 [ 445.037704][T30273] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 445.037734][T30273] skb_copy_datagram_iter+0x3d/0x110 [ 445.037758][T30273] tcp_recvmsg_locked+0xa68/0x1fd0 [ 445.037818][T30273] ? bpf_prog_8a66da00847dbae2+0x1d/0x49 [ 445.037840][T30273] ? is_bpf_text_address+0x141/0x160 [ 445.037893][T30273] ? kmem_cache_free+0x257/0x300 [ 445.037929][T30273] ? __kernel_text_address+0xd/0x40 [ 445.037970][T30273] ? get_perf_callchain+0x456/0x530 [ 445.037999][T30273] ? __rcu_read_unlock+0x4f/0x70 [ 445.038058][T30273] ? avc_has_perm_noaudit+0x1b1/0x200 [ 445.038092][T30273] ? _raw_spin_unlock_bh+0x36/0x40 [ 445.038133][T30273] ? lock_sock_nested+0x112/0x140 [ 445.038168][T30273] ? avc_has_perm+0xf7/0x180 [ 445.038237][T30273] tcp_recvmsg+0x12e/0x490 [ 445.038270][T30273] ? selinux_socket_recvmsg+0x175/0x1b0 [ 445.038301][T30273] ? __pfx_tcp_recvmsg+0x10/0x10 [ 445.038332][T30273] inet_recvmsg+0xb7/0x290 [ 445.038392][T30273] sock_recvmsg+0xf6/0x170 [ 445.038563][T30273] __sys_recvfrom+0x122/0x1f0 [ 445.038600][T30273] __x64_sys_recvfrom+0x76/0x90 [ 445.038696][T30273] x64_sys_call+0x2f20/0x2ff0 [ 445.038724][T30273] do_syscall_64+0xd2/0x200 [ 445.038757][T30273] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 445.038848][T30273] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 445.038879][T30273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.038906][T30273] RIP: 0033:0x7f6d3cbfebe9 [ 445.038922][T30273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.038973][T30273] RSP: 002b:00007f6d3b646038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 445.038996][T30273] RAX: ffffffffffffffda RBX: 00007f6d3ce26090 RCX: 00007f6d3cbfebe9 [ 445.039012][T30273] RDX: fffffffffffffd0b RSI: 0000200000000080 RDI: 0000000000000003 [ 445.039028][T30273] RBP: 00007f6d3b646090 R08: 0000000000000000 R09: fffffffffffffd25 [ 445.039044][T30273] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000001 [ 445.039060][T30273] R13: 00007f6d3ce26128 R14: 00007f6d3ce26090 R15: 00007ffdd2b73f78 [ 445.039140][T30273] [ 445.358462][T30277] SELinux: policydb version 0 does not match my version range 15-35 [ 445.367593][T30277] SELinux: failed to load policy [ 445.462909][T30289] 9pnet_fd: Insufficient options for proto=fd [ 445.500329][T30292] FAULT_INJECTION: forcing a failure. [ 445.500329][T30292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 445.513748][T30292] CPU: 0 UID: 0 PID: 30292 Comm: syz.4.9258 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 445.513792][T30292] Tainted: [W]=WARN [ 445.513801][T30292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 445.513814][T30292] Call Trace: [ 445.513820][T30292] [ 445.513875][T30292] __dump_stack+0x1d/0x30 [ 445.513901][T30292] dump_stack_lvl+0xe8/0x140 [ 445.513921][T30292] dump_stack+0x15/0x1b [ 445.513976][T30292] should_fail_ex+0x265/0x280 [ 445.514003][T30292] should_fail+0xb/0x20 [ 445.514026][T30292] should_fail_usercopy+0x1a/0x20 [ 445.514084][T30292] copy_fpstate_to_sigframe+0x628/0x7d0 [ 445.514192][T30292] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 445.514238][T30292] ? x86_task_fpu+0x36/0x60 [ 445.514273][T30292] get_sigframe+0x34d/0x490 [ 445.514329][T30292] ? get_signal+0xdc8/0xf70 [ 445.514370][T30292] x64_setup_rt_frame+0xa8/0x580 [ 445.514393][T30292] arch_do_signal_or_restart+0x27c/0x480 [ 445.514473][T30292] exit_to_user_mode_loop+0x7a/0x100 [ 445.514501][T30292] do_syscall_64+0x1d6/0x200 [ 445.514536][T30292] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 445.514601][T30292] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 445.514655][T30292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.514677][T30292] RIP: 0033:0x7f8d0c25ebe7 [ 445.514695][T30292] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 445.514719][T30292] RSP: 002b:00007f8d0acbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 445.514744][T30292] RAX: 0000000000000013 RBX: 00007f8d0c485fa0 RCX: 00007f8d0c25ebe9 [ 445.514759][T30292] RDX: 0000000000000001 RSI: 0000200000001340 RDI: 0000000000000008 [ 445.514773][T30292] RBP: 00007f8d0acbf090 R08: 0000000000000000 R09: 0000000000000000 [ 445.514871][T30292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.514883][T30292] R13: 00007f8d0c486038 R14: 00007f8d0c485fa0 R15: 00007ffce0085cb8 [ 445.514902][T30292] [ 445.630072][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 445.630091][ T29] audit: type=1326 audit(1755197914.595:46731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30283 comm="syz.6.9254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f89c5d65ba7 code=0x0 [ 445.751850][ T29] audit: type=1326 audit(1755197914.725:46732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30298 comm="syz.9.9259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5629995ba7 code=0x7ffc0000 [ 445.775502][ T29] audit: type=1326 audit(1755197914.725:46733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30298 comm="syz.9.9259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f562993add9 code=0x7ffc0000 [ 445.799563][ T29] audit: type=1326 audit(1755197914.745:46734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30298 comm="syz.9.9259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f562999ebe9 code=0x7ffc0000 [ 445.823270][ T29] audit: type=1326 audit(1755197914.745:46735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30298 comm="syz.9.9259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5629995ba7 code=0x7ffc0000 [ 445.846932][ T29] audit: type=1326 audit(1755197914.745:46736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30298 comm="syz.9.9259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f562993add9 code=0x7ffc0000 [ 445.870490][ T29] audit: type=1326 audit(1755197914.755:46737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30298 comm="syz.9.9259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5629995ba7 code=0x7ffc0000 [ 445.894019][ T29] audit: type=1326 audit(1755197914.755:46738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30298 comm="syz.9.9259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f562993add9 code=0x7ffc0000 [ 445.917680][ T29] audit: type=1326 audit(1755197914.755:46739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30298 comm="syz.9.9259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5629995ba7 code=0x7ffc0000 [ 445.941199][ T29] audit: type=1326 audit(1755197914.755:46740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30298 comm="syz.9.9259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f562993add9 code=0x7ffc0000 [ 446.347828][T30326] vhci_hcd: invalid port number 254 [ 446.485743][T30333] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 446.626060][T30345] netlink: 'syz.9.9275': attribute type 2 has an invalid length. [ 446.633877][T30345] netlink: 'syz.9.9275': attribute type 9 has an invalid length. [ 446.641949][T30345] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.9275'. [ 446.704368][T30352] loop0: detected capacity change from 0 to 512 [ 446.734870][T30352] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.747787][T30352] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.763404][T30352] FAULT_INJECTION: forcing a failure. [ 446.763404][T30352] name failslab, interval 1, probability 0, space 0, times 0 [ 446.776129][T30352] CPU: 1 UID: 0 PID: 30352 Comm: syz.0.9278 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 446.776180][T30352] Tainted: [W]=WARN [ 446.776258][T30352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 446.776276][T30352] Call Trace: [ 446.776325][T30352] [ 446.776335][T30352] __dump_stack+0x1d/0x30 [ 446.776365][T30352] dump_stack_lvl+0xe8/0x140 [ 446.776473][T30352] dump_stack+0x15/0x1b [ 446.776496][T30352] should_fail_ex+0x265/0x280 [ 446.776527][T30352] should_failslab+0x8c/0xb0 [ 446.776562][T30352] kmem_cache_alloc_noprof+0x50/0x310 [ 446.776670][T30352] ? __es_insert_extent+0x508/0xee0 [ 446.776714][T30352] __es_insert_extent+0x508/0xee0 [ 446.776837][T30352] ext4_es_cache_extent+0x276/0x370 [ 446.776932][T30352] ext4_find_extent+0x336/0x7a0 [ 446.776968][T30352] ext4_ext_map_blocks+0x11f/0x38a0 [ 446.777006][T30352] ? __rcu_read_unlock+0x4f/0x70 [ 446.777041][T30352] ? copy_from_kernel_nofault_allowed+0x9c/0xc0 [ 446.777141][T30352] ? __account_obj_stock+0x211/0x350 [ 446.777175][T30352] ? x86_call_depth_emit_accounting+0x128/0x2e0 [ 446.777231][T30352] ? copy_from_kernel_nofault_allowed+0x9c/0xc0 [ 446.777281][T30352] ? __rcu_read_unlock+0x4f/0x70 [ 446.777331][T30352] ext4_map_query_blocks+0xa8/0x480 [ 446.777377][T30352] ext4_map_blocks+0x330/0xd00 [ 446.777421][T30352] ? __traceiter_kfree+0x2e/0x50 [ 446.777451][T30352] ? security_compute_sid+0x11da/0x1290 [ 446.777555][T30352] ext4_getblk+0x114/0x510 [ 446.777596][T30352] ext4_bread_batch+0x5c/0x320 [ 446.777651][T30352] __ext4_find_entry+0x840/0xf40 [ 446.777709][T30352] ? avc_has_perm_noaudit+0x1b1/0x200 [ 446.777751][T30352] ? may_create+0x26e/0x2b0 [ 446.777780][T30352] ext4_lookup+0xbb/0x390 [ 446.777841][T30352] ? __pfx_ext4_lookup+0x10/0x10 [ 446.777888][T30352] path_openat+0xcf3/0x2170 [ 446.777929][T30352] do_filp_open+0x109/0x230 [ 446.777968][T30352] do_sys_openat2+0xa6/0x110 [ 446.778021][T30352] __x64_sys_openat+0xf2/0x120 [ 446.778066][T30352] x64_sys_call+0x2e9c/0x2ff0 [ 446.778095][T30352] do_syscall_64+0xd2/0x200 [ 446.778144][T30352] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 446.778177][T30352] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 446.778277][T30352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.778307][T30352] RIP: 0033:0x7f1d9375ebe9 [ 446.778328][T30352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.778356][T30352] RSP: 002b:00007f1d921c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 446.778382][T30352] RAX: ffffffffffffffda RBX: 00007f1d93985fa0 RCX: 00007f1d9375ebe9 [ 446.778399][T30352] RDX: 0000000000000441 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 446.778417][T30352] RBP: 00007f1d921c7090 R08: 0000000000000000 R09: 0000000000000000 [ 446.778459][T30352] R10: 000000000000014a R11: 0000000000000246 R12: 0000000000000001 [ 446.778476][T30352] R13: 00007f1d93986038 R14: 00007f1d93985fa0 R15: 00007ffd16300538 [ 446.778502][T30352] [ 446.794196][T30352] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.9278: corrupted xattr block 19: overlapping e_value [ 446.934134][T30356] lo speed is unknown, defaulting to 1000 [ 446.937947][T30352] EXT4-fs (loop0): Remounting filesystem read-only [ 447.077324][T30356] chnl_net:caif_netlink_parms(): no params data found [ 447.079436][T30352] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 447.079671][T30352] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 447.130340][T30352] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 447.149923][T24378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.167246][T30356] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.174448][T30356] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.181744][T30356] bridge_slave_0: entered allmulticast mode [ 447.188525][T30356] bridge_slave_0: entered promiscuous mode [ 447.196464][T30356] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.204042][T30356] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.212417][T30356] bridge_slave_1: entered allmulticast mode [ 447.218999][T30356] bridge_slave_1: entered promiscuous mode [ 447.242628][ T3326] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.268223][T30356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.291366][T30356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.311066][ T3326] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.369507][T30377] loop0: detected capacity change from 0 to 512 [ 447.376983][T30377] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 447.386169][T30377] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 447.405239][T30377] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 447.421065][T30377] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 447.431313][T30356] team0: Port device team_slave_0 added [ 447.438444][ T3326] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.439385][T30377] System zones: 0-2, 18-18, 34-35 [ 447.455406][T30356] team0: Port device team_slave_1 added [ 447.461683][T30377] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.492701][T30356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 447.499686][T30356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.525666][T30356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.547514][T30356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.554525][T30356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 447.580484][T30356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.592208][T24378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.603013][ T3326] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.641089][T30356] hsr_slave_0: entered promiscuous mode [ 447.647295][T30356] hsr_slave_1: entered promiscuous mode [ 447.653258][T30356] debugfs: 'hsr0' already exists in 'hsr' [ 447.659003][T30356] Cannot create hsr debugfs directory [ 447.747236][ T3326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.759158][ T3326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.769732][ T3326] bond0 (unregistering): Released all slaves [ 447.836333][ T3326] hsr_slave_0: left promiscuous mode [ 447.842290][ T3326] hsr_slave_1: left promiscuous mode [ 447.848000][ T3326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.855450][ T3326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.862968][ T3326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.870406][ T3326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.880698][ T3326] veth1_macvtap: left promiscuous mode [ 447.886206][ T3326] veth0_macvtap: left promiscuous mode [ 447.891761][ T3326] veth1_vlan: left promiscuous mode [ 447.897097][ T3326] veth0_vlan: left promiscuous mode [ 447.959417][ T3326] team0 (unregistering): Port device team_slave_1 removed [ 447.970254][ T3326] team0 (unregistering): Port device team_slave_0 removed [ 448.178664][T30400] netlink: 'syz.4.9289': attribute type 2 has an invalid length. [ 448.186484][T30400] netlink: 'syz.4.9289': attribute type 9 has an invalid length. [ 448.194289][T30400] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.9289'. [ 448.334931][T30356] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 448.343649][T30356] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 448.352740][T30356] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 448.362567][T30356] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 448.405137][T30356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.417327][T30356] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.432928][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.440037][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.492159][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.499270][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.556753][T30432] loop4: detected capacity change from 0 to 512 [ 448.583525][T30356] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.611300][T30432] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 448.640328][T30432] EXT4-fs (loop4): mount failed [ 448.688495][T30448] loop4: detected capacity change from 0 to 512 [ 448.734252][T30448] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.759130][T30356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.837554][T30448] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.855566][T30455] loop0: detected capacity change from 0 to 512 [ 448.901321][T30455] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.927002][T30455] ext4 filesystem being mounted at /434/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.135517][T30465] siw: device registration error -23 [ 449.748894][T30468] siw: device registration error -23 [ 449.854132][T28297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.980612][T30470] loop4: detected capacity change from 0 to 512 [ 449.998115][T30470] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 450.006381][T30470] EXT4-fs (loop4): blocks per group (4096) and clusters per group (8192) inconsistent [ 450.117996][T30470] FAULT_INJECTION: forcing a failure. [ 450.117996][T30470] name failslab, interval 1, probability 0, space 0, times 0 [ 450.122844][T24378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.130741][T30470] CPU: 0 UID: 0 PID: 30470 Comm: syz.4.9305 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 450.130791][T30470] Tainted: [W]=WARN [ 450.130802][T30470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.130820][T30470] Call Trace: [ 450.130829][T30470] [ 450.130842][T30470] __dump_stack+0x1d/0x30 [ 450.130948][T30470] dump_stack_lvl+0xe8/0x140 [ 450.130974][T30470] dump_stack+0x15/0x1b [ 450.130999][T30470] should_fail_ex+0x265/0x280 [ 450.131029][T30470] should_failslab+0x8c/0xb0 [ 450.131175][T30470] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 450.131231][T30470] ? sidtab_sid2str_get+0xa0/0x130 [ 450.131350][T30470] kmemdup_noprof+0x2b/0x70 [ 450.131455][T30470] sidtab_sid2str_get+0xa0/0x130 [ 450.131551][T30470] security_sid_to_context_core+0x1eb/0x2e0 [ 450.131584][T30470] security_sid_to_context+0x27/0x40 [ 450.131612][T30470] selinux_lsmprop_to_secctx+0x67/0xf0 [ 450.131642][T30470] security_lsmprop_to_secctx+0x43/0x80 [ 450.131729][T30470] audit_log_task_context+0x77/0x190 [ 450.131779][T30470] audit_log_task+0xf4/0x250 [ 450.131823][T30470] audit_seccomp+0x61/0x100 [ 450.131919][T30470] ? __seccomp_filter+0x68c/0x10d0 [ 450.131950][T30470] __seccomp_filter+0x69d/0x10d0 [ 450.132056][T30470] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 450.132105][T30470] ? vfs_write+0x7e8/0x960 [ 450.132135][T30470] ? __rcu_read_unlock+0x4f/0x70 [ 450.132165][T30470] ? __fget_files+0x184/0x1c0 [ 450.132208][T30470] __secure_computing+0x82/0x150 [ 450.132310][T30470] syscall_trace_enter+0xcf/0x1e0 [ 450.132345][T30470] do_syscall_64+0xac/0x200 [ 450.132420][T30470] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 450.132455][T30470] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 450.132508][T30470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.132540][T30470] RIP: 0033:0x7f8d0c25ebe9 [ 450.132561][T30470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.132587][T30470] RSP: 002b:00007f8d0acbf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 450.132694][T30470] RAX: ffffffffffffffda RBX: 00007f8d0c485fa0 RCX: 00007f8d0c25ebe9 [ 450.132721][T30470] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 450.132739][T30470] RBP: 00007f8d0acbf090 R08: 0000000000000000 R09: 0000000000000000 [ 450.132756][T30470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.132774][T30470] R13: 00007f8d0c486038 R14: 00007f8d0c485fa0 R15: 00007ffce0085cb8 [ 450.132801][T30470] [ 450.254888][T30356] veth0_vlan: entered promiscuous mode [ 450.450805][T30356] veth1_vlan: entered promiscuous mode [ 450.466806][T30356] veth0_macvtap: entered promiscuous mode [ 450.477646][T30356] veth1_macvtap: entered promiscuous mode [ 450.493653][T30356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.509148][T30356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.541339][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.550592][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.572867][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.601871][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.625171][T30491] vhci_hcd: invalid port number 23 [ 450.653508][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 450.653527][ T29] audit: type=1400 audit(1755197919.628:46927): avc: denied { setopt } for pid=30496 comm="syz.9.9314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 450.689045][ T29] audit: type=1326 audit(1755197919.668:46928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.4.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0c25ebe9 code=0x7ffc0000 [ 450.689154][ T29] audit: type=1326 audit(1755197919.668:46929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.4.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0c25ebe9 code=0x7ffc0000 [ 450.689394][ T29] audit: type=1326 audit(1755197919.668:46930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.4.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f8d0c25ebe9 code=0x7ffc0000 [ 450.689782][ T29] audit: type=1326 audit(1755197919.668:46931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.4.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0c25ebe9 code=0x7ffc0000 [ 450.690119][ T29] audit: type=1326 audit(1755197919.668:46932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.4.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f8d0c25ebe9 code=0x7ffc0000 [ 450.691528][ T29] audit: type=1326 audit(1755197919.668:46933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.4.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0c25ebe9 code=0x7ffc0000 [ 450.691986][ T29] audit: type=1326 audit(1755197919.668:46934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.4.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7f8d0c25ebe9 code=0x7ffc0000 [ 450.692026][ T29] audit: type=1326 audit(1755197919.668:46935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.4.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d0c25ebe9 code=0x7ffc0000 [ 450.692186][ T29] audit: type=1326 audit(1755197919.668:46936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30492 comm="syz.4.9312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d0c25ebe9 code=0x7ffc0000 [ 450.693318][T30493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9312'. [ 450.694595][T30493] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9312'. [ 451.028252][T21946] hid_parser_main: 102 callbacks suppressed [ 451.028274][T21946] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 451.028304][T21946] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 451.028333][T21946] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 451.028458][T21946] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 451.028486][T21946] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 451.028537][T21946] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 451.028559][T21946] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 451.028584][T21946] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 451.028614][T21946] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 451.028640][T21946] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 451.029701][T21946] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.00 Device [syz1] on syz0 [ 451.100879][T30513] loop4: detected capacity change from 0 to 128 [ 451.116252][T30513] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 451.117103][T30513] ext4 filesystem being mounted at /190/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 451.370706][T30531] vhci_hcd: invalid port number 23 [ 451.399825][T30535] loop0: detected capacity change from 0 to 128 [ 451.409226][T30535] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 451.421582][T30535] ext4 filesystem being mounted at /444/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 451.945086][T28297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.259131][T24378] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 452.288072][T30559] loop0: detected capacity change from 0 to 512 [ 452.302116][T30559] EXT4-fs: test_dummy_encryption option not supported [ 452.535395][T30572] lo speed is unknown, defaulting to 1000 [ 452.825785][T30579] tipc: Started in network mode [ 452.831023][T30579] tipc: Node identity ac14140f, cluster identity 4711 [ 452.880009][T30579] tipc: New replicast peer: 255.255.255.255 [ 452.886186][T30579] tipc: Enabled bearer , priority 10 [ 453.006964][T30604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9353'. [ 453.253385][T30616] FAULT_INJECTION: forcing a failure. [ 453.253385][T30616] name failslab, interval 1, probability 0, space 0, times 0 [ 453.266159][T30616] CPU: 1 UID: 0 PID: 30616 Comm: syz.0.9357 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 453.266197][T30616] Tainted: [W]=WARN [ 453.266205][T30616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.266221][T30616] Call Trace: [ 453.266229][T30616] [ 453.266239][T30616] __dump_stack+0x1d/0x30 [ 453.266267][T30616] dump_stack_lvl+0xe8/0x140 [ 453.266360][T30616] dump_stack+0x15/0x1b [ 453.266379][T30616] should_fail_ex+0x265/0x280 [ 453.266404][T30616] ? nfc_allocate_device+0xbd/0x2e0 [ 453.266478][T30616] should_failslab+0x8c/0xb0 [ 453.266505][T30616] __kmalloc_cache_noprof+0x4c/0x320 [ 453.266537][T30616] ? __pfx_nci_transceive+0x10/0x10 [ 453.266645][T30616] nfc_allocate_device+0xbd/0x2e0 [ 453.266675][T30616] nci_allocate_device+0x13b/0x200 [ 453.266703][T30616] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 453.266737][T30616] virtual_ncidev_open+0x55/0x140 [ 453.266814][T30616] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 453.266847][T30616] misc_open+0x1d3/0x200 [ 453.266878][T30616] chrdev_open+0x2e8/0x3a0 [ 453.266955][T30616] do_dentry_open+0x649/0xa20 [ 453.266993][T30616] ? __pfx_chrdev_open+0x10/0x10 [ 453.267107][T30616] vfs_open+0x37/0x1e0 [ 453.267168][T30616] path_openat+0x1c5e/0x2170 [ 453.267197][T30616] do_filp_open+0x109/0x230 [ 453.267228][T30616] do_sys_openat2+0xa6/0x110 [ 453.267278][T30616] __x64_sys_openat+0xf2/0x120 [ 453.267314][T30616] x64_sys_call+0x2e9c/0x2ff0 [ 453.267346][T30616] do_syscall_64+0xd2/0x200 [ 453.267374][T30616] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 453.267427][T30616] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 453.267453][T30616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.267483][T30616] RIP: 0033:0x7f1d9375ebe9 [ 453.267498][T30616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.267516][T30616] RSP: 002b:00007f1d921c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 453.267539][T30616] RAX: ffffffffffffffda RBX: 00007f1d93985fa0 RCX: 00007f1d9375ebe9 [ 453.267603][T30616] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 453.267618][T30616] RBP: 00007f1d921c7090 R08: 0000000000000000 R09: 0000000000000000 [ 453.267634][T30616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.267649][T30616] R13: 00007f1d93986038 R14: 00007f1d93985fa0 R15: 00007ffd16300538 [ 453.267669][T30616] [ 453.525777][T30619] loop0: detected capacity change from 0 to 512 [ 453.533754][T30619] EXT4-fs: Ignoring removed mblk_io_submit option [ 453.540637][T30619] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 453.552587][T30619] EXT4-fs (loop0): 1 truncate cleaned up [ 453.558900][T30619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 453.639474][T24378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.931013][T21933] tipc: Node number set to 2886997007 [ 453.962761][T30645] loop4: detected capacity change from 0 to 512 [ 454.037263][T30645] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 454.108078][T30645] EXT4-fs (loop4): orphan cleanup on readonly fs [ 454.130119][T30655] loop0: detected capacity change from 0 to 512 [ 454.145132][T30645] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.9369: corrupted inode contents [ 454.169811][T30645] EXT4-fs (loop4): Remounting filesystem read-only [ 454.180070][T30645] EXT4-fs (loop4): 1 truncate cleaned up [ 454.191708][T30655] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 454.201281][ T296] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 454.211930][ T296] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 454.236954][T30655] EXT4-fs (loop0): orphan cleanup on readonly fs [ 454.245394][ T296] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 454.247783][T30664] netlink: 32 bytes leftover after parsing attributes in process `syz.9.9374'. [ 454.256252][T30645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.286280][T30655] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.9368: corrupted inode contents [ 454.301788][T30655] EXT4-fs (loop0): Remounting filesystem read-only [ 454.316857][T30655] EXT4-fs (loop0): 1 truncate cleaned up [ 454.327262][ T296] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 454.337989][ T296] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 454.369921][ T296] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 454.404407][T30655] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 454.465625][T30670] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9377'. [ 454.739566][T26305] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.759052][T30695] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9387'. [ 454.809194][T26305] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.818179][T30695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9387'. [ 454.830249][T28297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.869312][T30704] vhci_hcd: invalid port number 23 [ 454.869812][T26305] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.902145][T30706] loop4: detected capacity change from 0 to 512 [ 454.946153][T21945] hid-generic 0000:0000:0000.0010: hidraw0: HID v8.00 Device [syz1] on syz0 [ 454.960358][T30706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.975881][T24378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.002370][T26305] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.012562][T30706] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.122452][T30698] lo speed is unknown, defaulting to 1000 [ 455.276848][T30741] siw: device registration error -23 [ 455.331858][T26305] bridge_slave_1: left allmulticast mode [ 455.337604][T26305] bridge_slave_1: left promiscuous mode [ 455.343373][T26305] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.430816][T30753] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9402'. [ 455.488087][T26305] bridge_slave_0: left allmulticast mode [ 455.488106][T26305] bridge_slave_0: left promiscuous mode [ 455.488290][T26305] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.818849][T30767] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9406'. [ 455.874668][T28297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.900729][T26305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.910830][T26305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.921169][T26305] bond0 (unregistering): Released all slaves [ 455.932272][T30755] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 455.942964][T30771] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 455.957466][T30698] chnl_net:caif_netlink_parms(): no params data found [ 456.003934][T26305] hsr_slave_0: left promiscuous mode [ 456.011096][T26305] hsr_slave_1: left promiscuous mode [ 456.013786][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 456.013804][ T29] audit: type=1326 audit(1755197924.981:47401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30780 comm="syz.0.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 456.017272][T26305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 456.046739][ T29] audit: type=1326 audit(1755197924.991:47402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30780 comm="syz.0.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 456.053827][T26305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 456.085153][ T29] audit: type=1326 audit(1755197924.991:47403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30780 comm="syz.0.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 456.109144][ T29] audit: type=1326 audit(1755197924.991:47404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30780 comm="syz.0.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 456.133066][ T29] audit: type=1326 audit(1755197924.991:47405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30780 comm="syz.0.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 456.157327][ T29] audit: type=1326 audit(1755197924.991:47406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30780 comm="syz.0.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 456.181058][ T29] audit: type=1326 audit(1755197924.991:47407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30780 comm="syz.0.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 456.204757][ T29] audit: type=1326 audit(1755197924.991:47408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30780 comm="syz.0.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 456.228685][ T29] audit: type=1326 audit(1755197924.991:47409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30780 comm="syz.0.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 456.252525][ T29] audit: type=1326 audit(1755197924.991:47410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30780 comm="syz.0.9409" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 456.276950][T26305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 456.284462][T26305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.299407][T26305] veth1_macvtap: left promiscuous mode [ 456.305507][T26305] veth0_macvtap: left promiscuous mode [ 456.311621][T26305] veth1_vlan: left promiscuous mode [ 456.318495][T26305] veth0_vlan: left promiscuous mode [ 456.407416][T30789] loop0: detected capacity change from 0 to 128 [ 456.418833][T30789] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 456.431799][T30789] ext4 filesystem being mounted at /469/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 456.453880][T26305] team0 (unregistering): Port device team_slave_1 removed [ 456.469199][T26305] team0 (unregistering): Port device team_slave_0 removed [ 456.566645][T30698] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.573854][T30698] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.595250][T30698] bridge_slave_0: entered allmulticast mode [ 456.604945][T30698] bridge_slave_0: entered promiscuous mode [ 456.614521][T30698] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.621767][T30698] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.631207][T30698] bridge_slave_1: entered allmulticast mode [ 456.639514][T30698] bridge_slave_1: entered promiscuous mode [ 456.667418][T30698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.672592][T30798] loop5: detected capacity change from 0 to 512 [ 456.678298][T30698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.698197][T30798] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 456.713332][T30798] EXT4-fs (loop5): mount failed [ 456.729046][T30698] team0: Port device team_slave_0 added [ 456.736250][T30698] team0: Port device team_slave_1 added [ 456.755245][T30698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.762296][T30698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.788517][T30698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.801713][T30698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.808758][T30698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.834767][T30698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.879699][T30698] hsr_slave_0: entered promiscuous mode [ 456.885790][T30698] hsr_slave_1: entered promiscuous mode [ 456.891872][T30698] debugfs: 'hsr0' already exists in 'hsr' [ 456.897723][T30698] Cannot create hsr debugfs directory [ 456.916408][T30809] loop4: detected capacity change from 0 to 512 [ 456.938176][T30809] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 456.946511][T30809] EXT4-fs (loop4): orphan cleanup on readonly fs [ 456.958664][T30809] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 456.979852][T30809] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 456.987369][T30809] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.9419: bg 0: block 40: padding at end of block bitmap is not set [ 457.003107][T30809] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 457.012493][T30809] EXT4-fs (loop4): 1 truncate cleaned up [ 457.020044][T30809] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 457.044735][T28297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.084481][T30815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9420'. [ 457.111152][T30819] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9421'. [ 457.120530][T30819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9421'. [ 457.255683][T24378] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 457.308373][T30698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 457.325850][T30698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 457.335091][T30698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 457.344849][T30698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 457.368136][T30842] loop4: detected capacity change from 0 to 512 [ 457.400119][T30842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.407979][T30698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.420342][T30842] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.537878][T30698] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.547802][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.554916][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.574252][T30698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 457.584676][T30698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 457.647294][T30852] siw: device registration error -23 [ 457.814163][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.821299][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.908055][T30862] FAULT_INJECTION: forcing a failure. [ 457.908055][T30862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 457.921372][T30862] CPU: 0 UID: 0 PID: 30862 Comm: syz.5.9431 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 457.921456][T30862] Tainted: [W]=WARN [ 457.921465][T30862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 457.921522][T30862] Call Trace: [ 457.921530][T30862] [ 457.921541][T30862] __dump_stack+0x1d/0x30 [ 457.921568][T30862] dump_stack_lvl+0xe8/0x140 [ 457.921602][T30862] dump_stack+0x15/0x1b [ 457.921641][T30862] should_fail_ex+0x265/0x280 [ 457.921665][T30862] should_fail+0xb/0x20 [ 457.921688][T30862] should_fail_usercopy+0x1a/0x20 [ 457.921717][T30862] _copy_from_user+0x1c/0xb0 [ 457.921819][T30862] ___sys_sendmsg+0xc1/0x1d0 [ 457.921936][T30862] __sys_sendmmsg+0x178/0x300 [ 457.922034][T30862] __x64_sys_sendmmsg+0x57/0x70 [ 457.922066][T30862] x64_sys_call+0x1c4a/0x2ff0 [ 457.922094][T30862] do_syscall_64+0xd2/0x200 [ 457.922130][T30862] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 457.922160][T30862] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 457.922242][T30862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.922291][T30862] RIP: 0033:0x7f6d3cbfebe9 [ 457.922310][T30862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.922330][T30862] RSP: 002b:00007f6d3b667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 457.922361][T30862] RAX: ffffffffffffffda RBX: 00007f6d3ce25fa0 RCX: 00007f6d3cbfebe9 [ 457.922398][T30862] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 457.922414][T30862] RBP: 00007f6d3b667090 R08: 0000000000000000 R09: 0000000000000000 [ 457.922427][T30862] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 457.922443][T30862] R13: 00007f6d3ce26038 R14: 00007f6d3ce25fa0 R15: 00007ffdd2b73f78 [ 457.922463][T30862] [ 458.120420][T30863] __nla_validate_parse: 3 callbacks suppressed [ 458.120510][T30863] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9432'. [ 458.141655][T30863] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9432'. [ 458.184432][T30867] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9433'. [ 458.198967][T30698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 458.228349][T30867] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9433'. [ 458.265614][T28297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.323422][T30878] loop0: detected capacity change from 0 to 512 [ 458.351263][T30698] veth0_vlan: entered promiscuous mode [ 458.375082][T30698] veth1_vlan: entered promiscuous mode [ 458.381996][T30878] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 458.404891][T30698] veth0_macvtap: entered promiscuous mode [ 458.412297][T30698] veth1_macvtap: entered promiscuous mode [ 458.430475][T30884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9437'. [ 458.440551][T30878] EXT4-fs (loop0): mount failed [ 458.454524][T30698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.464798][T30698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.474865][T30884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9437'. [ 458.484064][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.495813][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.512491][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.526855][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.585706][T30892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9440'. [ 458.741401][T30918] loop5: detected capacity change from 0 to 512 [ 458.772722][T30918] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 458.855352][T30918] EXT4-fs (loop5): mount failed [ 458.964548][T30930] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9452'. [ 458.991360][T30930] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9452'. [ 459.001722][T30926] lo speed is unknown, defaulting to 1000 [ 459.015571][T30933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9453'. [ 459.175475][T21931] hid_parser_main: 46 callbacks suppressed [ 459.175497][T21931] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 459.189009][T21931] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 459.196559][T21931] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 459.206705][T21931] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 459.214133][T21931] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 459.221744][T21931] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 459.229218][T21931] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 459.236656][T21931] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 459.244144][T21931] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 459.251605][T21931] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 459.261026][T21931] hid-generic 0000:0000:0000.0011: hidraw0: HID v8.00 Device [syz1] on syz0 [ 459.347544][T30945] loop4: detected capacity change from 0 to 128 [ 459.359575][T30945] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 459.372004][T30945] ext4 filesystem being mounted at /213/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 459.652613][T30969] FAULT_INJECTION: forcing a failure. [ 459.652613][T30969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.665876][T30969] CPU: 0 UID: 0 PID: 30969 Comm: syz.5.9467 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 459.665991][T30969] Tainted: [W]=WARN [ 459.666000][T30969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.666016][T30969] Call Trace: [ 459.666025][T30969] [ 459.666034][T30969] __dump_stack+0x1d/0x30 [ 459.666062][T30969] dump_stack_lvl+0xe8/0x140 [ 459.666088][T30969] dump_stack+0x15/0x1b [ 459.666109][T30969] should_fail_ex+0x265/0x280 [ 459.666200][T30969] should_fail+0xb/0x20 [ 459.666222][T30969] should_fail_usercopy+0x1a/0x20 [ 459.666248][T30969] _copy_from_user+0x1c/0xb0 [ 459.666291][T30969] proc_control_compat+0x44/0xe0 [ 459.666323][T30969] usbdev_ioctl+0xee1/0x1710 [ 459.666350][T30969] ? __pfx_usbdev_ioctl+0x10/0x10 [ 459.666380][T30969] __se_sys_ioctl+0xcb/0x140 [ 459.666479][T30969] __x64_sys_ioctl+0x43/0x50 [ 459.666512][T30969] x64_sys_call+0x1816/0x2ff0 [ 459.666610][T30969] do_syscall_64+0xd2/0x200 [ 459.666663][T30969] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 459.666805][T30969] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 459.666837][T30969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.666862][T30969] RIP: 0033:0x7f6d3cbfebe9 [ 459.666960][T30969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.666982][T30969] RSP: 002b:00007f6d3b667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 459.667005][T30969] RAX: ffffffffffffffda RBX: 00007f6d3ce25fa0 RCX: 00007f6d3cbfebe9 [ 459.667020][T30969] RDX: 0000200000000580 RSI: 00000000c0105500 RDI: 0000000000000003 [ 459.667035][T30969] RBP: 00007f6d3b667090 R08: 0000000000000000 R09: 0000000000000000 [ 459.667050][T30969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.667095][T30969] R13: 00007f6d3ce26038 R14: 00007f6d3ce25fa0 R15: 00007ffdd2b73f78 [ 459.667117][T30969] [ 459.972988][T30974] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 459.994272][T30980] loop5: detected capacity change from 0 to 128 [ 460.002321][T30980] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 460.015382][T30980] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 460.202958][T30998] netlink: 'syz.6.9477': attribute type 10 has an invalid length. [ 460.215880][T30998] team0: Device hsr_slave_0 failed to register rx_handler [ 460.226905][T28297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 460.339124][T28184] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 460.367207][T31012] loop5: detected capacity change from 0 to 512 [ 460.386764][T31012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.399821][T31012] ext4 filesystem being mounted at /193/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.416700][T31012] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.9482: corrupted xattr block 19: overlapping e_value [ 460.433163][T31012] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 460.442307][T31012] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.9482: corrupted xattr block 19: overlapping e_value [ 460.453588][T31020] vhci_hcd: invalid port number 23 [ 460.457981][T31012] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 460.471868][T31012] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.9482: corrupted xattr block 19: overlapping e_value [ 460.488594][T31012] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 460.513192][T28184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.532855][T31028] loop5: detected capacity change from 0 to 128 [ 460.619930][T31036] loop0: detected capacity change from 0 to 128 [ 460.686473][T31040] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 460.958400][T31072] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 461.032118][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 461.032137][ T29] audit: type=1400 audit(1755197930.002:47770): avc: denied { read write } for pid=31068 comm="syz.5.9509" name="loop5" dev="devtmpfs" ino=1568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 461.061764][ T29] audit: type=1400 audit(1755197930.002:47771): avc: denied { open } for pid=31068 comm="syz.5.9509" path="/dev/loop5" dev="devtmpfs" ino=1568 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 461.093982][T31070] loop5: detected capacity change from 0 to 2048 [ 461.104470][ T29] audit: type=1400 audit(1755197930.023:47772): avc: denied { read write } for pid=30698 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.128979][ T29] audit: type=1400 audit(1755197930.023:47773): avc: denied { open } for pid=30698 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.135876][T31090] loop1: detected capacity change from 0 to 4096 [ 461.153367][ T29] audit: type=1400 audit(1755197930.023:47774): avc: denied { ioctl } for pid=30698 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 461.153405][ T29] audit: type=1400 audit(1755197930.073:47775): avc: denied { ioctl } for pid=31068 comm="syz.5.9509" path="/dev/loop5" dev="devtmpfs" ino=1568 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 461.176019][T31090] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.185515][ T29] audit: type=1400 audit(1755197930.073:47776): avc: denied { mounton } for pid=31068 comm="syz.5.9509" path="/197/file0" dev="tmpfs" ino=1054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 461.250463][ T29] audit: type=1400 audit(1755197930.224:47777): avc: denied { map_create } for pid=31093 comm="syz.4.9518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 461.269878][ T29] audit: type=1400 audit(1755197930.224:47778): avc: denied { bpf } for pid=31093 comm="syz.4.9518" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 461.290760][ T29] audit: type=1400 audit(1755197930.224:47779): avc: denied { map_read map_write } for pid=31093 comm="syz.4.9518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 461.337912][T31070] EXT4-fs (loop5): failed to initialize system zone (-117) [ 461.378354][T31076] loop0: detected capacity change from 0 to 2048 [ 461.385881][T31070] EXT4-fs (loop5): mount failed [ 461.404432][T31076] EXT4-fs (loop0): failed to initialize system zone (-117) [ 461.428653][T31076] EXT4-fs (loop0): mount failed [ 461.505208][T31097] FAULT_INJECTION: forcing a failure. [ 461.505208][T31097] name failslab, interval 1, probability 0, space 0, times 0 [ 461.517999][T31097] CPU: 1 UID: 0 PID: 31097 Comm: syz.0.9512 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 461.518070][T31097] Tainted: [W]=WARN [ 461.518076][T31097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.518093][T31097] Call Trace: [ 461.518102][T31097] [ 461.518113][T31097] __dump_stack+0x1d/0x30 [ 461.518140][T31097] dump_stack_lvl+0xe8/0x140 [ 461.518205][T31097] dump_stack+0x15/0x1b [ 461.518267][T31097] should_fail_ex+0x265/0x280 [ 461.518354][T31097] should_failslab+0x8c/0xb0 [ 461.518386][T31097] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 461.518424][T31097] ? sock_alloc_inode+0x34/0xa0 [ 461.518463][T31097] ? __pfx_sock_alloc_inode+0x10/0x10 [ 461.518517][T31097] sock_alloc_inode+0x34/0xa0 [ 461.518543][T31097] alloc_inode+0x3d/0x170 [ 461.518571][T31097] do_accept+0xa0/0x3a0 [ 461.518604][T31097] ? vfs_write+0x7e8/0x960 [ 461.518718][T31097] __sys_accept4+0xbf/0x140 [ 461.518777][T31097] __x64_sys_accept+0x42/0x50 [ 461.518859][T31097] x64_sys_call+0x212c/0x2ff0 [ 461.518880][T31097] do_syscall_64+0xd2/0x200 [ 461.518907][T31097] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 461.518931][T31097] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 461.518978][T31097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.519000][T31097] RIP: 0033:0x7f1d9375ebe9 [ 461.519017][T31097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.519037][T31097] RSP: 002b:00007f1d921a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 461.519057][T31097] RAX: ffffffffffffffda RBX: 00007f1d93986090 RCX: 00007f1d9375ebe9 [ 461.519070][T31097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 461.519081][T31097] RBP: 00007f1d921a6090 R08: 0000000000000000 R09: 0000000000000000 [ 461.519177][T31097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.519193][T31097] R13: 00007f1d93986128 R14: 00007f1d93986090 R15: 00007ffd16300538 [ 461.519246][T31097] [ 461.743842][T30698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.765469][T31119] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 461.772221][T31119] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 461.780091][T31119] vhci_hcd vhci_hcd.0: Device attached [ 461.793430][T31119] 9pnet_fd: Insufficient options for proto=fd [ 461.842949][T31120] vhci_hcd: connection closed [ 461.843379][ T37] vhci_hcd: stop threads [ 461.852413][ T37] vhci_hcd: release socket [ 461.856843][ T37] vhci_hcd: disconnect device [ 461.918869][ T23] hid-generic 0000:0000:0000.0012: hidraw0: HID v8.00 Device [syz1] on syz0 [ 461.951808][T31143] FAULT_INJECTION: forcing a failure. [ 461.951808][T31143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 461.964972][T31143] CPU: 1 UID: 0 PID: 31143 Comm: syz.1.9534 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 461.965107][T31143] Tainted: [W]=WARN [ 461.965116][T31143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 461.965132][T31143] Call Trace: [ 461.965140][T31143] [ 461.965150][T31143] __dump_stack+0x1d/0x30 [ 461.965174][T31143] dump_stack_lvl+0xe8/0x140 [ 461.965275][T31143] dump_stack+0x15/0x1b [ 461.965299][T31143] should_fail_ex+0x265/0x280 [ 461.965330][T31143] should_fail+0xb/0x20 [ 461.965373][T31143] should_fail_usercopy+0x1a/0x20 [ 461.965405][T31143] _copy_from_user+0x1c/0xb0 [ 461.965459][T31143] ___sys_sendmsg+0xc1/0x1d0 [ 461.965513][T31143] __x64_sys_sendmsg+0xd4/0x160 [ 461.965587][T31143] x64_sys_call+0x191e/0x2ff0 [ 461.965618][T31143] do_syscall_64+0xd2/0x200 [ 461.965729][T31143] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 461.965811][T31143] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 461.965902][T31143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.965976][T31143] RIP: 0033:0x7fd82425ebe9 [ 461.965998][T31143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.966025][T31143] RSP: 002b:00007fd822cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.966059][T31143] RAX: ffffffffffffffda RBX: 00007fd824485fa0 RCX: 00007fd82425ebe9 [ 461.966077][T31143] RDX: 0000000000004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 461.966145][T31143] RBP: 00007fd822cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 461.966163][T31143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.966181][T31143] R13: 00007fd824486038 R14: 00007fd824485fa0 R15: 00007ffffadd56c8 [ 461.966209][T31143] [ 461.971749][T31141] loop5: detected capacity change from 0 to 1024 [ 462.078961][T31149] loop1: detected capacity change from 0 to 512 [ 462.092672][T31141] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 462.166965][T31141] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 462.177799][T31149] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 462.186215][T31149] EXT4-fs (loop1): orphan cleanup on readonly fs [ 462.189642][T31141] JBD2: no valid journal superblock found [ 462.196248][T31149] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.9538: corrupted inode contents [ 462.198368][T31141] EXT4-fs (loop5): Could not load journal inode [ 462.210622][T31149] EXT4-fs (loop1): Remounting filesystem read-only [ 462.224964][T31149] EXT4-fs (loop1): 1 truncate cleaned up [ 462.225951][T31153] FAULT_INJECTION: forcing a failure. [ 462.225951][T31153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.243761][T31153] CPU: 0 UID: 0 PID: 31153 Comm: syz.0.9539 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 462.243808][T31153] Tainted: [W]=WARN [ 462.243817][T31153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 462.243831][T31153] Call Trace: [ 462.243838][T31153] [ 462.243846][T31153] __dump_stack+0x1d/0x30 [ 462.243938][T31153] dump_stack_lvl+0xe8/0x140 [ 462.243978][T31153] dump_stack+0x15/0x1b [ 462.244011][T31153] should_fail_ex+0x265/0x280 [ 462.244038][T31153] should_fail+0xb/0x20 [ 462.244061][T31153] should_fail_usercopy+0x1a/0x20 [ 462.244088][T31153] _copy_from_user+0x1c/0xb0 [ 462.244156][T31153] ___sys_sendmsg+0xc1/0x1d0 [ 462.244201][T31153] __x64_sys_sendmsg+0xd4/0x160 [ 462.244261][T31153] x64_sys_call+0x191e/0x2ff0 [ 462.244289][T31153] do_syscall_64+0xd2/0x200 [ 462.244323][T31153] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 462.244407][T31153] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 462.244432][T31153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.244458][T31153] RIP: 0033:0x7f1d9375ebe9 [ 462.244477][T31153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.244540][T31153] RSP: 002b:00007f1d921c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.244564][T31153] RAX: ffffffffffffffda RBX: 00007f1d93985fa0 RCX: 00007f1d9375ebe9 [ 462.244577][T31153] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 462.244590][T31153] RBP: 00007f1d921c7090 R08: 0000000000000000 R09: 0000000000000000 [ 462.244602][T31153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.244617][T31153] R13: 00007f1d93986038 R14: 00007f1d93985fa0 R15: 00007ffd16300538 [ 462.244638][T31153] [ 462.274673][T31147] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 462.306226][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 462.441065][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 462.452135][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 462.463534][T31149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 462.494605][T31162] loop4: detected capacity change from 0 to 128 [ 462.508772][T31164] loop0: detected capacity change from 0 to 512 [ 462.509016][T31166] FAULT_INJECTION: forcing a failure. [ 462.509016][T31166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.517916][T31162] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 462.528299][T31166] CPU: 1 UID: 0 PID: 31166 Comm: syz.6.9544 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 462.528361][T31166] Tainted: [W]=WARN [ 462.528371][T31166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 462.528397][T31166] Call Trace: [ 462.528406][T31166] [ 462.528417][T31166] __dump_stack+0x1d/0x30 [ 462.528449][T31166] dump_stack_lvl+0xe8/0x140 [ 462.528478][T31166] dump_stack+0x15/0x1b [ 462.528505][T31166] should_fail_ex+0x265/0x280 [ 462.528614][T31166] should_fail+0xb/0x20 [ 462.528638][T31166] should_fail_usercopy+0x1a/0x20 [ 462.528671][T31166] _copy_from_user+0x1c/0xb0 [ 462.528780][T31166] ___sys_sendmsg+0xc1/0x1d0 [ 462.528904][T31166] __sys_sendmmsg+0x178/0x300 [ 462.528950][T31166] __x64_sys_sendmmsg+0x57/0x70 [ 462.529061][T31166] x64_sys_call+0x1c4a/0x2ff0 [ 462.529162][T31166] do_syscall_64+0xd2/0x200 [ 462.529245][T31166] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 462.529279][T31166] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 462.529315][T31166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.529347][T31166] RIP: 0033:0x7f89c5d6ebe9 [ 462.529368][T31166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.529462][T31166] RSP: 002b:00007f89c47d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 462.529489][T31166] RAX: ffffffffffffffda RBX: 00007f89c5f95fa0 RCX: 00007f89c5d6ebe9 [ 462.529515][T31166] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 462.529534][T31166] RBP: 00007f89c47d7090 R08: 0000000000000000 R09: 0000000000000000 [ 462.529552][T31166] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 462.529570][T31166] R13: 00007f89c5f96038 R14: 00007f89c5f95fa0 R15: 00007ffca2131218 [ 462.529597][T31166] [ 462.726973][T31162] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 462.909802][T30698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.041676][T28297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.151442][T31207] __nla_validate_parse: 25 callbacks suppressed [ 463.151462][T31207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9556'. [ 463.206249][T31209] FAULT_INJECTION: forcing a failure. [ 463.206249][T31209] name failslab, interval 1, probability 0, space 0, times 0 [ 463.219065][T31209] CPU: 0 UID: 0 PID: 31209 Comm: syz.5.9557 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 463.219095][T31209] Tainted: [W]=WARN [ 463.219101][T31209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.219113][T31209] Call Trace: [ 463.219118][T31209] [ 463.219148][T31209] __dump_stack+0x1d/0x30 [ 463.219167][T31209] dump_stack_lvl+0xe8/0x140 [ 463.219203][T31209] dump_stack+0x15/0x1b [ 463.219218][T31209] should_fail_ex+0x265/0x280 [ 463.219236][T31209] ? alloc_pipe_info+0xae/0x350 [ 463.219290][T31209] should_failslab+0x8c/0xb0 [ 463.219316][T31209] __kmalloc_cache_noprof+0x4c/0x320 [ 463.219438][T31209] alloc_pipe_info+0xae/0x350 [ 463.219459][T31209] splice_direct_to_actor+0x592/0x680 [ 463.219493][T31209] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 463.219526][T31209] ? __pfx_direct_splice_actor+0x10/0x10 [ 463.219545][T31209] ? copy_from_kernel_nofault_allowed+0x62/0xc0 [ 463.219620][T31209] ? avc_policy_seqno+0x15/0x30 [ 463.219642][T31209] ? selinux_file_permission+0x1e4/0x320 [ 463.219662][T31209] do_splice_direct+0xda/0x150 [ 463.219757][T31209] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 463.219781][T31209] do_sendfile+0x380/0x650 [ 463.219811][T31209] __x64_sys_sendfile64+0x105/0x150 [ 463.219838][T31209] x64_sys_call+0x2bb0/0x2ff0 [ 463.219857][T31209] do_syscall_64+0xd2/0x200 [ 463.219930][T31209] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 463.219961][T31209] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 463.219983][T31209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.220002][T31209] RIP: 0033:0x7f6d3cbfebe9 [ 463.220048][T31209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.220068][T31209] RSP: 002b:00007f6d3b667038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 463.220085][T31209] RAX: ffffffffffffffda RBX: 00007f6d3ce25fa0 RCX: 00007f6d3cbfebe9 [ 463.220097][T31209] RDX: 0000000000000000 RSI: 000000000000000b RDI: 000000000000000a [ 463.220107][T31209] RBP: 00007f6d3b667090 R08: 0000000000000000 R09: 0000000000000000 [ 463.220118][T31209] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 463.220130][T31209] R13: 00007f6d3ce26038 R14: 00007f6d3ce25fa0 R15: 00007ffdd2b73f78 [ 463.220215][T31209] [ 463.465113][T31211] loop5: detected capacity change from 0 to 128 [ 463.473099][T31211] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.485519][T31211] ext4 filesystem being mounted at /207/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.688581][T28184] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 463.708478][T31216] loop5: detected capacity change from 0 to 128 [ 463.720226][T31216] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 463.754318][T31216] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.789286][T31221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9561'. [ 463.957385][T21944] hid-generic 0000:0000:0000.0013: hidraw0: HID v8.00 Device [syz1] on syz0 [ 464.101924][T28184] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 464.161569][T31254] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9572'. [ 464.192582][T31259] loop5: detected capacity change from 0 to 512 [ 464.294061][T31266] SELinux: failed to load policy [ 464.301045][T31259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.319075][T31259] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.358070][T31272] vhci_hcd: invalid port number 23 [ 464.594501][T31285] loop1: detected capacity change from 0 to 512 [ 464.604818][T31288] siw: device registration error -23 [ 464.768021][T31285] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 464.892767][T31297] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9588'. [ 464.902599][T31297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9588'. [ 464.911566][T31297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9588'. [ 464.993171][T31285] EXT4-fs (loop1): 1 truncate cleaned up [ 465.058205][T31285] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.091666][T31285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.114550][T31285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.166172][T28184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.194031][T31306] FAULT_INJECTION: forcing a failure. [ 465.194031][T31306] name failslab, interval 1, probability 0, space 0, times 0 [ 465.197501][T31311] vhci_hcd: invalid port number 23 [ 465.206716][T31306] CPU: 1 UID: 0 PID: 31306 Comm: syz.0.9589 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 465.206760][T31306] Tainted: [W]=WARN [ 465.206770][T31306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.206786][T31306] Call Trace: [ 465.206812][T31306] [ 465.206824][T31306] __dump_stack+0x1d/0x30 [ 465.206857][T31306] dump_stack_lvl+0xe8/0x140 [ 465.206885][T31306] dump_stack+0x15/0x1b [ 465.206951][T31306] should_fail_ex+0x265/0x280 [ 465.206982][T31306] should_failslab+0x8c/0xb0 [ 465.207017][T31306] kmem_cache_alloc_noprof+0x50/0x310 [ 465.207058][T31306] ? audit_log_start+0x365/0x6c0 [ 465.207149][T31306] audit_log_start+0x365/0x6c0 [ 465.207198][T31306] audit_seccomp+0x48/0x100 [ 465.207254][T31306] ? __seccomp_filter+0x68c/0x10d0 [ 465.207285][T31306] __seccomp_filter+0x69d/0x10d0 [ 465.207318][T31306] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 465.207358][T31306] ? vfs_write+0x7e8/0x960 [ 465.207431][T31306] ? __rcu_read_unlock+0x4f/0x70 [ 465.207461][T31306] ? __fget_files+0x184/0x1c0 [ 465.207501][T31306] __secure_computing+0x82/0x150 [ 465.207578][T31306] syscall_trace_enter+0xcf/0x1e0 [ 465.207653][T31306] do_syscall_64+0xac/0x200 [ 465.207718][T31306] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 465.207753][T31306] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 465.207790][T31306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.207820][T31306] RIP: 0033:0x7f1d9375ebe9 [ 465.207843][T31306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.207908][T31306] RSP: 002b:00007f1d921c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 465.207936][T31306] RAX: ffffffffffffffda RBX: 00007f1d93985fa0 RCX: 00007f1d9375ebe9 [ 465.207955][T31306] RDX: 0000000000000003 RSI: 0000200000000180 RDI: 00000000000004c5 [ 465.207973][T31306] RBP: 00007f1d921c7090 R08: 0000000000000000 R09: 0000000000000000 [ 465.207990][T31306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.208008][T31306] R13: 00007f1d93986038 R14: 00007f1d93985fa0 R15: 00007ffd16300538 [ 465.208035][T31306] [ 465.212929][T31312] loop5: detected capacity change from 0 to 128 [ 465.308141][T31314] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 465.309697][T31305] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9591'. [ 465.354004][T31312] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 465.355310][T31305] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9591'. [ 465.471716][T31312] ext4 filesystem being mounted at /212/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 465.487588][T31321] loop4: detected capacity change from 0 to 512 [ 465.502263][T31321] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 465.503559][T31325] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9596'. [ 465.517458][T31321] EXT4-fs (loop4): mount failed [ 465.701494][T31345] FAULT_INJECTION: forcing a failure. [ 465.701494][T31345] name failslab, interval 1, probability 0, space 0, times 0 [ 465.714199][T31345] CPU: 0 UID: 0 PID: 31345 Comm: syz.0.9603 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 465.714308][T31345] Tainted: [W]=WARN [ 465.714316][T31345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 465.714330][T31345] Call Trace: [ 465.714338][T31345] [ 465.714347][T31345] __dump_stack+0x1d/0x30 [ 465.714372][T31345] dump_stack_lvl+0xe8/0x140 [ 465.714395][T31345] dump_stack+0x15/0x1b [ 465.714485][T31345] should_fail_ex+0x265/0x280 [ 465.714511][T31345] should_failslab+0x8c/0xb0 [ 465.714584][T31345] kmem_cache_alloc_noprof+0x50/0x310 [ 465.714615][T31345] ? skb_clone+0x151/0x1f0 [ 465.714644][T31345] skb_clone+0x151/0x1f0 [ 465.714709][T31345] __netlink_deliver_tap+0x2c9/0x500 [ 465.714745][T31345] netlink_unicast+0x66b/0x690 [ 465.714785][T31345] netlink_sendmsg+0x58b/0x6b0 [ 465.714842][T31345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 465.714867][T31345] __sock_sendmsg+0x145/0x180 [ 465.714951][T31345] ____sys_sendmsg+0x31e/0x4e0 [ 465.714979][T31345] ___sys_sendmsg+0x17b/0x1d0 [ 465.715018][T31345] __x64_sys_sendmsg+0xd4/0x160 [ 465.715046][T31345] x64_sys_call+0x191e/0x2ff0 [ 465.715130][T31345] do_syscall_64+0xd2/0x200 [ 465.715225][T31345] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 465.715257][T31345] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 465.715360][T31345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.715383][T31345] RIP: 0033:0x7f1d9375ebe9 [ 465.715399][T31345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.715418][T31345] RSP: 002b:00007f1d921c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 465.715516][T31345] RAX: ffffffffffffffda RBX: 00007f1d93985fa0 RCX: 00007f1d9375ebe9 [ 465.715529][T31345] RDX: 0000000000008080 RSI: 0000200000000000 RDI: 0000000000000004 [ 465.715543][T31345] RBP: 00007f1d921c7090 R08: 0000000000000000 R09: 0000000000000000 [ 465.715559][T31345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.715572][T31345] R13: 00007f1d93986038 R14: 00007f1d93985fa0 R15: 00007ffd16300538 [ 465.715593][T31345] [ 465.941100][T30698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.001698][T31349] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 466.051463][T31359] loop1: detected capacity change from 0 to 512 [ 466.059183][T28184] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 466.077913][T31359] __quota_error: 288 callbacks suppressed [ 466.077933][T31359] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 466.098193][T31359] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 466.113254][T31359] EXT4-fs (loop1): mount failed [ 466.145459][T21944] hid_parser_main: 74 callbacks suppressed [ 466.145477][T21944] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 466.158751][T21944] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 466.166290][T21944] hid-generic 0003:0004:0000.0014: unknown main item tag 0x0 [ 466.187206][T31370] FAULT_INJECTION: forcing a failure. [ 466.187206][T31370] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.200349][T31370] CPU: 0 UID: 0 PID: 31370 Comm: syz.0.9612 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 466.200453][T31370] Tainted: [W]=WARN [ 466.200462][T31370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.200476][T31370] Call Trace: [ 466.200484][T31370] [ 466.200516][T31370] __dump_stack+0x1d/0x30 [ 466.200539][T31370] dump_stack_lvl+0xe8/0x140 [ 466.200559][T31370] dump_stack+0x15/0x1b [ 466.200615][T31370] should_fail_ex+0x265/0x280 [ 466.200639][T31370] should_fail+0xb/0x20 [ 466.200658][T31370] should_fail_usercopy+0x1a/0x20 [ 466.200686][T31370] _copy_to_user+0x20/0xa0 [ 466.200718][T31370] uhid_char_read+0x291/0x3d0 [ 466.200744][T31370] ? __pfx_autoremove_wake_function+0x10/0x10 [ 466.200782][T31370] ? __pfx_uhid_char_read+0x10/0x10 [ 466.200841][T31370] vfs_readv+0x3f8/0x690 [ 466.200872][T31370] ? __pfx_uhid_char_read+0x10/0x10 [ 466.200907][T31370] do_readv+0xe7/0x210 [ 466.200939][T31370] __x64_sys_readv+0x45/0x50 [ 466.200998][T31370] x64_sys_call+0x29f8/0x2ff0 [ 466.201021][T31370] do_syscall_64+0xd2/0x200 [ 466.201050][T31370] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 466.201090][T31370] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 466.201117][T31370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.201139][T31370] RIP: 0033:0x7f1d9375ebe9 [ 466.201215][T31370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.201235][T31370] RSP: 002b:00007f1d921c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 466.201254][T31370] RAX: ffffffffffffffda RBX: 00007f1d93985fa0 RCX: 00007f1d9375ebe9 [ 466.201326][T31370] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 466.201340][T31370] RBP: 00007f1d921c7090 R08: 0000000000000000 R09: 0000000000000000 [ 466.201352][T31370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.201390][T31370] R13: 00007f1d93986038 R14: 00007f1d93985fa0 R15: 00007ffd16300538 [ 466.201411][T31370] [ 466.201700][T21944] hid-generic 0003:0004:0000.0014: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 466.201911][T31377] FAULT_INJECTION: forcing a failure. [ 466.201911][T31377] name failslab, interval 1, probability 0, space 0, times 0 [ 466.291051][ T29] audit: type=1400 audit(1755197935.302:48059): avc: denied { create } for pid=31380 comm="syz.0.9617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 466.295257][T31377] CPU: 1 UID: 0 PID: 31377 Comm: syz.5.9615 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 466.295336][T31377] Tainted: [W]=WARN [ 466.295346][T31377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.295366][T31377] Call Trace: [ 466.295375][T31377] [ 466.295388][T31377] __dump_stack+0x1d/0x30 [ 466.295419][T31377] dump_stack_lvl+0xe8/0x140 [ 466.295495][T31377] dump_stack+0x15/0x1b [ 466.295519][T31377] should_fail_ex+0x265/0x280 [ 466.295552][T31377] should_failslab+0x8c/0xb0 [ 466.295602][T31377] __kmalloc_cache_node_noprof+0x54/0x320 [ 466.295727][T31377] ? __get_vm_area_node+0x106/0x1d0 [ 466.295837][T31377] __get_vm_area_node+0x106/0x1d0 [ 466.295951][T31377] __vmalloc_node_range_noprof+0x273/0xe00 [ 466.296017][T31377] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 466.296063][T31377] ? _parse_integer_limit+0x170/0x190 [ 466.296097][T31377] ? _parse_integer+0x27/0x40 [ 466.296199][T31377] ? __rcu_read_unlock+0x4f/0x70 [ 466.296221][T31377] ? avc_has_perm_noaudit+0x1b1/0x200 [ 466.296333][T31377] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 466.296373][T31377] __vmalloc_noprof+0x83/0xc0 [ 466.296418][T31377] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 466.296486][T31377] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 466.296525][T31377] ? bpf_prog_alloc+0x2a/0x150 [ 466.296563][T31377] bpf_prog_alloc+0x3c/0x150 [ 466.296611][T31377] bpf_prog_create_from_user+0x7d/0x260 [ 466.296698][T31377] ? __pfx_seccomp_check_filter+0x10/0x10 [ 466.296734][T31377] do_seccomp+0x5ef/0xa40 [ 466.296766][T31377] ? __bpf_trace_sys_enter+0x10/0x30 [ 466.296802][T31377] ? trace_sys_enter+0xd0/0xf0 [ 466.296891][T31377] __x64_sys_seccomp+0x40/0x50 [ 466.296923][T31377] x64_sys_call+0x2ad4/0x2ff0 [ 466.296954][T31377] do_syscall_64+0xd2/0x200 [ 466.296997][T31377] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 466.297031][T31377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 466.297067][T31377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.297099][T31377] RIP: 0033:0x7f6d3cbfebe9 [ 466.297121][T31377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.297198][T31377] RSP: 002b:00007f6d3b667038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 466.297224][T31377] RAX: ffffffffffffffda RBX: 00007f6d3ce25fa0 RCX: 00007f6d3cbfebe9 [ 466.297237][T31377] RDX: 0000200000000280 RSI: 0000000000000008 RDI: 0000000000000001 [ 466.297253][T31377] RBP: 00007f6d3b667090 R08: 0000000000000000 R09: 0000000000000000 [ 466.297271][T31377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.297289][T31377] R13: 00007f6d3ce26038 R14: 00007f6d3ce25fa0 R15: 00007ffdd2b73f78 [ 466.297372][T31377] [ 466.297385][T31377] syz.5.9615: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 466.308672][ T29] audit: type=1400 audit(1755197935.322:48060): avc: denied { connect } for pid=31380 comm="syz.0.9617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 466.309345][T31377] ,cpuset=/,mems_allowed=0 [ 466.309385][T31377] CPU: 1 UID: 0 PID: 31377 Comm: syz.5.9615 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 466.309534][T31377] Tainted: [W]=WARN [ 466.309544][T31377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.309564][T31377] Call Trace: [ 466.309575][T31377] [ 466.309586][T31377] __dump_stack+0x1d/0x30 [ 466.309624][T31377] dump_stack_lvl+0xe8/0x140 [ 466.309652][T31377] dump_stack+0x15/0x1b [ 466.309733][T31377] warn_alloc+0x12b/0x1a0 [ 466.309787][T31377] __vmalloc_node_range_noprof+0x297/0xe00 [ 466.309951][T31377] ? _parse_integer_limit+0x170/0x190 [ 466.309977][T31377] ? _parse_integer+0x27/0x40 [ 466.310041][T31377] ? __rcu_read_unlock+0x4f/0x70 [ 466.310073][T31377] ? avc_has_perm_noaudit+0x1b1/0x200 [ 466.310110][T31377] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 466.310277][T31377] __vmalloc_noprof+0x83/0xc0 [ 466.310422][T31377] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 466.310518][T31377] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 466.310556][T31377] ? bpf_prog_alloc+0x2a/0x150 [ 466.310601][T31377] bpf_prog_alloc+0x3c/0x150 [ 466.310646][T31377] bpf_prog_create_from_user+0x7d/0x260 [ 466.310698][T31377] ? __pfx_seccomp_check_filter+0x10/0x10 [ 466.310734][T31377] do_seccomp+0x5ef/0xa40 [ 466.310766][T31377] ? __bpf_trace_sys_enter+0x10/0x30 [ 466.310818][T31377] ? trace_sys_enter+0xd0/0xf0 [ 466.310869][T31377] __x64_sys_seccomp+0x40/0x50 [ 466.310902][T31377] x64_sys_call+0x2ad4/0x2ff0 [ 466.310936][T31377] do_syscall_64+0xd2/0x200 [ 466.311036][T31377] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 466.311071][T31377] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 466.311151][T31377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.311183][T31377] RIP: 0033:0x7f6d3cbfebe9 [ 466.311204][T31377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.311230][T31377] RSP: 002b:00007f6d3b667038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 466.311256][T31377] RAX: ffffffffffffffda RBX: 00007f6d3ce25fa0 RCX: 00007f6d3cbfebe9 [ 466.311349][T31377] RDX: 0000200000000280 RSI: 0000000000000008 RDI: 0000000000000001 [ 466.311366][T31377] RBP: 00007f6d3b667090 R08: 0000000000000000 R09: 0000000000000000 [ 466.311383][T31377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.311401][T31377] R13: 00007f6d3ce26038 R14: 00007f6d3ce25fa0 R15: 00007ffdd2b73f78 [ 466.311429][T31377] [ 466.311438][T31377] Mem-Info: [ 466.315404][ T29] audit: type=1400 audit(1755197935.332:48061): avc: denied { write } for pid=31380 comm="syz.0.9617" path="socket:[101576]" dev="sockfs" ino=101576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 466.319965][T31377] active_anon:3973 inactive_anon:3 isolated_anon:0 [ 466.319965][T31377] active_file:21915 inactive_file:2718 isolated_file:0 [ 466.319965][T31377] unevictable:0 dirty:769 writeback:0 [ 466.319965][T31377] slab_reclaimable:2565 slab_unreclaimable:15668 [ 466.319965][T31377] mapped:30792 shmem:850 pagetables:1105 [ 466.319965][T31377] sec_pagetables:0 bounce:0 [ 466.319965][T31377] kernel_misc_reclaimable:0 [ 466.319965][T31377] free:1876601 free_pcp:15135 free_cma:0 [ 466.349613][ T29] audit: type=1400 audit(1755197935.363:48062): avc: denied { create } for pid=31383 comm="syz.0.9618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 466.356549][T31377] Node 0 active_anon:15892kB inactive_anon:12kB active_file:87660kB inactive_file:10872kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123168kB dirty:3076kB writeback:0kB shmem:3400kB kernel_stack:3520kB pagetables:4536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 466.371691][ T29] audit: type=1400 audit(1755197935.383:48063): avc: denied { setopt } for pid=31383 comm="syz.0.9618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 466.372947][T31377] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 466.392392][ T29] audit: type=1400 audit(1755197935.403:48064): avc: denied { setopt } for pid=31383 comm="syz.0.9618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 466.397712][T31377] lowmem_reserve[]: 0 2883 7862 [ 466.418824][T31384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9618'. [ 466.431128][T31377] 7862 [ 466.431147][T31377] Node 0 DMA32 free:2949216kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952848kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 466.456026][ T29] audit: type=1400 audit(1755197935.473:48065): avc: denied { ioctl } for pid=31383 comm="syz.0.9618" path="socket:[101591]" dev="sockfs" ino=101591 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 466.465867][T31377] lowmem_reserve[]: [ 466.472309][ T29] audit: type=1400 audit(1755197935.484:48066): avc: denied { bind } for pid=31383 comm="syz.0.9618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 466.480522][T31377] 0 [ 466.530104][T31387] loop4: detected capacity change from 0 to 128 [ 466.531100][T31377] 0 4978 4978 [ 466.566077][T31387] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 466.568762][T31377] Node 0 Normal free:4537984kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:19024kB inactive_anon:12kB active_file:87660kB inactive_file:10872kB unevictable:0kB writepending:3076kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:56984kB local_pcp:45028kB free_cma:0kB [ 466.574752][T31387] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 466.579728][T31377] lowmem_reserve[]: 0 0 [ 466.605297][ T29] audit: type=1326 audit(1755197935.625:48067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31383 comm="syz.0.9618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x0 [ 466.605500][T31377] 0 0 [ 466.605516][T31377] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 467.408080][T31377] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949216kB [ 467.424639][T31377] Node 0 Normal: 744*4kB (ME) 2830*8kB (UME) 1011*16kB (UME) 552*32kB (UME) 523*64kB (UME) 263*128kB (UME) 90*256kB (UME) 85*512kB (UME) 35*1024kB (UM) 20*2048kB (UM) 1042*4096kB (UM) = 4537984kB [ 467.444059][T31377] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 467.453959][T31377] 25455 total pagecache pages [ 467.458667][T31377] 3 pages in swap cache [ 467.462838][T31377] Free swap = 124984kB [ 467.467068][T31377] Total swap = 124996kB [ 467.471232][T31377] 2097051 pages RAM [ 467.475030][T31377] 0 pages HighMem/MovableOnly [ 467.480303][T31377] 80439 pages reserved [ 467.493509][T28297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 467.529798][T21931] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 467.537983][T21931] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 467.545556][T21931] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 467.553449][T21931] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 467.560877][T21931] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 467.565645][T31397] loop5: detected capacity change from 0 to 512 [ 467.569097][T21931] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 467.581927][T21931] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 467.595784][T21931] hid-generic 0000:0000:0000.0015: hidraw0: HID v8.00 Device [syz1] on syz0 [ 467.635806][T31397] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 467.660375][T31411] loop4: detected capacity change from 0 to 512 [ 467.667058][T31411] ext4: Unknown parameter 'abort"data' [ 467.675933][T31413] vhci_hcd: invalid port number 23 [ 467.681020][T31397] EXT4-fs (loop5): mount failed [ 467.694969][T31415] loop1: detected capacity change from 0 to 512 [ 467.733716][T31415] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 467.742951][T31415] EXT4-fs (loop1): orphan cleanup on readonly fs [ 467.754846][T31411] loop4: detected capacity change from 0 to 1024 [ 467.761803][T31415] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.9628: corrupted inode contents [ 467.774486][T31421] FAULT_INJECTION: forcing a failure. [ 467.774486][T31421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.784641][T31415] EXT4-fs (loop1): Remounting filesystem read-only [ 467.787664][T31421] CPU: 1 UID: 0 PID: 31421 Comm: syz.5.9630 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 467.787713][T31421] Tainted: [W]=WARN [ 467.787725][T31421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.787797][T31421] Call Trace: [ 467.787806][T31421] [ 467.787816][T31421] __dump_stack+0x1d/0x30 [ 467.787908][T31421] dump_stack_lvl+0xe8/0x140 [ 467.787936][T31421] dump_stack+0x15/0x1b [ 467.787961][T31421] should_fail_ex+0x265/0x280 [ 467.787990][T31421] should_fail+0xb/0x20 [ 467.788073][T31421] should_fail_usercopy+0x1a/0x20 [ 467.788104][T31421] _copy_to_user+0x20/0xa0 [ 467.788146][T31421] simple_read_from_buffer+0xb5/0x130 [ 467.788179][T31421] proc_fail_nth_read+0x10e/0x150 [ 467.788264][T31421] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.788302][T31421] vfs_read+0x1a5/0x770 [ 467.788368][T31421] ? __rcu_read_unlock+0x4f/0x70 [ 467.788398][T31421] ? __fget_files+0x184/0x1c0 [ 467.788478][T31421] ksys_read+0xda/0x1a0 [ 467.788512][T31421] __x64_sys_read+0x40/0x50 [ 467.788543][T31421] x64_sys_call+0x27bc/0x2ff0 [ 467.788574][T31421] do_syscall_64+0xd2/0x200 [ 467.788693][T31421] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 467.788748][T31421] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 467.788842][T31421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.788873][T31421] RIP: 0033:0x7f6d3cbfd5fc [ 467.788894][T31421] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 467.788986][T31421] RSP: 002b:00007f6d3b667030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.789013][T31421] RAX: ffffffffffffffda RBX: 00007f6d3ce25fa0 RCX: 00007f6d3cbfd5fc [ 467.789032][T31421] RDX: 000000000000000f RSI: 00007f6d3b6670a0 RDI: 0000000000000005 [ 467.789050][T31421] RBP: 00007f6d3b667090 R08: 0000000000000000 R09: 0000000000000000 [ 467.789068][T31421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.789085][T31421] R13: 00007f6d3ce26038 R14: 00007f6d3ce25fa0 R15: 00007ffdd2b73f78 [ 467.789113][T31421] [ 467.790913][T31411] EXT4-fs: inline encryption not supported [ 467.797527][T31415] EXT4-fs (loop1): 1 truncate cleaned up [ 467.809208][T31411] EXT4-fs: Ignoring removed i_version option [ 467.815379][ T296] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 467.963545][T31411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.966466][ T296] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 468.054932][ T296] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 468.065948][T31415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 468.079012][T28297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.146763][T31437] loop0: detected capacity change from 0 to 512 [ 468.153392][T31441] __nla_validate_parse: 2 callbacks suppressed [ 468.153411][T31441] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9637'. [ 468.169673][T31441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9637'. [ 468.191106][T31437] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 468.212673][T31437] EXT4-fs (loop0): mount failed [ 468.216928][T31448] vhci_hcd: invalid port number 23 [ 468.219674][T31447] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9638'. [ 468.251595][T31451] FAULT_INJECTION: forcing a failure. [ 468.251595][T31451] name failslab, interval 1, probability 0, space 0, times 0 [ 468.264422][T31451] CPU: 0 UID: 0 PID: 31451 Comm: syz.5.9640 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 468.264471][T31451] Tainted: [W]=WARN [ 468.264478][T31451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 468.264492][T31451] Call Trace: [ 468.264508][T31451] [ 468.264516][T31451] __dump_stack+0x1d/0x30 [ 468.264542][T31451] dump_stack_lvl+0xe8/0x140 [ 468.264567][T31451] dump_stack+0x15/0x1b [ 468.264589][T31451] should_fail_ex+0x265/0x280 [ 468.264615][T31451] should_failslab+0x8c/0xb0 [ 468.264703][T31451] kmem_cache_alloc_noprof+0x50/0x310 [ 468.264738][T31451] ? getname_flags+0x80/0x3b0 [ 468.264764][T31451] ? fput+0x8f/0xc0 [ 468.264803][T31451] getname_flags+0x80/0x3b0 [ 468.264860][T31451] __x64_sys_execve+0x42/0x70 [ 468.264881][T31451] x64_sys_call+0x2716/0x2ff0 [ 468.264902][T31451] do_syscall_64+0xd2/0x200 [ 468.264998][T31451] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 468.265106][T31451] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 468.265139][T31451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.265168][T31451] RIP: 0033:0x7f6d3cbfebe9 [ 468.265184][T31451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.265215][T31451] RSP: 002b:00007f6d3b667038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 468.265279][T31451] RAX: ffffffffffffffda RBX: 00007f6d3ce25fa0 RCX: 00007f6d3cbfebe9 [ 468.265291][T31451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 468.265376][T31451] RBP: 00007f6d3b667090 R08: 0000000000000000 R09: 0000000000000000 [ 468.265388][T31451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.265404][T31451] R13: 00007f6d3ce26038 R14: 00007f6d3ce25fa0 R15: 00007ffdd2b73f78 [ 468.265429][T31451] [ 468.500505][T31453] loop4: detected capacity change from 0 to 8192 [ 468.537087][T30698] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.548429][T31453] loop4: p1 < > p2 p4 [ 468.552529][T31453] loop4: partition table partially beyond EOD, truncated [ 468.561177][T31453] loop4: p1 start 408832 is beyond EOD, truncated [ 468.567612][T31453] loop4: p2 size 8388352 extends beyond EOD, truncated [ 468.694807][T31479] loop5: detected capacity change from 0 to 512 [ 468.744195][T31480] loop4: detected capacity change from 0 to 8192 [ 468.750848][T31480] msdos: Unknown parameter 'flush [ 468.750848][T31480] appraise_type' [ 468.780208][T31480] ip6gre1: entered promiscuous mode [ 468.780189][T31479] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 468.809805][T31479] EXT4-fs (loop5): mount failed [ 468.823715][T31480] lo speed is unknown, defaulting to 1000 [ 468.873065][T31485] loop0: detected capacity change from 0 to 512 [ 468.882087][T31485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 468.899513][T31492] loop5: detected capacity change from 0 to 128 [ 468.900658][T31485] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 468.919674][T31485] ext4 filesystem being mounted at /524/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.946326][T24378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 469.017462][T31502] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9659'. [ 469.076170][T31506] vhci_hcd: invalid port number 23 [ 469.122670][T31514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9665'. [ 469.270929][T31521] macvtap0: refused to change device tx_queue_len [ 469.378985][T31530] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9672'. [ 469.757993][T31545] lo speed is unknown, defaulting to 1000 [ 469.836329][T31558] loop4: detected capacity change from 0 to 512 [ 469.855496][T31558] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 469.863691][T31558] EXT4-fs (loop4): orphan cleanup on readonly fs [ 469.872276][T31558] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.9683: corrupted inode contents [ 469.884581][T31558] EXT4-fs (loop4): Remounting filesystem read-only [ 469.892629][T31558] EXT4-fs (loop4): 1 truncate cleaned up [ 469.898759][ T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 469.910048][ T51] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 469.920773][ T51] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 469.931488][T31558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 470.061393][T31573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9688'. [ 470.188983][T31580] geneve2: entered promiscuous mode [ 470.200495][T31580] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31580 comm=syz.6.9691 [ 470.279203][T31588] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 470.317109][T31597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9696'. [ 470.326587][T31597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9696'. [ 470.361285][T31599] loop5: detected capacity change from 0 to 512 [ 470.372189][T31601] loop0: detected capacity change from 0 to 512 [ 470.380016][T31599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.388447][T31601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 470.392870][T31599] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.406591][T31601] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.430652][T31599] tmpfs: Bad value for 'mpol' [ 470.436771][T31601] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.9698: corrupted xattr block 19: overlapping e_value [ 470.451694][T21946] Process accounting resumed [ 470.452620][T31601] EXT4-fs (loop0): Remounting filesystem read-only [ 470.462945][T31601] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 470.472990][T31601] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 470.482941][T31601] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 470.498797][T28184] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.520894][T31609] loop5: detected capacity change from 0 to 512 [ 470.536252][T31609] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 470.544687][T31609] EXT4-fs (loop5): orphan cleanup on readonly fs [ 470.552311][T31609] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.9699: corrupted inode contents [ 470.564728][T31609] EXT4-fs (loop5): Remounting filesystem read-only [ 470.571343][T31609] EXT4-fs (loop5): 1 truncate cleaned up [ 470.577945][ T296] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 470.588583][ T296] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 470.599175][ T296] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 470.609728][T31609] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 470.663499][T28297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.681251][T31614] FAULT_INJECTION: forcing a failure. [ 470.681251][T31614] name failslab, interval 1, probability 0, space 0, times 0 [ 470.693985][T31614] CPU: 1 UID: 0 PID: 31614 Comm: syz.4.9700 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 470.694161][T31614] Tainted: [W]=WARN [ 470.694171][T31614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 470.694187][T31614] Call Trace: [ 470.694196][T31614] [ 470.694205][T31614] __dump_stack+0x1d/0x30 [ 470.694232][T31614] dump_stack_lvl+0xe8/0x140 [ 470.694276][T31614] dump_stack+0x15/0x1b [ 470.694297][T31614] should_fail_ex+0x265/0x280 [ 470.694322][T31614] ? rtnl_newlink+0x5c/0x12d0 [ 470.694355][T31614] should_failslab+0x8c/0xb0 [ 470.694392][T31614] __kmalloc_cache_noprof+0x4c/0x320 [ 470.694433][T31614] rtnl_newlink+0x5c/0x12d0 [ 470.694464][T31614] ? css_rstat_updated+0xb7/0x240 [ 470.694503][T31614] ? css_rstat_updated+0xb7/0x240 [ 470.694585][T31614] ? trie_lookup_elem+0x5a/0x430 [ 470.694612][T31614] ? refill_stock+0x32f/0x390 [ 470.694658][T31614] ? __rcu_read_unlock+0x34/0x70 [ 470.694684][T31614] ? bpf_trace_run3+0x12c/0x1d0 [ 470.694738][T31614] ? __memcg_slab_free_hook+0x135/0x230 [ 470.694778][T31614] ? __rcu_read_unlock+0x4f/0x70 [ 470.694803][T31614] ? avc_has_perm_noaudit+0x1b1/0x200 [ 470.694920][T31614] ? cred_has_capability+0x210/0x280 [ 470.694953][T31614] ? selinux_capable+0x31/0x40 [ 470.695043][T31614] ? security_capable+0x83/0x90 [ 470.695078][T31614] ? ns_capable+0x7d/0xb0 [ 470.695101][T31614] ? __pfx_rtnl_newlink+0x10/0x10 [ 470.695193][T31614] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 470.695259][T31614] netlink_rcv_skb+0x120/0x220 [ 470.695350][T31614] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 470.695384][T31614] rtnetlink_rcv+0x1c/0x30 [ 470.695427][T31614] netlink_unicast+0x5c0/0x690 [ 470.695492][T31614] netlink_sendmsg+0x58b/0x6b0 [ 470.695523][T31614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.695544][T31614] __sock_sendmsg+0x145/0x180 [ 470.695583][T31614] ____sys_sendmsg+0x31e/0x4e0 [ 470.695611][T31614] ___sys_sendmsg+0x17b/0x1d0 [ 470.695653][T31614] __x64_sys_sendmsg+0xd4/0x160 [ 470.695687][T31614] x64_sys_call+0x191e/0x2ff0 [ 470.695764][T31614] do_syscall_64+0xd2/0x200 [ 470.695817][T31614] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 470.695903][T31614] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 470.695932][T31614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.695961][T31614] RIP: 0033:0x7f8d0c25ebe9 [ 470.696014][T31614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.696037][T31614] RSP: 002b:00007f8d0acbf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.696070][T31614] RAX: ffffffffffffffda RBX: 00007f8d0c485fa0 RCX: 00007f8d0c25ebe9 [ 470.696159][T31614] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 470.696176][T31614] RBP: 00007f8d0acbf090 R08: 0000000000000000 R09: 0000000000000000 [ 470.696193][T31614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.696208][T31614] R13: 00007f8d0c486038 R14: 00007f8d0c485fa0 R15: 00007ffce0085cb8 [ 470.696233][T31614] [ 471.022456][T31619] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9702'. [ 471.067076][T31627] loop4: detected capacity change from 0 to 512 [ 471.082354][T31627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.095609][T31627] ext4 filesystem being mounted at /250/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.213661][T24378] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.261643][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 471.261661][ T29] audit: type=1326 audit(1755197940.317:48545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31635 comm="syz.0.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 471.328733][ T29] audit: type=1326 audit(1755197940.347:48546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31635 comm="syz.0.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 471.353188][ T29] audit: type=1326 audit(1755197940.347:48547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31635 comm="syz.0.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 471.376940][ T29] audit: type=1326 audit(1755197940.347:48548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31635 comm="syz.0.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 471.402305][T31638] siw: device registration error -23 [ 471.418638][T31632] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 471.603868][ T29] audit: type=1326 audit(1755197940.508:48549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31635 comm="syz.0.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 471.628349][ T29] audit: type=1326 audit(1755197940.508:48550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31635 comm="syz.0.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 471.652002][ T29] audit: type=1326 audit(1755197940.508:48551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31635 comm="syz.0.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 471.676345][ T29] audit: type=1326 audit(1755197940.508:48552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31635 comm="syz.0.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 471.700727][ T29] audit: type=1326 audit(1755197940.508:48553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31635 comm="syz.0.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 471.724333][ T29] audit: type=1326 audit(1755197940.508:48554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31635 comm="syz.0.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d9375ebe9 code=0x7ffc0000 [ 471.767155][T31648] loop5: detected capacity change from 0 to 512 [ 471.780594][T31648] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 471.789032][T31648] EXT4-fs (loop5): orphan cleanup on readonly fs [ 471.797915][T31648] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.9711: corrupted inode contents [ 471.810105][T31648] EXT4-fs (loop5): Remounting filesystem read-only [ 471.817865][T31648] EXT4-fs (loop5): 1 truncate cleaned up [ 471.823739][ T51] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 471.834402][ T51] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 471.846967][ T51] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 471.956977][T21946] hid_parser_main: 21 callbacks suppressed [ 471.956996][T21946] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 471.970502][T21946] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 471.978033][T21946] hid-generic 0003:0004:0000.0016: unknown main item tag 0x0 [ 472.007299][T21946] hid-generic 0003:0004:0000.0016: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 472.129873][T21946] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 472.137376][T21946] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 472.144909][T21946] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 472.152687][T21946] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 472.160583][T21946] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 472.168496][T21946] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 472.175948][T21946] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 472.197079][T21946] hid-generic 0000:0000:0000.0017: hidraw0: HID v8.00 Device [syz1] on syz0 [ 472.251676][T31680] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 472.356272][T31692] loop0: detected capacity change from 0 to 512 [ 472.375618][T31692] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.448133][T31698] vhci_hcd: invalid port number 23 [ 472.468565][T31702] netlink: 'syz.4.9723': attribute type 10 has an invalid length. [ 472.499361][T31702] team0: Port device dummy0 added [ 472.539296][T31702] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62587 sclass=netlink_route_socket pid=31702 comm=syz.4.9723 [ 472.634668][T31713] loop0: detected capacity change from 0 to 1024 [ 472.654750][T31713] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 472.697969][T31713] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 472.715724][T31717] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25973 sclass=netlink_route_socket pid=31717 comm=syz.5.9734 [ 472.728941][T31713] EXT4-fs (loop0): invalid journal inode [ 472.751712][T31717] FAULT_INJECTION: forcing a failure. [ 472.751712][T31717] name failslab, interval 1, probability 0, space 0, times 0 [ 472.765230][T31717] CPU: 1 UID: 0 PID: 31717 Comm: syz.5.9734 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 472.765300][T31717] Tainted: [W]=WARN [ 472.765309][T31717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.765325][T31717] Call Trace: [ 472.765333][T31717] [ 472.765343][T31717] __dump_stack+0x1d/0x30 [ 472.765369][T31717] dump_stack_lvl+0xe8/0x140 [ 472.765461][T31717] dump_stack+0x15/0x1b [ 472.765482][T31717] should_fail_ex+0x265/0x280 [ 472.765547][T31717] should_failslab+0x8c/0xb0 [ 472.765579][T31717] kmem_cache_alloc_node_noprof+0x57/0x320 [ 472.765647][T31717] ? __alloc_skb+0x101/0x320 [ 472.765686][T31717] __alloc_skb+0x101/0x320 [ 472.765720][T31717] ? kthread_insert_work+0x104/0x1f0 [ 472.765748][T31717] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 472.765788][T31717] nfc_genl_device_removed+0x39/0x1d0 [ 472.765827][T31717] nfc_unregister_device+0x1b/0x130 [ 472.765863][T31717] nci_unregister_device+0x146/0x160 [ 472.765902][T31717] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 472.765962][T31717] virtual_ncidev_close+0x2a/0x50 [ 472.765994][T31717] __fput+0x29b/0x650 [ 472.766037][T31717] ____fput+0x1c/0x30 [ 472.766107][T31717] task_work_run+0x12e/0x1a0 [ 472.766140][T31717] exit_to_user_mode_loop+0xe4/0x100 [ 472.766169][T31717] do_syscall_64+0x1d6/0x200 [ 472.766273][T31717] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 472.766305][T31717] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 472.766334][T31717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.766365][T31717] RIP: 0033:0x7f6d3cbfebe9 [ 472.766384][T31717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.766406][T31717] RSP: 002b:00007f6d3b667038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 472.766430][T31717] RAX: 0000000000000000 RBX: 00007f6d3ce25fa0 RCX: 00007f6d3cbfebe9 [ 472.766445][T31717] RDX: 0200000000000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 472.766458][T31717] RBP: 00007f6d3b667090 R08: 0000000000000000 R09: 0000000000000000 [ 472.766470][T31717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.766483][T31717] R13: 00007f6d3ce26038 R14: 00007f6d3ce25fa0 R15: 00007ffdd2b73f78 [ 472.766531][T31717] [ 472.996679][T31727] loop0: detected capacity change from 0 to 164 [ 473.032089][T31730] loop5: detected capacity change from 0 to 512 [ 473.047422][T31730] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 473.050923][T31719] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 473.095996][T31736] loop1: detected capacity change from 0 to 164 [ 473.112027][T31738] loop5: detected capacity change from 0 to 128 [ 473.119468][T31736] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 473.128838][T31736] FAULT_INJECTION: forcing a failure. [ 473.128838][T31736] name failslab, interval 1, probability 0, space 0, times 0 [ 473.142148][T31736] CPU: 1 UID: 0 PID: 31736 Comm: syz.1.9738 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 473.142207][T31736] Tainted: [W]=WARN [ 473.142216][T31736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 473.142232][T31736] Call Trace: [ 473.142239][T31736] [ 473.142248][T31736] __dump_stack+0x1d/0x30 [ 473.142275][T31736] dump_stack_lvl+0xe8/0x140 [ 473.142312][T31736] dump_stack+0x15/0x1b [ 473.142328][T31736] should_fail_ex+0x265/0x280 [ 473.142407][T31736] should_failslab+0x8c/0xb0 [ 473.142438][T31736] kmem_cache_alloc_noprof+0x50/0x310 [ 473.142466][T31736] ? getname_flags+0x80/0x3b0 [ 473.142496][T31736] getname_flags+0x80/0x3b0 [ 473.142568][T31736] user_path_at+0x28/0x130 [ 473.142630][T31736] __se_sys_quotactl+0xb6/0x670 [ 473.142656][T31736] __x64_sys_quotactl+0x55/0x70 [ 473.142683][T31736] x64_sys_call+0x15d6/0x2ff0 [ 473.142712][T31736] do_syscall_64+0xd2/0x200 [ 473.142763][T31736] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 473.142790][T31736] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 473.142852][T31736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.142940][T31736] RIP: 0033:0x7fd82425ebe9 [ 473.142956][T31736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.143034][T31736] RSP: 002b:00007fd822cc7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 473.143132][T31736] RAX: ffffffffffffffda RBX: 00007fd824485fa0 RCX: 00007fd82425ebe9 [ 473.143148][T31736] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000200 [ 473.143163][T31736] RBP: 00007fd822cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 473.143175][T31736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.143187][T31736] R13: 00007fd824486038 R14: 00007fd824485fa0 R15: 00007ffffadd56c8 [ 473.143209][T31736] [ 473.410918][T31749] __nla_validate_parse: 2 callbacks suppressed [ 473.410937][T31749] netlink: 76 bytes leftover after parsing attributes in process `syz.1.9743'. [ 473.471637][T31749] loop1: detected capacity change from 0 to 8192 [ 473.478857][T31752] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9741'. [ 473.789078][T31767] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 473.819200][T21944] hid-generic 0000:0000:0000.0018: hidraw0: HID v8.00 Device [syz1] on syz0 [ 473.871897][T31749] ================================================================== [ 473.880041][T31749] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 473.887201][T31749] [ 473.889527][T31749] write to 0xffff88812d14d75c of 2 bytes by task 31754 on cpu 0: [ 473.897246][T31749] fat16_ent_put+0x28/0x60 [ 473.901687][T31749] fat_alloc_clusters+0x4ce/0xa80 [ 473.906746][T31749] fat_get_block+0x258/0x5e0 [ 473.911345][T31749] __block_write_begin_int+0x400/0xf90 [ 473.916816][T31749] cont_write_begin+0x5fc/0x970 [ 473.921686][T31749] fat_write_begin+0x4f/0xe0 [ 473.926285][T31749] generic_perform_write+0x181/0x490 [ 473.931753][T31749] __generic_file_write_iter+0x9e/0x120 [ 473.937314][T31749] generic_file_write_iter+0x8d/0x2f0 [ 473.942700][T31749] vfs_write+0x527/0x960 [ 473.946980][T31749] ksys_write+0xda/0x1a0 [ 473.951255][T31749] __x64_sys_write+0x40/0x50 [ 473.955852][T31749] x64_sys_call+0x27fe/0x2ff0 [ 473.960554][T31749] do_syscall_64+0xd2/0x200 [ 473.965081][T31749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.970991][T31749] [ 473.973323][T31749] read to 0xffff88812d14d600 of 512 bytes by task 31749 on cpu 1: [ 473.981139][T31749] fat_mirror_bhs+0x1df/0x320 [ 473.985847][T31749] fat_ent_write+0xd0/0xe0 [ 473.990304][T31749] fat_chain_add+0x15d/0x440 [ 473.994923][T31749] fat_get_block+0x46c/0x5e0 [ 473.999563][T31749] __block_write_begin_int+0x400/0xf90 [ 474.005042][T31749] cont_write_begin+0x5fc/0x970 [ 474.009912][T31749] fat_write_begin+0x4f/0xe0 [ 474.014524][T31749] generic_perform_write+0x181/0x490 [ 474.019823][T31749] __generic_file_write_iter+0x9e/0x120 [ 474.025386][T31749] generic_file_write_iter+0x8d/0x2f0 [ 474.030777][T31749] vfs_write+0x527/0x960 [ 474.035041][T31749] ksys_write+0xda/0x1a0 [ 474.039297][T31749] __x64_sys_write+0x40/0x50 [ 474.043902][T31749] x64_sys_call+0x27fe/0x2ff0 [ 474.048595][T31749] do_syscall_64+0xd2/0x200 [ 474.053117][T31749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.059019][T31749] [ 474.061342][T31749] Reported by Kernel Concurrency Sanitizer on: [ 474.067493][T31749] CPU: 1 UID: 0 PID: 31749 Comm: syz.1.9743 Tainted: G W 6.17.0-rc1-syzkaller-00038-g0cc53520e68b #0 PREEMPT(voluntary) [ 474.081571][T31749] Tainted: [W]=WARN [ 474.085378][T31749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.095437][T31749] ================================================================== [ 474.207269][T31774] loop4: detected capacity change from 0 to 512 [ 474.251530][T31774] ext4 filesystem being mounted at /260/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.480796][T31783] siw: device registration error -23