last executing test programs: 5m6.422161271s ago: executing program 2 (id=940): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000001000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup3(r2, r1, 0x0) accept4$unix(r3, 0xfffffffffffffffe, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000400)={0x4800, 0x3, 0x20000000}, 0x10) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="240000001600010a00ffffffffffffff81000000040000000c"], 0x24}}, 0x0) 5m6.371167825s ago: executing program 2 (id=941): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044000) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x7fffeffd) 5m5.437555551s ago: executing program 2 (id=951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r1, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x40006) 5m5.272154864s ago: executing program 2 (id=952): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 5m4.103181509s ago: executing program 2 (id=962): socket(0x2, 0x80805, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800f09, &(0x7f0000000c00)={[{@inlinecrypt}, {@data_writeback}, {@minixdf}, {@discard}, {@dioread_nolock}, {@noacl}, {@barrier}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@nojournal_checksum}], [{@seclabel}, {@fowner_eq}]}, 0x1, 0x459, &(0x7f0000000640)="$eJzs3M9vFFUcAPDvTH+g/GpF/AGiVomx8UdLCyoHLxpNPGA00QMea1sIYaGG1kQIkWIMXkwMiZ6NRxP/Am9ejHoy8ap3Q0KUC+ipZmZnYHfZLSzd7hb380kG3tt50/e+ffN23szbbQB9ayz7J4nYGhG/R8RINVtfYKz637UrZ2f/uXJ2NomVlXf+SvJyV6+cnS2LlsdtKTLjaUT6aVJUUm/x9JnjM5XK/KkiP7l04oPJxdNnnj92Yubo/NH5k9MHDx7YP/XSi9MvdCTOLK6ruz9e2LPrjfcuvjl7+OL7P3+XtXdrsb82jk4ZywL/eyXXuO+pTlfWY9tq0slgDxtCWwYiIuuuoXz8j8RA3Oi8kXj9k542DlhX2bVpU+vdyyvA/1gSvW4B0BvlhT67/y23Lk09NoTLr1RvgLK4rxVbdc9gpEWZoYb7204ai4jDy/9+nW2xTs8hAABqfT771aF4rtn8L40Ha8ptL9ZQRiPivojYERH3R8TOiHggIi/7UEQ83Gb9jUtDN89/0kt3FNhtyuZ/LxdrW/Xzv3L2F6MDRW5bHv9QcuRYZX5f8TsZj6FNWX5qlTp+eO23L1rtq53/ZVtWfzkXLNpxabDhAd3czNJMPintgMvnI3YPNos/ub4SkETErojY3d6P3l4mjj3z7Z5WhW4d/yo6sM608k3E09X+X46G+EvJ6uuTk/dEZX7fZHlW3OyXXy+83ar+NcXfAVn/b64//xuLjCa167WL7ddx4Y/PWt7T3On5P5y8m/fLcPHaRzNLS6emIoaTQ3m+7vXpG8eW+bJ8Fv/43ubjf0dxTFbPIxGRncSPRsRjEfF40fYnIuLJiNi7Svw/vdp630bo/7mm73/Xz/+G/m8/MXD8x+9b1X97/X8gT40Xr+Tvf7dwuw1cy+8OAAAA7hZp/hn4JJ24nk7TiYnqZ/h3xua0srC49OyRhQ9PzlU/Kz8aQ2n5pGuk5nnoVLJc/MRqfrp4Vlzu3188N/5y4N48PzG7UJnrcezQ77a0GP+ZPweaH9OhpQdgI2i2jjY93IOGAF3XOP7T+uy5t7rZGKCrfF8b+tctxn/arXYA3ef6D/2r2fg/15BvsRYA3OVc/6F/tTv+l9epHUD3uf5D/zL+oS+t5Xv9EuuWON/GnzDoUSLSDdEMiXVK9PqdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CwAA//9iCO4i") r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x2711, &(0x7f0000000000)={0x0, 0x703b, 0x40, 0x3, 0x800001b7}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x7, &(0x7f00000005c0), 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) r4 = inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = inotify_add_watch(r4, &(0x7f0000000240)='./file0\x00', 0x8c7) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYRESOCT=r2, @ANYRESHEX=r6], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x18, &(0x7f0000000b40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES16, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff000000003fa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000080000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = syz_io_uring_setup(0x38d9, &(0x7f0000000800)={0x0, 0x3, 0x1, 0x800000, 0xaa, 0x0, r5}, &(0x7f00000005c0), &(0x7f0000ffe000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r9, 0x2, &(0x7f0000000180), 0xfe) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r5, 0xf504, 0x0) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x69) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000200ff05142603600e12080005007a010401a80016002000034004110000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd7}], 0x1}, 0x4000004) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES64, @ANYBLOB="39a877114576a9334090b04f928ad52923223a5e951b44ea9099de77453a8c0000ff74755a5c50f334c63c61806ab267aafdc961"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x22}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) 5m3.853983649s ago: executing program 2 (id=965): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) perf_event_open(&(0x7f0000003340)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100, 0x7}, 0x2202, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="450a000000000000611174000000a663315400000000fefd8876b70003000000009500a10000000000000000778c3832dad165c5a63f8bd2c6b6f459736f16892517ed3d12f73d306676351d8f65946729260000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2021) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x51, 0x0, 0x8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x80001}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000960000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000007d2f000000000000000000000000000000001c00200000004e2100000000ac1e04010000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x7, &(0x7f0000000400)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000580)='GPL\x00', 0x4, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x3) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r4, @ANYRES8=r2, @ANYRES8=0x0, @ANYRESHEX=r7, @ANYRES8=r6, @ANYRES16=r4, @ANYRESHEX], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0xb}, 0x18) 5m3.84257234s ago: executing program 32 (id=965): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) perf_event_open(&(0x7f0000003340)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x100, 0x7}, 0x2202, 0x10000, 0x0, 0x9, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="450a000000000000611174000000a663315400000000fefd8876b70003000000009500a10000000000000000778c3832dad165c5a63f8bd2c6b6f459736f16892517ed3d12f73d306676351d8f65946729260000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2021) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x3) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x51, 0x0, 0x8, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000001c0), 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffe, 0x0, 0x0, 0x0, 0x80001}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="70010000100033060000000000000000fc000000000000000000000000000000fe88000000000000000000000000000100"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000960000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000007d2f000000000000000000000000000000001c00200000004e2100000000ac1e04010000000000000000000000001c0004000200"/296], 0x170}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x7, &(0x7f0000000400)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000580)='GPL\x00', 0x4, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x3) capset(&(0x7f0000a31000)={0x20071026}, &(0x7f0000000040)) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8=r1, @ANYRES32, @ANYRES8=0x0, @ANYRES32=r4, @ANYRES8=r2, @ANYRES8=0x0, @ANYRESHEX=r7, @ANYRES8=r6, @ANYRES16=r4, @ANYRESHEX], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r8, 0x0, 0xb}, 0x18) 3m8.110073927s ago: executing program 4 (id=2511): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)) creat(&(0x7f00000000c0)='./file0\x00', 0x48) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(0xffffffffffffffff) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3m8.109677938s ago: executing program 4 (id=2512): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYRES32=r4], 0x20}}, 0x10) 3m7.965919789s ago: executing program 4 (id=2515): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c5042, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) close(0x3) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044000) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write(r1, &(0x7f0000000740)="cc", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) openat(r1, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0) sync() mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000240)='./bus/file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix']) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 3m7.753015176s ago: executing program 4 (id=2519): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100, 0x2, 0x4}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD) io_uring_enter(r0, 0x2def, 0x9566, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x57e, 0x201e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) 3m7.117312878s ago: executing program 4 (id=2531): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x752887e04b6038ce, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e841cca555077e3a159110193dd2ff1fa7c3205bfedbe9d8f3bd23cd78a07e32fe0231368b2264f9c504b2f1f65515b2e1a38d522be18bd10a48b043ccc42646d25dfd73d06d7535f7866925d86751dfced1fd8accae669e173a659c1cfd6587d47578f4c35235138d5521f9453559c35da860e8efbcbfb42c30d294a55e1c46680bee88956f2b3599f455c7a3a49a01010000009f2f0517e4ca0e1803a20000000013d4e21b3336f1ae0796f23526ec0fd97f7325eac34c4dfafe7cc03b0864009d2e7d7ff6ff72ba8972b122b09789d99b3d0524f39d5ae913b2d22eb2c09244ba5dbe9180950f76f7049db5cb19d7962fed44e00f39ed8c13a11fa798de504e2865cd81f2b77fdd76c677f812d249c8130b018d4300000020000000db3947c85c3a9027ce9e856fa8b7fb05000000000000593d60abc9b3e67d127e56f3d3759dcfeb820634fd4d419efaefc74305b2bea2000600000051fcf5d62205561b6efaad206335a309f7b9e01446a6285f4665a7fe3cda2349f8bf400100000000000000f40f420ee83f2d9babe7b922401639ce3c4ff0850a8e078374909413f3fbd3ced3285252dc81a46ef7ce29484dc6b6adfd7a4db730fc594609654d97836f171b766ffd7526847a6bfda9c648e8aa5c558aa6d463ec9d840f3914909187b6b0776952be71b0417d33d3ab25493418ba0fbacf768e07c1a939d31f606085b9e3efc93b0f58d5ec37494d9d10d76e603129e9a726579ac7d672cacd581b7ca77b3610b74039fffd42051d4b7443e5b49c000000000000007d6173050027791c9c1e04ad3711a66da2254a6f911b1469c62a6e1e3f9c1715c009a58e6eadac8f61b45853673df72dc813f7454ae22d79ac48034282f03040889500000000179dcf66d93907cedd49e0c5752f755849953957143a0335d2f62acbf18b251ce63b29fe177745448ccc925770fac12cf9e291200df6bb669d5a57dd74df817ef2f8698f710c359afe73947afebdf5536e4db8b0231d0cbc798766ec60586f14b44775bc9d250e4515cb83275d3b495fa90000e69a68b47ac4595463e1442d88e0606a060000cc914fae896ab129ccdf8792a8435972c8391d132a2fcbd40e865d62cc7c4200000000000000000000000000000800002a77fbbccfdb1ab3d8434905f09726b8145ea99c7640faab578dc98a6134df0a10a54ce7e7ddbb709a27d977d1f91ab9ee940700009594c9a50961b7fcc56d82584dc8254df7c411fa61353a6897c4f3b9f152fdf6f2ab47adb29aefecce96c94f360e129c9f2af569c794b68b2ead404bcdd4aa9cb6a128e1ad45fd4030e1e69adf4986b7860f3122d59c079f0f9a1732f691590f45512aec4ed2413f66cac7dd022301741c576dea82005b166d6c3b9ed0c297ac197a92188a618745e78dca0b3c62f1601243089d9c687563382b0b88a7d80fd7bf7fae8a690f52db1464d29b1b926414cd35705c89662c585e32c881d917b74f027674dbc017499ba15a2e2900000000000000000000000000007b593ecbdd162fee9f239a3c615b3e9a3fb0af254bdd247a5a5abdbc0123c950eec0f1800b295be71418dd65de15e11beef9630499c70fce74135a7c7c8e818b79b85ff65d59d89492d7a663d3f25651e252ab49d358eac853ffe182ee37a5db085a072647719cb8604ba2e0b80af3f1867bd8fb6afca671437e0a5a9d5a088436739262d894986882ec0fb419a377ef47f4920a5de6d8de0d3090b4cb6b773e825442d351f980eed0d997a4d98a5121e941b145e2186546c646128a3e69f52fcad83a026def90b9eb55f4a0a2251bbae428c6c017b5a47f1580831a7ce232857e6aa9e777e99da1a3ad03fdc93fa7ed96228deac5e3bce983971041297a6ba18783a2edc7e3901cc891035872c61e7ea375b0902be0c5cc7fdef968ba1ca17ce5e11f2f384cd28c1194f56d3cf074e8ba4e60e84dc2f352c3cd170581aee0c93ca8ceff84cda40325d340759e79e5c4bcec227e37f7ec2193c78877fb319ec1f2d4dcf1d46a15cde1d6cecce6ecdb0c0a3413394d51341a7b3606ad8c29b6dbf6be3265b528c3208de35161bfe19678df43a45b314e5a0f8754cfaf4f9d3fdf9c8f7b7c296bf2e632d25ba8ee6369b362a8e4c9dff176d482d32249c93680a04f6464f184acfd0376662fee9e1031e569248db9bc724cdd97976a4d7c5c5172d1383fa1e442f68a14b747a9f2597bf115dd0111fe8ba3584a43176f33bd39a408f8648b19839bba9cc47624ea19e46dbbdf0faf591bcdc8613828a0c5a40c04ae34bbf4a0e27828b0c7cb9d7a7455db030425a4bd69cf6dcb4b1d066f8ef4ea1c710e05819df82d5cc94ace6b41c2de37a2eaf24f24b3d9a7dd4d197d51407be3e90000000000000000dbc0b0d6e11ccb71437ebea7ad01d5b93a7a0561e4a1b3fa1aa9c75f3aaec4ace1b6201a3e007b657be62df59133b4d8f0f145d9fc954cc7792077268bf0977e2a699722ce3dbb97248b8a8a771dd0f7d9c97e6587524a44fd6d49330ccbc39ca277b84f7f0a39759ef0b42388bd69fe341a925e8cdc5d7b2d6ddb7331a081bd0672bf4d02255de095a179e51bf5492d4e89c3cbad59db725c0dd7e35cbd9887175286a37d7621a361eb830cc5b842b11b5d040ccceb254d6a0c9c43718d0816bb2465928e236101b8cd46b5ef9cb930378a9249cbb41b92fe3caef70845cde9bb78d71c512153d2f1d765b56d2e5ef3e3d34975787646630051074c9706747fda873ccfdb394fc269c8cfadc0a52c3402f3920001ddd312969ecc08a99f5a3be58de34149af8360a7db3f301e656c5485d5de03be99b04e3593e8e18d7b635ca24a915c82122ac7a5bf6d011ee91573d66fc9522a76fa00211d62dc123fd51d1cb2ce1d4f3a62f99e2d93b2d34324a962a3762b6e8d7d3a7f73af6eb264b44822d8847442c3df4771df9a5d79443174b191878fe586facc18035f09fd70a137809ce970e31c4e6a8e48ce2fc30316087caaa2ed0bda52e969fda35236ac9aedb241a114a8cf1c49b8bd3f73"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r5}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, r7, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r8, 0x1, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 3m7.002401097s ago: executing program 4 (id=2534): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 2m51.885304722s ago: executing program 33 (id=2534): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') statx(r0, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, &(0x7f0000000080)) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 3.723340848s ago: executing program 3 (id=5233): r0 = memfd_create(&(0x7f00000003c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) fcntl$addseals(r0, 0x409, 0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES64=r0, @ANYRES64=0x0, @ANYBLOB="e90d19a17a84cb870ebb9ce00de7827adc0d91a11ec1667c3fafeb42446acadb7e58c237a19680997dcf2f42115790c7f33374b9f12d9e3308cd90723c87490bd95f0118404ef3aac9bddf80f846e47c4dee2bfdc020c2a0563c94480564fa52844e7fb0dcc29a36443b3df79935ad7a3ec921508373c47931e908ef63f49c49dee3e57639373b479cc899a861b0f65053f6b57648adde4cdef804aa63db4bc950239511edc1ca03cec8", @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES16=r0], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYRESHEX=r2, @ANYRES16=r3], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb, 0x80010, r4, 0xdd21f000) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300000000000085"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x3) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) set_tid_address(0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x3, 0x0, 0x101, 0x100}}) r9 = syz_io_uring_setup(0x466, &(0x7f0000000440)={0x0, 0x86ed, 0x10100, 0x2, 0x4}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x1) syz_io_uring_submit(r10, r11, 0x0) io_uring_enter(r9, 0x291c, 0x0, 0x42, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.682915113s ago: executing program 3 (id=5241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001000000080001001400000008000300", @ANYRES32=0x0, @ANYBLOB="0002000000b6515083"], 0x30}}, 0x44) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r7, 0x0, 0xbf5, 0x2000402) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYRES32=r8, @ANYRES8=r6, @ANYBLOB="dc1b1a7a84e17f94bd3ac16f468afaa7c6446ae80a759a587eacae5cc8fcd5000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x44}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x200048c0) 2.488460698s ago: executing program 0 (id=5245): syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000b00000091119500000000009500005e"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x9}, {0x0, 0xfff1}, {0xe, 0xe}}, [{0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r2, 0xc0105500, &(0x7f0000000000)=ANY=[@ANYBLOB="a1"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000bb00551a791de642e048770ce32acf441b8b650500000000c195817505000000", @ANYRES32=r7, @ANYRES64=r3], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x35, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x7}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r9 = socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000000)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_nolock}]}, 0x21, 0x784, &(0x7f0000001900)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r10, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r11, 0x0, 0x3, 0x800000) connect$qrtr(r9, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) 2.424445153s ago: executing program 3 (id=5246): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) close(0x3) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044000) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat(r2, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0) mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000240)='./bus/file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix']) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 2.120710168s ago: executing program 5 (id=5249): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) close(0x3) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044000) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat(r2, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0) sync() mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000240)='./bus/file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix']) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xc) 1.673625844s ago: executing program 0 (id=5255): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r1, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0103000000000000000001000000080001001400000008000300", @ANYRES32=0x0, @ANYBLOB="0002000000b6515083"], 0x30}}, 0x44) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r7 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) fallocate(r7, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0xc, r7, 0x0, 0x5, 0x0, 0xfffffffffdffffff}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYRES32=r8, @ANYRES8=r6, @ANYBLOB="dc1b1a7a84e17f94bd3ac16f468afaa7c6446ae80a759a587eacae5cc8fcd5000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x8040) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x4, 0x44}}}}, [@NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x200048c0) 1.373430638s ago: executing program 6 (id=5257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, r7, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24}, 0x14) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r8, 0x1, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 1.10381221s ago: executing program 6 (id=5259): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0900000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000004d6af69d0000000000004600", @ANYRES32=0x0, @ANYRES32], 0x50) 984.04073ms ago: executing program 6 (id=5260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) io_setup(0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x50}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], 0x0, 0xa}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0, 0xfffffffffffffea3}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x103, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1000, {[0x9, 0xdaa, 0x7fff, 0x31, 0x5, 0x1, 0x6d2e, 0xc33]}}, 0x5c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a3100"], 0x140}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 885.383718ms ago: executing program 3 (id=5261): r0 = socket(0x11, 0x3, 0x2) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffd}, 0xd) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104010400000000398f0000000000000500010001"], 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200c8016}, 0x94) r6 = getuid() fchown(r4, r6, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r4, 0x0, 0x0) clock_adjtime(0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @link_local}, 0x14) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x84800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 839.424081ms ago: executing program 0 (id=5262): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.numa_stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000002c0), 0x1}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, 0x0, 0x894) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000280)={{&(0x7f0000000180)=""/144, 0x90}, &(0x7f0000000000), 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) r2 = memfd_create(0x0, 0x6) fallocate(r2, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40400) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) 838.385742ms ago: executing program 5 (id=5263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000), 0x4, 0x5eb, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000040)='./file0\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 826.632953ms ago: executing program 1 (id=5264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0, 0xfffffffffffffea3}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 667.081196ms ago: executing program 5 (id=5267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000880)=ANY=[@ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="8a64c64b51fec8e5f763f871cb68de26d0c07b0c2d97ee571931f0353375f826f6ada18a33d3404da9e5151da419ca5b23eadf3cda16944eeedf291f86442d701c713d47247aa598ec0c511e50c279f64d01fa9456e847b4af9597b845f3b333c56279a1acdc582337cb184098b9a83be624fb9e049cfff5d44feddb393ebf409cef6f9cba74e198d8680506d0d72a8e30aaf97eb7df4c599eaa7da945d925c6dfbd5af6d230f6e1dab71a3661739937a9d0889a01321107cbf2b847eff2a5e6fe6b2ab4414dcf7114ca4ecfdb68667376", @ANYBLOB=',access=', @ANYRES16=0x0]) 535.518207ms ago: executing program 6 (id=5268): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x752887e04b6038ce, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x3}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3}, 0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) 521.532397ms ago: executing program 5 (id=5269): socket$nl_route(0x10, 0x3, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000000000009000000000000000000000000f189f3ea52758b7659b2109f0dfcd9b620d5afd5e814f26d72b50622f07a1a89b3c2d6d089efb2f27b9e4aed10769e41f4ebe786949f43d58d502e108962582d8ceccc5027fa85d5333e7c0f89d31c537b6bf93db33c9beaaf0ef604468fffefeb101cf837d14a21ed1a0e78c6d69c39a1650c8d3ff31358638440c15cd9bee6"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@map, 0x15, 0x0, 0x6, &(0x7f0000000900)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00100002e303c4445ac51400"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000400"/28], 0x50) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@map=r6, 0xffffffffffffffff, 0x1d, 0x2000, 0xffffffffffffffff, @value=r7, @void, @void, @void, r5}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB='0\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="b8a53ff5fe67adb7d8d8c0e81e3e33f53562763303a25e16aba8598e1fe1526ecee913e9a6aafc267936caec8ced983a410052ab38f797df74e2625c59361465f921bbe97c37c9ae21a1804a97b119f3b023898a389a300afece0c4e38d45c2c001dc1f3f7e45b5420599a8500dc0013321d4058957567a4eb", @ANYRES64=r5], 0x20) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r9, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x2, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x800, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 458.093203ms ago: executing program 6 (id=5270): socket$nl_route(0x10, 0x3, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000400000000000009000000000000000000000000f189f3ea52758b7659b2109f0dfcd9b620d5afd5e814f26d72b50622f07a1a89b3c2d6d089efb2f27b9e4aed10769e41f4ebe786949f43d58d502e108962582d8ceccc5027fa85d5333e7c0f89d31c537b6bf93db33c9beaaf0ef604468fffefeb101cf837d14a21ed1a0e78c6d69c39a1650c8d3ff31358638440c15cd9bee6"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@map, 0x15, 0x0, 0x6, &(0x7f0000000900)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000ac0)=[0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="00100002e303c4445ac51400"/28, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000400"/28], 0x50) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff, 0x37, 0x0, @void}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000bc0)={@map=r6, 0xffffffffffffffff, 0x1d, 0x2000, 0xffffffffffffffff, @value=r7, @void, @void, @void, r5}, 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[@ANYRES32=r8, @ANYRES32=r3, @ANYBLOB='0\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="b8a53ff5fe67adb7d8d8c0e81e3e33f53562763303a25e16aba8598e1fe1526ecee913e9a6aafc267936caec8ced983a410052ab38f797df74e2625c59361465f921bbe97c37c9ae21a1804a97b119f3b023898a389a300afece0c4e38d45c2c001dc1f3f7e45b5420599a8500dc0013321d4058957567a4eb", @ANYRES64=r5], 0x20) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r9, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x2, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x800, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 254.325199ms ago: executing program 1 (id=5271): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x752887e04b6038ce, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$eJzs3c9v2+Ydx/EPZdmWPSAbtqEIgjR+mqyAg2WKJDcujOxQjaJsdpIokPJgn4qssYsgcrolGbD40vmyH8D2D+zWSw/7IwbsvPP+gR0HFNtOA3bhQFLUb0qOYztd834ZiR6RX/L58kf0DS3xkQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCy7ViqVLTXc1u6eyWbXfK85Y36ytkXdThq35/YrWdEfFQq6mky6+t3B7Leiv27qevLsugrRQ0HH33jrW/e/k8+ly89I6Cz0sit89uL48YNu9+Dp2XoLrbMsdyEmMlHuFEttOy038NxmddsxbuCZrc3N0t2demDqbsMJ9oOO0zS27+Q6nm/W7dumvLW1YZzivrfb2q5VG0468f0fVEqlTfPhcu/w3/2wGNg7bqPhtrbjmGh2FLPcP0OcatOYw0fdg40Z+aXhB+V5WxKtqTIvqFKqVMrlSqW8eW/r3vulUn5iQmmMJiIGJ+1X5+DjMp3DqzZwPnJR/f+7JTVUUEu72pOZ+mOrJl+emhnze9L6/+5dZ2a/w/U/rfJXB7OvKa7/N5JnN7Lqf0YuRiZeYNocK2P62X6e6YWO9VgP1FVXB3p6PutdO78ML/ZnW8pLrgJ5ctVUVdtyZHpTjLa0qU2V9JF2VFcgo7pcNeQo0L4CdeSoGR8TX46q6siTL6N12boto7K2tKUNGTkqal+edtXStmqq6j9hGB7qUbzfN2bkqDSoPDRxNSso3z8HJ9eUVf9/+lmyRGb9z2tK/cfXT//cOUUM8NqFvev/TMtTp65dXEYAAAAAAOC8WfFv3634vfu3JYWquw2n9LrTAgAAAAAA5yh+5/969LAYtd6WlXH9H15+bgAAAAAA4HxY8T12lqTV+EP91uBOqNN8CGDhElIEAAAAAACvKH7//8aSFMY3+q/JeqnrfwAAAAAA8H/gt0Nj7OfTMXbD9G39nKSgvWz9+Z/L8hetk/be96yjajSnetSLmfgEQKd+zcorGag3Hq93SVL8zHauW73xgXuDYFrJwL7Sl4fzxvq3/LEElhbSX19MSeDK8VACm/neM/1e7yQx7/T6fXicUzwn6WW17jacou017pdVrV7JdZy9zi+ePPql5Pe38/BR96D48afdh3EuJ9Gkk6Moj89G0snNy+V5PN5CfM/FtC1eUT3t8net5qoV91tKt39B1aPccEen2/5f62YSc3M1eVw9To+ArF/1GuVifMgGWx+PDmENsii3VzWy5dMOREYWhTiLW0nMrfVbyUOaX3IUCt9fkCrFyWPgD2dRGd7/8/eF9a+JfTEnC7kNZyPK4i/RijKy2Hi5LCaOCAC8LoeDKhQPYj45xv543T3Lq9xhOqx6ZnX/YLSX538MkxsOF6R8772J5CbErLqi6BV9PQlb0r+jh/y1sVf0+NbGXl0pKOMVvTRe11+iukV9/WnwHUi9tHtz8v0s/huG4f1y3O8fhqpq1O/n0QKfZ/YbNCoL0S68+/zoZ/EA+JFPDj45eFKpbGyW3iuV7lW0GG9G74HaAwCYYv537IxGFAb1rF+73+tfVT/8x7tJa6Tufrv/kYKiPtan6uqh7qRfIbA2vd/VoY8h3Jm8ao1iV6Tx2LLuZF7VxbV0KLbSj11Uusjo/xcGsRvju+2DCzgUAABcmptRHW59s/98Xv2fdu1+J73uXr8WX1SOX3eP1vLxbwjOii1f6n4AAOBNUvC/tFY7v7F8321/VN7aKlc7O47xPfvHxndr245xWx3Ht3eqrW3HtH2v49lew7R9Lbs1JzDBbrvt+R1T93zT9gJ3L/7md9P76vfAaVZbHdcO2g2nGjjG9lqdqt0xNTewTXv3Rw032HH8eOGg7dhu3bWrHddrmcBbke0UjQkcZyjQrTmtjlt3o2bLtH23WfX3zU+8xm7TMTUnsH233fGSFaZ9ua265zfj1RYVzviiQwAA3hzPXhw/ftDtHjyd0ThR0kg/jzYjeGnaCl/zJgIAgDFUaQAAAAAAAAAAAAAAAAAAAAAAvvpOc//fzEZ6U2A6ZVFTgqX+lJ9fOdWaLQ2mfPG3V8rwDI3c+JQwDPOSwvmL/zVp5KfFrESNJUnddPcPx5yc61asnSpYSSN//vtwRZp2JlxY44eHo+fhREw0c+qs5f6xyL/6P4dpjSdfZMwKw3DOGbU8ug+XZm3gaCM6XZ8uvcIhuPzXIgCX638BAAD//58PN4Q=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x18) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x12, r7, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xcf, 0x0, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x24}, 0x14) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r8, 0x1, &(0x7f0000000480)={&(0x7f0000001240)=""/4096, 0x1000}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) write$sndseq(r9, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 249.167229ms ago: executing program 5 (id=5272): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a028}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 205.599933ms ago: executing program 0 (id=5273): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000000000000000004d6af69d00000000000046", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) 194.461864ms ago: executing program 6 (id=5274): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) close(0x3) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4044000) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) write(r2, &(0x7f0000000740)="cc", 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x20, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(r2, &(0x7f0000000300)='./bus/file0\x00', 0xa4001, 0x0) sync() mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000240)='./bus/file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix']) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000040)=ANY=[@ANYBLOB='-4'], 0xc) 178.079536ms ago: executing program 5 (id=5275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r5, &(0x7f0000000600)="7b424126ae620c660fa7e420be71c606c17d14913a59f35c9d2319ba9f61630ed497fbf6a4e30a60bb056d2767034c454ce0b171c725c8f2b7d20c945a00e6db286988081803eb2bb2d7ce14906f32c54868ec76943ea12eb2384e830673a98665e36700f2ed4e12ac6f2bc92bdbb36d4ddf0a685b5e9ac8a09869985a1ec53da9879d2e1be729d0f8548eb889ba9db863", 0x91) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x2) ftruncate(r4, 0xe19f) syz_read_part_table(0x5df, &(0x7f0000000000)="$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") 167.036106ms ago: executing program 1 (id=5276): r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='cpu_frequency_limits\x00', r2, 0x0, 0x8}, 0x31) connect$vsock_stream(r0, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) close_range(r3, r3, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0xa8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x7ff}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000000}]}]}]}}]}, 0xa8}}, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) mincore(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x39004, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x1, 0x0, 0x4004) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000002c0)={0x400000, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000200)="05", 0x1}]) 59.979425ms ago: executing program 0 (id=5277): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000003c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x8, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback, 0x7}}]}, 0x80}, 0x1, 0x7}, 0x0) open(0x0, 0x145142, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0xffffffff}, 0x0, 0x0) 59.356745ms ago: executing program 0 (id=5278): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0xffffffff}, 0x0, 0x0) 36.073507ms ago: executing program 1 (id=5279): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) io_setup(0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x1}, 0x50) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x8}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x50}}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], 0x0, 0xa}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0, 0xfffffffffffffea3}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x47f8, 0x0, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0xfffc, 0x103, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x16}, 0x4}, 0x1000, {[0x9, 0xdaa, 0x7fff, 0x31, 0x5, 0x1, 0x6d2e, 0xc33]}}, 0x5c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a010100000000000000000700000009"], 0x140}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 0s ago: executing program 3 (id=5280): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x752887e04b6038ce, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x3}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@deltaction={0x38, 0x18, 0x1, 0x70bd28, 0x25dfdbfe, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x38}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000040)=0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) kernel console output (not intermixed with test programs): 257][T18576] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 360.775391][T18585] netlink: 'syz.6.4470': attribute type 1 has an invalid length. [ 360.891177][T18596] loop6: detected capacity change from 0 to 512 [ 361.312483][T18606] loop5: detected capacity change from 0 to 512 [ 361.319647][T18606] EXT4-fs: inline encryption not supported [ 361.332550][T18606] ext4: Unknown parameter 'noacl' [ 361.512963][T18612] loop1: detected capacity change from 0 to 512 [ 361.540514][T18614] usb usb9: usbfs: process 18614 (syz.0.4476) did not claim interface 16 before use [ 361.555400][T18612] netlink: 'syz.1.4475': attribute type 13 has an invalid length. [ 361.585108][T18612] loop1: detected capacity change from 0 to 1024 [ 361.600323][T18612] EXT4-fs: inline encryption not supported [ 361.606387][T18612] EXT4-fs: Ignoring removed i_version option [ 361.636207][T18612] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 361.665115][T18612] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.4475: lblock 1 mapped to illegal pblock 1 (length 1) [ 361.694205][T18612] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4475: Failed to acquire dquot type 0 [ 361.765659][T18612] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.4475: Freeing blocks not in datazone - block = 0, count = 4096 [ 361.800707][T18612] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4475: Invalid inode bitmap blk 0 in block_group 0 [ 361.813842][T18612] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 361.822657][T17179] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:38: lblock 1 mapped to illegal pblock 1 (length 1) [ 361.837893][T18612] EXT4-fs (loop1): 1 orphan inode deleted [ 361.849062][T17179] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 0 [ 361.855831][T18612] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm syz.1.4475: lblock 1 mapped to illegal pblock 1 (length 1) [ 361.895225][T18612] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4475: Failed to acquire dquot type 0 [ 361.913836][T18621] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4478'. [ 361.923099][T18621] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4478'. [ 361.999334][T18627] loop1: detected capacity change from 0 to 164 [ 362.020481][T18634] netlink: 'syz.5.4481': attribute type 1 has an invalid length. [ 362.179094][T18645] lo speed is unknown, defaulting to 1000 [ 362.253491][T18645] vxcan1 speed is unknown, defaulting to 1000 [ 362.509878][ T3396] Process accounting resumed [ 362.544612][T18664] loop1: detected capacity change from 0 to 512 [ 362.544640][T18668] 9pnet_fd: Insufficient options for proto=fd [ 362.586174][T18664] EXT4-fs: inline encryption not supported [ 362.609258][T18664] ext4: Unknown parameter 'noacl' [ 362.609306][T18670] loop5: detected capacity change from 0 to 164 [ 362.613396][T18672] netlink: 'syz.6.4493': attribute type 1 has an invalid length. [ 362.869251][T18679] netlink: 'syz.5.4494': attribute type 6 has an invalid length. [ 362.901428][T18679] program syz.5.4494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.286390][T18695] netlink: 'syz.6.4499': attribute type 6 has an invalid length. [ 363.304725][T18699] __nla_validate_parse: 6 callbacks suppressed [ 363.304777][T18699] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4500'. [ 363.320153][T18699] netlink: 120 bytes leftover after parsing attributes in process `syz.5.4500'. [ 363.365664][T18695] program syz.6.4499 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.501592][T18698] lo speed is unknown, defaulting to 1000 [ 363.615198][T18698] vxcan1 speed is unknown, defaulting to 1000 [ 363.638602][T18704] netlink: 'syz.0.4502': attribute type 13 has an invalid length. [ 363.745864][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4506'. [ 363.757258][T18711] loop1: detected capacity change from 0 to 164 [ 363.780283][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 363.780298][ T29] audit: type=1326 audit(1755126738.462:15716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18710 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f992fc0ebe9 code=0x7ffc0000 [ 363.810276][ T29] audit: type=1326 audit(1755126738.462:15717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18710 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992fc0ebe9 code=0x7ffc0000 [ 363.833956][ T29] audit: type=1326 audit(1755126738.462:15718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18710 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992fc0ebe9 code=0x7ffc0000 [ 363.921091][T18720] loop1: detected capacity change from 0 to 512 [ 363.965890][T18720] netlink: 'syz.1.4509': attribute type 13 has an invalid length. [ 363.969334][T18722] loop6: detected capacity change from 0 to 164 [ 363.996775][T18720] loop1: detected capacity change from 0 to 1024 [ 364.006238][ T29] audit: type=1326 audit(1755126738.542:15719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18710 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f992fc0ebe9 code=0x7ffc0000 [ 364.029954][ T29] audit: type=1326 audit(1755126738.542:15720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18710 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992fc0ebe9 code=0x7ffc0000 [ 364.053626][ T29] audit: type=1326 audit(1755126738.542:15721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18710 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992fc0ebe9 code=0x7ffc0000 [ 364.077351][ T29] audit: type=1326 audit(1755126738.542:15722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18710 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f992fc0ebe9 code=0x7ffc0000 [ 364.100104][T18720] EXT4-fs: inline encryption not supported [ 364.100978][ T29] audit: type=1326 audit(1755126738.542:15723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18710 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992fc0ebe9 code=0x7ffc0000 [ 364.106780][T18720] EXT4-fs: Ignoring removed i_version option [ 364.130391][ T29] audit: type=1326 audit(1755126738.542:15724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18710 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f992fc0ebe9 code=0x7ffc0000 [ 364.160086][ T29] audit: type=1326 audit(1755126738.542:15725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18710 comm="syz.1.4505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f992fc0ebe9 code=0x7ffc0000 [ 364.194786][T18720] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.235577][T18720] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.4509: lblock 1 mapped to illegal pblock 1 (length 1) [ 364.281369][T18720] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4509: Failed to acquire dquot type 0 [ 364.324285][T18737] netlink: 'syz.6.4515': attribute type 1 has an invalid length. [ 364.344149][T18720] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.4509: Freeing blocks not in datazone - block = 0, count = 4096 [ 364.364939][T18737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4515'. [ 364.379355][T18731] lo speed is unknown, defaulting to 1000 [ 364.382605][T18720] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4509: Invalid inode bitmap blk 0 in block_group 0 [ 364.399492][T17179] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:38: lblock 1 mapped to illegal pblock 1 (length 1) [ 364.450779][T17179] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 0 [ 364.461497][T18731] vxcan1 speed is unknown, defaulting to 1000 [ 364.469779][T18720] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 364.481214][T18720] EXT4-fs (loop1): 1 orphan inode deleted [ 364.494948][T18720] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm syz.1.4509: lblock 1 mapped to illegal pblock 1 (length 1) [ 364.510749][T18720] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4509: Failed to acquire dquot type 0 [ 364.559885][T18746] loop1: detected capacity change from 0 to 164 [ 364.590033][T18746] syz.1.4519: attempt to access beyond end of device [ 364.590033][T18746] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 364.615097][T18746] syz.1.4519: attempt to access beyond end of device [ 364.615097][T18746] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 364.645298][T18749] loop6: detected capacity change from 0 to 164 [ 364.959445][T18774] loop5: detected capacity change from 0 to 512 [ 364.972254][T18757] lo speed is unknown, defaulting to 1000 [ 365.007538][T18774] loop5: detected capacity change from 0 to 1024 [ 365.008091][T18761] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4526'. [ 365.021905][T18774] EXT4-fs: inline encryption not supported [ 365.023157][T18761] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4526'. [ 365.028905][T18774] EXT4-fs: Ignoring removed i_version option [ 365.044397][T18774] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.084559][T18774] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.4529: lblock 1 mapped to illegal pblock 1 (length 1) [ 365.105855][T18774] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4529: Failed to acquire dquot type 0 [ 365.108741][T18757] vxcan1 speed is unknown, defaulting to 1000 [ 365.125531][T18759] lo speed is unknown, defaulting to 1000 [ 365.136474][T18774] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.4529: Freeing blocks not in datazone - block = 0, count = 4096 [ 365.166019][T18774] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.4529: Invalid inode bitmap blk 0 in block_group 0 [ 365.167553][T17204] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:61: lblock 1 mapped to illegal pblock 1 (length 1) [ 365.211525][T18774] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 365.247262][T18774] EXT4-fs (loop5): 1 orphan inode deleted [ 365.248056][T17204] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:61: Failed to release dquot type 0 [ 365.262781][T18774] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm syz.5.4529: lblock 1 mapped to illegal pblock 1 (length 1) [ 365.301218][T18759] vxcan1 speed is unknown, defaulting to 1000 [ 365.317094][T18774] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4529: Failed to acquire dquot type 0 [ 365.356499][T18781] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18781 comm=syz.1.4530 [ 365.483524][T18794] loop5: detected capacity change from 0 to 164 [ 365.547916][T18792] syz!: rxe_newlink: already configured on team_slave_0 [ 365.580575][T18792] validate_nla: 2 callbacks suppressed [ 365.580614][T18792] netlink: 'syz.6.4534': attribute type 13 has an invalid length. [ 365.582083][T18797] loop5: detected capacity change from 0 to 128 [ 365.837285][T18811] loop5: detected capacity change from 0 to 164 [ 365.919884][ T3396] Process accounting resumed [ 366.339024][T18818] loop1: detected capacity change from 0 to 512 [ 366.359038][T18818] netlink: 'syz.1.4543': attribute type 13 has an invalid length. [ 366.564604][T18822] usb usb9: usbfs: process 18822 (syz.0.4545) did not claim interface 16 before use [ 366.649468][T18825] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4546'. [ 366.898742][T18831] netlink: 'syz.3.4549': attribute type 1 has an invalid length. [ 366.944066][T18831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4549'. [ 367.079963][T18842] loop5: detected capacity change from 0 to 512 [ 367.110149][T18837] loop6: detected capacity change from 0 to 128 [ 367.123135][T18842] netlink: 'syz.5.4554': attribute type 13 has an invalid length. [ 367.160370][T18842] loop5: detected capacity change from 0 to 1024 [ 367.180653][T18842] EXT4-fs: inline encryption not supported [ 367.186615][T18842] EXT4-fs: Ignoring removed i_version option [ 367.225744][T18842] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.267230][T18842] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.4554: lblock 1 mapped to illegal pblock 1 (length 1) [ 367.306497][T18842] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4554: Failed to acquire dquot type 0 [ 367.362185][T18842] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.4554: Freeing blocks not in datazone - block = 0, count = 4096 [ 367.400941][T18842] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.4554: Invalid inode bitmap blk 0 in block_group 0 [ 367.416550][T17179] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:38: lblock 1 mapped to illegal pblock 1 (length 1) [ 367.448298][T18842] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 367.465810][T17179] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 0 [ 367.477767][T18863] usb usb9: usbfs: process 18863 (syz.0.4561) did not claim interface 16 before use [ 367.498106][T18842] EXT4-fs (loop5): 1 orphan inode deleted [ 367.507494][T18842] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm syz.5.4554: lblock 1 mapped to illegal pblock 1 (length 1) [ 367.542182][T18842] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4554: Failed to acquire dquot type 0 [ 367.603724][T18869] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4563'. [ 367.612788][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4563'. [ 367.998469][T18884] loop5: detected capacity change from 0 to 164 [ 368.096284][T18890] loop5: detected capacity change from 0 to 512 [ 368.145491][T18885] lo speed is unknown, defaulting to 1000 [ 368.200255][T18885] vxcan1 speed is unknown, defaulting to 1000 [ 368.351140][T18899] loop3: detected capacity change from 0 to 164 [ 368.407647][T18896] syz!: rxe_newlink: already configured on team_slave_0 [ 368.433378][T18896] netlink: 'syz.6.4573': attribute type 13 has an invalid length. [ 368.546104][T18910] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4579'. [ 368.606269][T18916] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4582'. [ 368.743724][T18918] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4583'. [ 368.752908][T18918] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4583'. [ 369.041987][T18932] macsec1: entered promiscuous mode [ 369.047395][T18932] bridge0: entered promiscuous mode [ 369.084844][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 369.084858][ T29] audit: type=1400 audit(1755126743.762:16193): avc: denied { create } for pid=18930 comm="syz.0.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 369.121917][T18932] bridge0: port 3(macsec1) entered blocking state [ 369.128467][T18932] bridge0: port 3(macsec1) entered disabled state [ 369.175990][T18932] macsec1: entered allmulticast mode [ 369.181358][T18932] bridge0: entered allmulticast mode [ 369.202154][ T29] audit: type=1400 audit(1755126743.842:16194): avc: denied { sqpoll } for pid=18912 comm="syz.6.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 369.221719][ T29] audit: type=1400 audit(1755126743.842:16195): avc: denied { allowed } for pid=18912 comm="syz.6.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 369.241288][ T29] audit: type=1400 audit(1755126743.872:16196): avc: denied { bind } for pid=18930 comm="syz.0.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 369.260992][ T29] audit: type=1400 audit(1755126743.872:16197): avc: denied { name_bind } for pid=18930 comm="syz.0.4585" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 369.282082][ T29] audit: type=1400 audit(1755126743.872:16198): avc: denied { node_bind } for pid=18930 comm="syz.0.4585" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 369.304484][ T29] audit: type=1400 audit(1755126743.872:16199): avc: denied { setopt } for pid=18930 comm="syz.0.4585" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 369.326638][ T29] audit: type=1400 audit(1755126743.872:16200): avc: denied { create } for pid=18930 comm="syz.0.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.347297][ T29] audit: type=1400 audit(1755126743.872:16201): avc: denied { open } for pid=18930 comm="syz.0.4585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 369.366878][ T29] audit: type=1400 audit(1755126743.882:16202): avc: denied { perfmon } for pid=18930 comm="syz.0.4585" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 369.505676][T18932] macsec1: left allmulticast mode [ 369.510769][T18932] bridge0: left allmulticast mode [ 369.536413][T18942] loop5: detected capacity change from 0 to 164 [ 369.547437][T18932] bridge0: left promiscuous mode [ 369.613504][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4590'. [ 369.630238][T18949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4591'. [ 369.663148][T18949] loop5: detected capacity change from 0 to 512 [ 369.670371][T18952] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4593'. [ 369.702836][T18949] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.735232][T18963] loop3: detected capacity change from 0 to 164 [ 369.810009][T18965] loop3: detected capacity change from 0 to 1024 [ 369.833272][T18973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18973 comm=syz.6.4597 [ 369.854129][T18965] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4598'. [ 369.903635][T18980] loop3: detected capacity change from 0 to 164 [ 369.955824][T18985] netlink: 'syz.1.4604': attribute type 1 has an invalid length. [ 370.024159][T18985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4604'. [ 370.068047][T18984] netlink: 'syz.0.4601': attribute type 6 has an invalid length. [ 370.094058][T18984] program syz.0.4601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.201345][T19008] loop5: detected capacity change from 0 to 1024 [ 370.248960][T19008] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4613'. [ 370.340328][T19018] loop5: detected capacity change from 0 to 512 [ 370.347995][T19018] msdos: Unknown parameter 'gh' [ 370.372335][T19018] macsec1: entered promiscuous mode [ 370.377712][T19018] bridge0: entered promiscuous mode [ 370.384754][T19018] bridge0: port 3(macsec1) entered blocking state [ 370.391282][T19018] bridge0: port 3(macsec1) entered disabled state [ 370.398631][T19018] macsec1: entered allmulticast mode [ 370.403974][T19018] bridge0: entered allmulticast mode [ 370.410362][T19018] macsec1: left allmulticast mode [ 370.415487][T19018] bridge0: left allmulticast mode [ 370.423962][T19018] bridge0: left promiscuous mode [ 370.512319][T19021] netlink: 'syz.5.4618': attribute type 1 has an invalid length. [ 370.529051][T19021] veth0: entered promiscuous mode [ 370.535404][T19021] veth0 (unregistering): left promiscuous mode [ 370.726439][T19031] netlink: 'syz.5.4621': attribute type 6 has an invalid length. [ 370.748364][T19031] program syz.5.4621 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 370.918102][T19046] loop5: detected capacity change from 0 to 512 [ 371.038033][T19050] loop3: detected capacity change from 0 to 164 [ 371.084950][T19050] syz.3.4629: attempt to access beyond end of device [ 371.084950][T19050] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 371.131342][T19050] syz.3.4629: attempt to access beyond end of device [ 371.131342][T19050] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 371.151785][T19054] loop1: detected capacity change from 0 to 512 [ 371.180706][T19054] EXT4-fs mount: 55 callbacks suppressed [ 371.180722][T19054] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.338181][T19059] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19059 comm=syz.3.4631 [ 371.633673][T19065] netlink: 'syz.6.4632': attribute type 1 has an invalid length. [ 371.646199][T19065] veth0: entered promiscuous mode [ 371.653953][T19065] veth0 (unregistering): left promiscuous mode [ 371.706700][T19067] usb usb9: usbfs: process 19067 (syz.0.4633) did not claim interface 16 before use [ 372.009179][T19078] loop6: detected capacity change from 0 to 512 [ 372.045341][T19078] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.064263][T17441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.087334][T12669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.128272][T19084] loop1: detected capacity change from 0 to 512 [ 372.168257][T19084] netlink: 'syz.1.4640': attribute type 13 has an invalid length. [ 372.204440][T19084] loop1: detected capacity change from 0 to 1024 [ 372.237417][T19084] EXT4-fs: inline encryption not supported [ 372.243389][T19084] EXT4-fs: Ignoring removed i_version option [ 372.297577][T19084] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 372.330724][T19081] lo speed is unknown, defaulting to 1000 [ 372.345602][T19084] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #3: block 1: comm syz.1.4640: lblock 1 mapped to illegal pblock 1 (length 1) [ 372.362208][T19084] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4640: Failed to acquire dquot type 0 [ 372.376458][T19084] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.4640: Freeing blocks not in datazone - block = 0, count = 4096 [ 372.401501][T19081] vxcan1 speed is unknown, defaulting to 1000 [ 372.454328][T19084] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.4640: Invalid inode bitmap blk 0 in block_group 0 [ 372.467672][T17168] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 372.503780][T19084] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 372.517390][T19084] EXT4-fs (loop1): 1 orphan inode deleted [ 372.517390][T17168] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:27: Failed to release dquot type 0 [ 372.540470][T19084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.574322][T19084] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm syz.1.4640: lblock 1 mapped to illegal pblock 1 (length 1) [ 372.615861][T19084] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4640: Failed to acquire dquot type 0 [ 372.655186][T19098] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19098 comm=syz.0.4642 [ 372.691942][T12669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.732941][T19101] program syz.3.4643 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.781914][T19107] loop1: detected capacity change from 0 to 164 [ 373.036791][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.045981][T19119] loop1: detected capacity change from 0 to 512 [ 373.052510][T19117] loop5: detected capacity change from 0 to 512 [ 373.079165][T19119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.102267][T19117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.204397][T19125] lo speed is unknown, defaulting to 1000 [ 373.240812][T19125] vxcan1 speed is unknown, defaulting to 1000 [ 373.435842][T19138] netlink: 'syz.0.4654': attribute type 1 has an invalid length. [ 373.466680][T19138] veth0: entered promiscuous mode [ 373.478823][T19138] veth0 (unregistering): left promiscuous mode [ 373.940093][T19147] program syz.0.4657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.985631][T17441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.139788][T19159] loop6: detected capacity change from 0 to 164 [ 374.251441][T19159] syz.6.4662: attempt to access beyond end of device [ 374.251441][T19159] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 374.280490][T12669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.296236][T19159] syz.6.4662: attempt to access beyond end of device [ 374.296236][T19159] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 374.407436][ T29] kauditd_printk_skb: 427 callbacks suppressed [ 374.407451][ T29] audit: type=1400 audit(1755126749.092:16625): avc: denied { write } for pid=19164 comm="syz.1.4664" name="dev" dev="proc" ino=4026532927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 374.442900][T19166] 9pnet_fd: Insufficient options for proto=fd [ 374.513004][T19173] __nla_validate_parse: 6 callbacks suppressed [ 374.513086][T19173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4666'. [ 374.629707][T19168] lo speed is unknown, defaulting to 1000 [ 374.712864][T19194] 9pnet_fd: Insufficient options for proto=fd [ 374.726885][T19168] vxcan1 speed is unknown, defaulting to 1000 [ 374.733399][T19177] lo speed is unknown, defaulting to 1000 [ 374.747528][T19197] netlink: 'syz.0.4678': attribute type 13 has an invalid length. [ 374.800371][ T29] audit: type=1326 audit(1755126749.482:16626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.0.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafdc9ebe9 code=0x7ffc0000 [ 374.824001][T19188] lo speed is unknown, defaulting to 1000 [ 374.829955][ T29] audit: type=1326 audit(1755126749.482:16627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.0.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafdc9ebe9 code=0x7ffc0000 [ 374.839972][T19177] vxcan1 speed is unknown, defaulting to 1000 [ 374.873669][ T29] audit: type=1326 audit(1755126749.542:16628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.0.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ffafdc9ebe9 code=0x7ffc0000 [ 374.897357][ T29] audit: type=1326 audit(1755126749.542:16629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.0.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ffafdc9ec23 code=0x7ffc0000 [ 374.920957][ T29] audit: type=1326 audit(1755126749.542:16630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.0.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ffafdc9d69f code=0x7ffc0000 [ 374.944519][ T29] audit: type=1326 audit(1755126749.542:16631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.0.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ffafdc9ec77 code=0x7ffc0000 [ 374.968130][ T29] audit: type=1326 audit(1755126749.542:16632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.0.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffafdc9d550 code=0x7ffc0000 [ 374.991870][ T29] audit: type=1326 audit(1755126749.542:16633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.0.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ffafdc9d84a code=0x7ffc0000 [ 375.015355][ T29] audit: type=1326 audit(1755126749.542:16634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19198 comm="syz.0.4679" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafdc9ebe9 code=0x7ffc0000 [ 375.058650][T19188] vxcan1 speed is unknown, defaulting to 1000 [ 375.112428][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4683'. [ 375.211710][T19219] loop5: detected capacity change from 0 to 164 [ 375.258449][T19219] syz.5.4687: attempt to access beyond end of device [ 375.258449][T19219] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 375.307524][T19219] syz.5.4687: attempt to access beyond end of device [ 375.307524][T19219] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 375.367668][T19229] loop5: detected capacity change from 0 to 512 [ 375.393619][T19223] netlink: 'syz.0.4686': attribute type 6 has an invalid length. [ 375.418289][T19223] program syz.0.4686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.440170][T19229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.537347][T19248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4698'. [ 375.599478][T19250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4699'. [ 375.633439][T19250] loop6: detected capacity change from 0 to 512 [ 375.690844][T19250] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.718232][T19250] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.810737][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.889167][T19273] loop6: detected capacity change from 0 to 512 [ 375.915381][T19273] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 375.931845][T19265] lo speed is unknown, defaulting to 1000 [ 376.060904][T19265] vxcan1 speed is unknown, defaulting to 1000 [ 376.104367][T19289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4711'. [ 376.269058][T19291] netlink: 'syz.0.4712': attribute type 13 has an invalid length. [ 376.367746][T19298] loop1: detected capacity change from 0 to 164 [ 376.518711][T17441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.566298][T19312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4721'. [ 376.592490][T19314] netlink: 'syz.0.4722': attribute type 13 has an invalid length. [ 376.631381][T19312] loop3: detected capacity change from 0 to 512 [ 376.663376][T19312] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.708662][T19312] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 376.796540][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.816902][T19320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4723'. [ 376.934537][T19326] loop6: detected capacity change from 0 to 512 [ 376.949819][T19326] EXT4-fs: inline encryption not supported [ 376.994462][T19326] ext4: Unknown parameter 'noacl' [ 377.063898][T13939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.132172][T19329] netlink: 'syz.0.4726': attribute type 13 has an invalid length. [ 377.170398][T19333] loop3: detected capacity change from 0 to 164 [ 377.437716][T19347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4731'. [ 377.489277][T19354] loop1: detected capacity change from 0 to 512 [ 377.501587][T19354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.547476][T19363] loop5: detected capacity change from 0 to 512 [ 377.588081][T19363] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.901749][T19384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4742'. [ 377.933911][T19384] loop6: detected capacity change from 0 to 512 [ 377.952804][T19384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 377.973445][T19384] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.200168][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.272448][T19401] loop6: detected capacity change from 0 to 512 [ 378.295921][T19401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.421442][T17441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.434621][T12669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.734286][T19420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4752'. [ 378.868342][T19428] netlink: 'syz.0.4755': attribute type 13 has an invalid length. [ 378.909586][T19423] lo speed is unknown, defaulting to 1000 [ 378.969327][T19423] vxcan1 speed is unknown, defaulting to 1000 [ 379.223528][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.251498][T19444] usb usb9: usbfs: process 19444 (syz.6.4761) did not claim interface 16 before use [ 379.274742][T19444] loop6: detected capacity change from 0 to 2048 [ 379.281098][T19445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19445 comm=syz.3.4760 [ 379.298480][T19444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.313258][T19444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.388351][T19456] loop1: detected capacity change from 0 to 164 [ 379.435644][ T29] kauditd_printk_skb: 463 callbacks suppressed [ 379.435662][ T29] audit: type=1400 audit(1755126754.112:17098): avc: denied { read write } for pid=19459 comm="syz.1.4766" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 379.443813][T19460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.465671][ T29] audit: type=1400 audit(1755126754.112:17099): avc: denied { open } for pid=19459 comm="syz.1.4766" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 379.477662][T19460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.498547][ T29] audit: type=1400 audit(1755126754.122:17100): avc: denied { write } for pid=19459 comm="syz.1.4766" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.528597][ T29] audit: type=1400 audit(1755126754.122:17101): avc: denied { ioctl } for pid=19459 comm="syz.1.4766" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 379.562571][T19460] __nla_validate_parse: 1 callbacks suppressed [ 379.562590][T19460] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4766'. [ 379.579139][T19460] 9pnet_fd: Insufficient options for proto=fd [ 379.587758][ T29] audit: type=1400 audit(1755126754.272:17102): avc: denied { create } for pid=19459 comm="syz.1.4766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 379.608974][ T29] audit: type=1400 audit(1755126754.272:17103): avc: denied { write } for pid=19459 comm="syz.1.4766" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 379.818204][T19464] FAULT_INJECTION: forcing a failure. [ 379.818204][T19464] name failslab, interval 1, probability 0, space 0, times 0 [ 379.830879][T19464] CPU: 1 UID: 0 PID: 19464 Comm: syz.0.4767 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 379.830949][T19464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.830960][T19464] Call Trace: [ 379.830966][T19464] [ 379.830973][T19464] __dump_stack+0x1d/0x30 [ 379.830999][T19464] dump_stack_lvl+0xe8/0x140 [ 379.831016][T19464] dump_stack+0x15/0x1b [ 379.831030][T19464] should_fail_ex+0x265/0x280 [ 379.831048][T19464] should_failslab+0x8c/0xb0 [ 379.831138][T19464] kmem_cache_alloc_noprof+0x50/0x310 [ 379.831162][T19464] ? security_file_alloc+0x32/0x100 [ 379.831260][T19464] security_file_alloc+0x32/0x100 [ 379.831289][T19464] init_file+0x5c/0x1d0 [ 379.831316][T19464] alloc_empty_file+0x8b/0x200 [ 379.831358][T19464] alloc_file_pseudo+0xc6/0x160 [ 379.831388][T19464] __shmem_file_setup+0x1de/0x210 [ 379.831418][T19464] shmem_file_setup+0x3b/0x50 [ 379.831510][T19464] __se_sys_memfd_create+0x2c3/0x590 [ 379.831530][T19464] __x64_sys_memfd_create+0x31/0x40 [ 379.831549][T19464] x64_sys_call+0x2abe/0x2ff0 [ 379.831644][T19464] do_syscall_64+0xd2/0x200 [ 379.831668][T19464] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 379.831701][T19464] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 379.831724][T19464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.831751][T19464] RIP: 0033:0x7ffafdc9ebe9 [ 379.831764][T19464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.831779][T19464] RSP: 002b:00007ffafc706e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 379.831795][T19464] RAX: ffffffffffffffda RBX: 0000000000000b77 RCX: 00007ffafdc9ebe9 [ 379.831806][T19464] RDX: 00007ffafc706ef0 RSI: 0000000000000000 RDI: 00007ffafdd227e8 [ 379.831817][T19464] RBP: 0000200000000c40 R08: 00007ffafc706bb7 R09: 00007ffafc706e40 [ 379.831828][T19464] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000bc0 [ 379.831910][T19464] R13: 00007ffafc706ef0 R14: 00007ffafc706eb0 R15: 0000200000000c00 [ 379.831928][T19464] [ 380.070732][T19468] loop3: detected capacity change from 0 to 512 [ 380.081808][ T29] audit: type=1400 audit(1755126754.762:17104): avc: denied { bind } for pid=19467 comm="syz.3.4769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 380.143076][T19472] netlink: 'syz.3.4770': attribute type 1 has an invalid length. [ 380.155413][ T29] audit: type=1400 audit(1755126754.842:17105): avc: denied { create } for pid=19471 comm="syz.3.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.159684][T19466] lo speed is unknown, defaulting to 1000 [ 380.175328][ T29] audit: type=1400 audit(1755126754.842:17106): avc: denied { ioctl } for pid=19471 comm="syz.3.4770" path="socket:[64541]" dev="sockfs" ino=64541 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.175369][ T29] audit: type=1400 audit(1755126754.842:17107): avc: denied { setopt } for pid=19471 comm="syz.3.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 380.218970][T19466] vxcan1 speed is unknown, defaulting to 1000 [ 380.226882][T19474] veth0: entered promiscuous mode [ 380.238310][T19472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4770'. [ 380.247815][T19472] veth0 (unregistering): left promiscuous mode [ 380.343449][T19479] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4772'. [ 380.410985][T19493] loop6: detected capacity change from 0 to 164 [ 380.449653][T19495] loop5: detected capacity change from 0 to 164 [ 380.496961][T19497] loop6: detected capacity change from 0 to 512 [ 380.532167][T19497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.560261][T19497] ext4 filesystem being mounted at /409/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 380.591321][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.614770][T19508] loop6: detected capacity change from 0 to 512 [ 380.631835][T19508] msdos: Unknown parameter 'gh' [ 380.748284][T19518] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4788'. [ 380.913897][T19526] loop5: detected capacity change from 0 to 512 [ 380.920972][T19526] msdos: Unknown parameter 'gh' [ 380.995710][T19530] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4794'. [ 380.999069][T19531] macsec1: entered promiscuous mode [ 381.010059][T19531] bridge0: entered promiscuous mode [ 381.032320][T19531] bridge0: port 3(macsec1) entered blocking state [ 381.038959][T19531] bridge0: port 3(macsec1) entered disabled state [ 381.041594][T19534] netlink: 'syz.0.4795': attribute type 13 has an invalid length. [ 381.067688][T19531] macsec1: entered allmulticast mode [ 381.073048][T19531] bridge0: entered allmulticast mode [ 381.079975][T19531] macsec1: left allmulticast mode [ 381.085134][T19531] bridge0: left allmulticast mode [ 381.091978][T19531] bridge0: left promiscuous mode [ 381.099540][T19528] lo speed is unknown, defaulting to 1000 [ 381.130992][T19540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4796'. [ 381.142985][T19528] vxcan1 speed is unknown, defaulting to 1000 [ 381.252185][T19551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.265195][T19551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.283879][T19551] FAULT_INJECTION: forcing a failure. [ 381.283879][T19551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.297215][T19551] CPU: 1 UID: 0 PID: 19551 Comm: syz.3.4801 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 381.297254][T19551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.297300][T19551] Call Trace: [ 381.297308][T19551] [ 381.297317][T19551] __dump_stack+0x1d/0x30 [ 381.297343][T19551] dump_stack_lvl+0xe8/0x140 [ 381.297366][T19551] dump_stack+0x15/0x1b [ 381.297404][T19551] should_fail_ex+0x265/0x280 [ 381.297432][T19551] should_fail+0xb/0x20 [ 381.297530][T19551] should_fail_usercopy+0x1a/0x20 [ 381.297556][T19551] _copy_from_user+0x1c/0xb0 [ 381.297623][T19551] __sys_sendto+0x19e/0x330 [ 381.297679][T19551] __x64_sys_sendto+0x76/0x90 [ 381.297719][T19551] x64_sys_call+0x2d05/0x2ff0 [ 381.297740][T19551] do_syscall_64+0xd2/0x200 [ 381.297825][T19551] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 381.297854][T19551] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 381.297913][T19551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.297938][T19551] RIP: 0033:0x7f4d2e45ebe9 [ 381.297956][T19551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.298012][T19551] RSP: 002b:00007f4d2cec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 381.298035][T19551] RAX: ffffffffffffffda RBX: 00007f4d2e685fa0 RCX: 00007f4d2e45ebe9 [ 381.298050][T19551] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000004 [ 381.298066][T19551] RBP: 00007f4d2cec7090 R08: 0000200000000140 R09: 0000000000000014 [ 381.298137][T19551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.298149][T19551] R13: 00007f4d2e686038 R14: 00007f4d2e685fa0 R15: 00007ffe7cf552a8 [ 381.298191][T19551] [ 381.507506][T19559] FAULT_INJECTION: forcing a failure. [ 381.507506][T19559] name failslab, interval 1, probability 0, space 0, times 0 [ 381.520260][T19559] CPU: 0 UID: 0 PID: 19559 Comm: syz.0.4803 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 381.520296][T19559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 381.520313][T19559] Call Trace: [ 381.520320][T19559] [ 381.520372][T19559] __dump_stack+0x1d/0x30 [ 381.520399][T19559] dump_stack_lvl+0xe8/0x140 [ 381.520424][T19559] dump_stack+0x15/0x1b [ 381.520485][T19559] should_fail_ex+0x265/0x280 [ 381.520534][T19559] should_failslab+0x8c/0xb0 [ 381.520565][T19559] kmem_cache_alloc_node_noprof+0x57/0x320 [ 381.520602][T19559] ? perf_event_alloc+0x14c/0x1740 [ 381.520645][T19559] perf_event_alloc+0x14c/0x1740 [ 381.520728][T19559] __se_sys_perf_event_open+0x615/0x11c0 [ 381.520840][T19559] ? __rcu_read_unlock+0x4f/0x70 [ 381.520955][T19559] __x64_sys_perf_event_open+0x67/0x80 [ 381.520997][T19559] x64_sys_call+0x7bd/0x2ff0 [ 381.521024][T19559] do_syscall_64+0xd2/0x200 [ 381.521058][T19559] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 381.521091][T19559] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 381.521170][T19559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.521194][T19559] RIP: 0033:0x7ffafdc9ebe9 [ 381.521210][T19559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.521307][T19559] RSP: 002b:00007ffafc707038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 381.521327][T19559] RAX: ffffffffffffffda RBX: 00007ffafdec5fa0 RCX: 00007ffafdc9ebe9 [ 381.521341][T19559] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 381.521354][T19559] RBP: 00007ffafc707090 R08: 0000000000000000 R09: 0000000000000000 [ 381.521367][T19559] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 381.521380][T19559] R13: 00007ffafdec6038 R14: 00007ffafdec5fa0 R15: 00007ffed0540ae8 [ 381.521518][T19559] [ 381.522233][T19560] loop5: detected capacity change from 0 to 164 [ 381.585146][T19563] loop6: detected capacity change from 0 to 512 [ 381.592882][T19561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4805'. [ 381.637045][T19563] netlink: 'syz.6.4806': attribute type 13 has an invalid length. [ 381.719573][T19565] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4807'. [ 381.748457][T19569] loop6: detected capacity change from 0 to 1024 [ 381.756519][T19569] EXT4-fs: inline encryption not supported [ 381.762378][T19569] EXT4-fs: Ignoring removed i_version option [ 381.770164][T19569] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 381.784405][T19569] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.4806: lblock 1 mapped to illegal pblock 1 (length 1) [ 381.800409][T19571] loop1: detected capacity change from 0 to 512 [ 381.808837][T19569] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4806: Failed to acquire dquot type 0 [ 381.826878][T19569] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.4806: Freeing blocks not in datazone - block = 0, count = 4096 [ 381.846735][T19569] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.4806: Invalid inode bitmap blk 0 in block_group 0 [ 381.866913][T19569] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 381.867238][T17207] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1) [ 381.891968][T19569] EXT4-fs (loop6): 1 orphan inode deleted [ 381.891974][T17207] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:64: Failed to release dquot type 0 [ 381.894730][T19571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.905746][T19569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.917762][T19571] ext4 filesystem being mounted at /421/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.962243][T19563] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm syz.6.4806: lblock 1 mapped to illegal pblock 1 (length 1) [ 381.977631][T19571] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.4809: iget: bad i_size value: 2533274857506816 [ 381.994682][T19563] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4806: Failed to acquire dquot type 0 [ 382.006267][T19571] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.4809: iget: bad i_size value: 2533274857506816 [ 382.080621][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.096417][T12669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.147899][T19582] loop1: detected capacity change from 0 to 1024 [ 382.172331][T19582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.295328][T19590] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4814'. [ 382.304535][T19590] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4814'. [ 382.367025][T12669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.471508][T19581] lo speed is unknown, defaulting to 1000 [ 382.664581][T19581] vxcan1 speed is unknown, defaulting to 1000 [ 382.766827][T19608] loop3: detected capacity change from 0 to 512 [ 382.800844][T19608] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.831825][T19608] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.987270][T13939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.092963][T19626] program syz.6.4820 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.241896][T19638] loop3: detected capacity change from 0 to 1024 [ 383.266083][T19638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.386836][T13939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.412747][T19647] loop6: detected capacity change from 0 to 512 [ 383.423786][T19645] loop1: detected capacity change from 0 to 164 [ 383.437996][T19647] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.498270][T19645] syz.1.4830: attempt to access beyond end of device [ 383.498270][T19645] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 383.535606][T19645] syz.1.4830: attempt to access beyond end of device [ 383.535606][T19645] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 383.574335][T19640] program syz.5.4828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 383.769306][T19666] loop5: detected capacity change from 0 to 512 [ 383.792160][T19666] msdos: Unknown parameter 'gh' [ 383.798705][T19668] usb usb9: usbfs: process 19668 (syz.0.4836) did not claim interface 16 before use [ 383.833200][T19671] loop3: detected capacity change from 0 to 512 [ 383.840459][T19658] lo speed is unknown, defaulting to 1000 [ 383.852521][T19671] EXT4-fs: inline encryption not supported [ 383.864662][T19671] ext4: Unknown parameter 'noacl' [ 383.887804][T19672] macsec1: entered promiscuous mode [ 383.893082][T19672] bridge0: entered promiscuous mode [ 383.907137][T19672] bridge0: port 3(macsec1) entered blocking state [ 383.913685][T19672] bridge0: port 3(macsec1) entered disabled state [ 383.942479][T19672] macsec1: entered allmulticast mode [ 383.947858][T19672] bridge0: entered allmulticast mode [ 383.978337][T19672] macsec1: left allmulticast mode [ 383.983427][T19672] bridge0: left allmulticast mode [ 384.003506][T19672] bridge0: left promiscuous mode [ 384.023588][T19658] vxcan1 speed is unknown, defaulting to 1000 [ 384.307383][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.386909][T19693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19693 comm=syz.5.4842 [ 384.394010][T19686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19686 comm=syz.1.4841 [ 384.448964][ T29] kauditd_printk_skb: 559 callbacks suppressed [ 384.448980][ T29] audit: type=1326 audit(1755126759.132:17662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19694 comm="syz.6.4844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbf2475ebe9 code=0x0 [ 384.519746][ T29] audit: type=1400 audit(1755126759.202:17663): avc: denied { mount } for pid=19699 comm="syz.0.4845" name="/" dev="ramfs" ino=64983 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 384.551346][T19697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19697 comm=syz.6.4844 [ 384.553073][ T29] audit: type=1400 audit(1755126759.202:17664): avc: denied { write } for pid=19701 comm="syz.3.4846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 384.584614][ T29] audit: type=1400 audit(1755126759.232:17665): avc: denied { write } for pid=19699 comm="syz.0.4845" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 384.608974][ T29] audit: type=1400 audit(1755126759.272:17666): avc: denied { read } for pid=19701 comm="GPL" dev="nsfs" ino=4026532489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 384.629872][T19700] usb usb9: usbfs: process 19700 (syz.0.4845) did not claim interface 16 before use [ 384.629914][ T29] audit: type=1400 audit(1755126759.272:17667): avc: denied { open } for pid=19701 comm="GPL" path="net:[4026532489]" dev="nsfs" ino=4026532489 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 384.662081][ T29] audit: type=1400 audit(1755126759.272:17668): avc: denied { create } for pid=19701 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 384.665588][T19703] lo speed is unknown, defaulting to 1000 [ 384.681795][ T29] audit: type=1400 audit(1755126759.272:17669): avc: denied { ioctl } for pid=19701 comm="GPL" path="socket:[64468]" dev="sockfs" ino=64468 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 384.714596][ T29] audit: type=1400 audit(1755126759.332:17670): avc: denied { read } for pid=19699 comm="syz.0.4845" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.737695][ T29] audit: type=1400 audit(1755126759.332:17671): avc: denied { open } for pid=19699 comm="syz.0.4845" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 384.787839][T19703] vxcan1 speed is unknown, defaulting to 1000 [ 384.961387][T19712] loop3: detected capacity change from 0 to 164 [ 385.206985][T19721] loop5: detected capacity change from 0 to 164 [ 385.242581][T19718] lo speed is unknown, defaulting to 1000 [ 385.367508][T19731] random: crng reseeded on system resumption [ 385.383893][T19732] loop6: detected capacity change from 0 to 164 [ 385.419515][T19718] vxcan1 speed is unknown, defaulting to 1000 [ 385.488529][T19736] __nla_validate_parse: 3 callbacks suppressed [ 385.488547][T19736] netlink: 88 bytes leftover after parsing attributes in process `syz.5.4856'. [ 385.627215][T19735] lo speed is unknown, defaulting to 1000 [ 385.710285][T19735] vxcan1 speed is unknown, defaulting to 1000 [ 385.934150][T19746] usb usb9: usbfs: process 19746 (syz.6.4862) did not claim interface 16 before use [ 385.961269][T19746] loop6: detected capacity change from 0 to 2048 [ 385.977105][T19753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4864'. [ 385.986149][T19753] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4864'. [ 385.993204][T19746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.010439][T19746] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.093771][T19763] loop1: detected capacity change from 0 to 164 [ 386.111233][T19765] loop6: detected capacity change from 0 to 512 [ 386.121415][T19765] msdos: Unknown parameter 'gh' [ 386.300614][T19773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4870'. [ 386.601687][T19783] loop6: detected capacity change from 0 to 164 [ 386.634439][T19778] lo speed is unknown, defaulting to 1000 [ 386.793209][T19778] vxcan1 speed is unknown, defaulting to 1000 [ 386.981602][T19791] loop6: detected capacity change from 0 to 512 [ 387.079126][T19791] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.166782][T19802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4881'. [ 387.225863][T19804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4882'. [ 387.244403][T19810] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4885'. [ 387.253460][T19810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4885'. [ 387.270521][T19804] loop1: detected capacity change from 0 to 512 [ 387.310288][T19804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.311687][T19814] macsec1: entered promiscuous mode [ 387.323043][T19804] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.328066][T19814] bridge0: entered promiscuous mode [ 387.347013][T19814] bridge0: port 3(macsec1) entered blocking state [ 387.354576][T19814] bridge0: port 3(macsec1) entered disabled state [ 387.361457][T19814] macsec1: entered allmulticast mode [ 387.366858][T19814] bridge0: entered allmulticast mode [ 387.373144][T19814] macsec1: left allmulticast mode [ 387.378251][T19814] bridge0: left allmulticast mode [ 387.389101][T19814] bridge0: left promiscuous mode [ 387.423205][T19808] lo speed is unknown, defaulting to 1000 [ 387.480826][T19808] vxcan1 speed is unknown, defaulting to 1000 [ 387.499950][T12669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.667231][T19831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19831 comm=syz.1.4886 [ 387.728602][T19840] loop3: detected capacity change from 0 to 164 [ 387.860731][T19845] loop3: detected capacity change from 0 to 164 [ 387.943998][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.999929][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4893'. [ 388.105012][T19858] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4897'. [ 388.122111][T19858] loop6: detected capacity change from 0 to 512 [ 388.142744][T19858] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.160713][T19853] lo speed is unknown, defaulting to 1000 [ 388.177328][T19858] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.222584][T19853] vxcan1 speed is unknown, defaulting to 1000 [ 388.261824][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.398260][T19866] loop6: detected capacity change from 0 to 512 [ 388.432729][T19868] loop5: detected capacity change from 0 to 512 [ 388.447462][T19866] msdos: Unknown parameter 'gh' [ 388.518433][T19868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.557089][T19868] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.575231][T19877] 9pnet_fd: Insufficient options for proto=fd [ 388.681879][T19884] loop1: detected capacity change from 0 to 164 [ 388.786285][T17441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.967043][T19899] loop1: detected capacity change from 0 to 164 [ 388.972218][T19898] FAULT_INJECTION: forcing a failure. [ 388.972218][T19898] name failslab, interval 1, probability 0, space 0, times 0 [ 388.985977][T19898] CPU: 0 UID: 0 PID: 19898 Comm: syz.3.4908 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 388.986080][T19898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.986097][T19898] Call Trace: [ 388.986107][T19898] [ 388.986117][T19898] __dump_stack+0x1d/0x30 [ 388.986145][T19898] dump_stack_lvl+0xe8/0x140 [ 388.986165][T19898] dump_stack+0x15/0x1b [ 388.986183][T19898] should_fail_ex+0x265/0x280 [ 388.986274][T19898] should_failslab+0x8c/0xb0 [ 388.986301][T19898] kmem_cache_alloc_node_noprof+0x57/0x320 [ 388.986331][T19898] ? __alloc_skb+0x101/0x320 [ 388.986410][T19898] __alloc_skb+0x101/0x320 [ 388.986450][T19898] ? audit_log_start+0x365/0x6c0 [ 388.986490][T19898] audit_log_start+0x380/0x6c0 [ 388.986642][T19898] audit_seccomp+0x48/0x100 [ 388.986678][T19898] ? __seccomp_filter+0x68c/0x10d0 [ 388.986709][T19898] __seccomp_filter+0x69d/0x10d0 [ 388.986785][T19898] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 388.986843][T19898] ? vfs_write+0x7e8/0x960 [ 388.986911][T19898] ? __rcu_read_unlock+0x4f/0x70 [ 388.987016][T19898] ? __fget_files+0x184/0x1c0 [ 388.987055][T19898] __secure_computing+0x82/0x150 [ 388.987077][T19898] syscall_trace_enter+0xcf/0x1e0 [ 388.987142][T19898] do_syscall_64+0xac/0x200 [ 388.987179][T19898] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 388.987212][T19898] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 388.987238][T19898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.987271][T19898] RIP: 0033:0x7f4d2e45ebe9 [ 388.987346][T19898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.987383][T19898] RSP: 002b:00007f4d2cec7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 388.987400][T19898] RAX: ffffffffffffffda RBX: 00007f4d2e685fa0 RCX: 00007f4d2e45ebe9 [ 388.987412][T19898] RDX: 0000000000000000 RSI: 0000200000000240 RDI: ffffffff80000200 [ 388.987425][T19898] RBP: 00007f4d2cec7090 R08: 0000000000000000 R09: 0000000000000000 [ 388.987440][T19898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.987456][T19898] R13: 00007f4d2e686038 R14: 00007f4d2e685fa0 R15: 00007ffe7cf552a8 [ 388.987483][T19898] [ 389.253952][T19910] loop3: detected capacity change from 0 to 1756 [ 389.263521][T19910] iso9660: Unknown parameter 'ŒVßOgzð)p…_ÇÛPo±¨À_'2ÑN²ÅþÈu`Ž Ÿðì‹‹U«ºy¢Ä¿qùZÃýª¶„½öl'¹®1 A¬Ì0ãIŠûuË2ý&T.4ï©Ž|ر]×:˜†crDÔó†¶ [ 389.263521][T19910] ÑÌ$ïÛ¾ìÈõÒÛ†¢ [ 389.263521][T19910] C' [ 389.369949][T19917] loop1: detected capacity change from 0 to 164 [ 389.483547][T19922] loop3: detected capacity change from 0 to 2048 [ 389.534586][ T29] kauditd_printk_skb: 789 callbacks suppressed [ 389.534605][ T29] audit: type=1326 audit(1755126764.212:18459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.5.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c2a045ba7 code=0x7ffc0000 [ 389.567219][ T29] audit: type=1326 audit(1755126764.212:18460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.5.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c29feadd9 code=0x7ffc0000 [ 389.590989][ T29] audit: type=1326 audit(1755126764.222:18461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.5.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f2c2a045ba7 code=0x7ffc0000 [ 389.614625][ T29] audit: type=1326 audit(1755126764.222:18462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.5.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2c29feadd9 code=0x7ffc0000 [ 389.626083][T19936] loop5: detected capacity change from 0 to 164 [ 389.638199][ T29] audit: type=1326 audit(1755126764.222:18463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.5.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2a04ebe9 code=0x7ffc0000 [ 389.668122][ T29] audit: type=1326 audit(1755126764.222:18464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.5.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c2a04ebe9 code=0x7ffc0000 [ 389.691888][ T29] audit: type=1326 audit(1755126764.252:18465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.5.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2c2a04ebe9 code=0x7ffc0000 [ 389.715533][ T29] audit: type=1326 audit(1755126764.252:18466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.5.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2c2a04ec23 code=0x7ffc0000 [ 389.792932][ T3503] Alternate GPT is invalid, using primary GPT. [ 389.799329][ T3503] loop3: p1 p2 p3 [ 389.828249][ T29] audit: type=1326 audit(1755126764.282:18467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.5.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2c2a04d69f code=0x7ffc0000 [ 389.851749][ T29] audit: type=1326 audit(1755126764.282:18468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19935 comm="syz.5.4924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2c2a04ec77 code=0x7ffc0000 [ 389.972016][T19922] Alternate GPT is invalid, using primary GPT. [ 389.978428][T19922] loop3: p1 p2 p3 [ 389.999263][ T2992] udevd[2992]: worker [3503] terminated by signal 33 (Unknown signal 33) [ 390.025654][ T2992] udevd[2992]: worker [3503] failed while handling '/devices/virtual/block/loop3' [ 390.108364][T19953] loop6: detected capacity change from 0 to 164 [ 390.110465][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 390.121336][ T5265] udevd[5265]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 390.173033][ T5744] udevd[5744]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 390.283008][ T5265] udevd[5265]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 390.300983][ T5453] udevd[5453]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 390.321696][ T3498] udevd[3498]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 390.432923][T19969] usb usb9: usbfs: process 19969 (syz.5.4936) did not claim interface 16 before use [ 390.433068][T19978] loop3: detected capacity change from 0 to 512 [ 390.448451][T19979] loop6: detected capacity change from 0 to 512 [ 390.461940][T19975] netlink: 'syz.1.4939': attribute type 13 has an invalid length. [ 390.486394][T19979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.505276][T19978] netlink: 'syz.3.4940': attribute type 13 has an invalid length. [ 390.514409][T19979] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.531300][T19969] loop5: detected capacity change from 0 to 2048 [ 390.531872][T19978] loop3: detected capacity change from 0 to 1024 [ 390.554776][T19978] EXT4-fs: inline encryption not supported [ 390.560707][T19978] EXT4-fs: Ignoring removed i_version option [ 390.571585][T19978] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 390.598495][T19978] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.4940: lblock 1 mapped to illegal pblock 1 (length 1) [ 390.600187][T19969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.626800][T19978] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4940: Failed to acquire dquot type 0 [ 390.638775][T19969] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.648081][T19978] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.4940: Freeing blocks not in datazone - block = 0, count = 4096 [ 390.674463][T19978] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4940: Invalid inode bitmap blk 0 in block_group 0 [ 390.689663][T19993] vlan2: entered allmulticast mode [ 390.700470][T17187] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:44: lblock 1 mapped to illegal pblock 1 (length 1) [ 390.717523][T17187] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:44: Failed to release dquot type 0 [ 390.733346][T19978] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 390.740360][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.742254][T19978] EXT4-fs (loop3): 1 orphan inode deleted [ 390.757339][T19978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.794340][T19978] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm syz.3.4940: lblock 1 mapped to illegal pblock 1 (length 1) [ 390.808355][T19997] usb usb9: usbfs: process 19997 (syz.1.4945) did not claim interface 16 before use [ 390.814983][T19978] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4940: Failed to acquire dquot type 0 [ 390.843192][T13939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.974359][T20006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20006 comm=syz.3.4946 [ 391.432460][T20018] __nla_validate_parse: 10 callbacks suppressed [ 391.432480][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4951'. [ 391.661329][T20032] loop6: detected capacity change from 0 to 164 [ 391.762539][T20037] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4959'. [ 391.799827][T20039] loop3: detected capacity change from 0 to 512 [ 391.815012][T20039] netlink: 'syz.3.4960': attribute type 13 has an invalid length. [ 391.883132][T20039] loop3: detected capacity change from 0 to 1024 [ 391.896231][T20039] EXT4-fs: inline encryption not supported [ 391.902131][T20039] EXT4-fs: Ignoring removed i_version option [ 391.936593][T20039] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 391.955967][T20051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4962'. [ 391.982112][T20039] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.4960: lblock 1 mapped to illegal pblock 1 (length 1) [ 392.036809][T20039] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4960: Failed to acquire dquot type 0 [ 392.051177][T20059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4964'. [ 392.072415][T20039] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.4960: Freeing blocks not in datazone - block = 0, count = 4096 [ 392.108761][T20039] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4960: Invalid inode bitmap blk 0 in block_group 0 [ 392.126030][T17208] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:65: lblock 1 mapped to illegal pblock 1 (length 1) [ 392.141133][T20039] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 392.150545][T20064] macvtap1: entered allmulticast mode [ 392.156019][T20064] bridge0: entered allmulticast mode [ 392.161937][T20039] EXT4-fs (loop3): 1 orphan inode deleted [ 392.171729][T17208] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:65: Failed to release dquot type 0 [ 392.176167][T20039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.245915][T20039] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm syz.3.4960: lblock 1 mapped to illegal pblock 1 (length 1) [ 392.281332][T20039] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4960: Failed to acquire dquot type 0 [ 392.329364][T13939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.414688][T20073] random: crng reseeded on system resumption [ 392.589303][T20083] loop3: detected capacity change from 0 to 512 [ 392.639815][T20083] netlink: 'syz.3.4973': attribute type 13 has an invalid length. [ 392.716662][T20088] loop3: detected capacity change from 0 to 1024 [ 392.739450][T20088] EXT4-fs: inline encryption not supported [ 392.745565][T20088] EXT4-fs: Ignoring removed i_version option [ 392.769158][T20088] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 392.790479][T20088] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.4973: lblock 1 mapped to illegal pblock 1 (length 1) [ 392.820689][T20088] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4973: Failed to acquire dquot type 0 [ 392.842403][T20088] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.4973: Freeing blocks not in datazone - block = 0, count = 4096 [ 392.890591][T20088] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.4973: Invalid inode bitmap blk 0 in block_group 0 [ 392.917254][T17192] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:49: lblock 1 mapped to illegal pblock 1 (length 1) [ 392.962040][T20088] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 393.065483][T17192] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:49: Failed to release dquot type 0 [ 393.077200][T20088] EXT4-fs (loop3): 1 orphan inode deleted [ 393.083275][T20088] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.148196][T20083] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm syz.3.4973: lblock 1 mapped to illegal pblock 1 (length 1) [ 393.184917][T20083] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4973: Failed to acquire dquot type 0 [ 393.250818][T13939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.313037][T20113] loop3: detected capacity change from 0 to 164 [ 393.353513][T20116] macsec1: entered promiscuous mode [ 393.358888][T20116] bridge0: entered promiscuous mode [ 393.393205][T20116] bridge0: port 3(macsec1) entered blocking state [ 393.399928][T20116] bridge0: port 3(macsec1) entered disabled state [ 393.420541][T20122] loop3: detected capacity change from 0 to 164 [ 393.437351][T20116] macsec1: entered allmulticast mode [ 393.442794][T20116] bridge0: entered allmulticast mode [ 393.491385][T20116] macsec1: left allmulticast mode [ 393.496568][T20116] bridge0: left allmulticast mode [ 393.532279][T20116] bridge0: left promiscuous mode [ 393.556700][T20125] tipc: Started in network mode [ 393.561682][T20125] tipc: Node identity d6911145c6aa, cluster identity 4711 [ 393.568919][T20125] tipc: Enabled bearer , priority 0 [ 393.594798][T20125] syzkaller0: entered promiscuous mode [ 393.600399][T20125] syzkaller0: entered allmulticast mode [ 393.609996][T20125] FAULT_INJECTION: forcing a failure. [ 393.609996][T20125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.623334][T20125] CPU: 0 UID: 0 PID: 20125 Comm: syz.6.4986 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 393.623365][T20125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 393.623380][T20125] Call Trace: [ 393.623443][T20125] [ 393.623452][T20125] __dump_stack+0x1d/0x30 [ 393.623479][T20125] dump_stack_lvl+0xe8/0x140 [ 393.623505][T20125] dump_stack+0x15/0x1b [ 393.623594][T20125] should_fail_ex+0x265/0x280 [ 393.623621][T20125] should_fail+0xb/0x20 [ 393.623643][T20125] should_fail_usercopy+0x1a/0x20 [ 393.623667][T20125] _copy_from_user+0x1c/0xb0 [ 393.623695][T20125] sock_do_ioctl+0xe6/0x220 [ 393.623726][T20125] sock_ioctl+0x41b/0x610 [ 393.623819][T20125] ? __pfx_sock_ioctl+0x10/0x10 [ 393.623847][T20125] __se_sys_ioctl+0xcb/0x140 [ 393.623885][T20125] __x64_sys_ioctl+0x43/0x50 [ 393.623968][T20125] x64_sys_call+0x1816/0x2ff0 [ 393.623989][T20125] do_syscall_64+0xd2/0x200 [ 393.624015][T20125] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 393.624119][T20125] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 393.624143][T20125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.624165][T20125] RIP: 0033:0x7fbf2475ebe9 [ 393.624184][T20125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.624216][T20125] RSP: 002b:00007fbf231bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.624239][T20125] RAX: ffffffffffffffda RBX: 00007fbf24985fa0 RCX: 00007fbf2475ebe9 [ 393.624253][T20125] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000007 [ 393.624304][T20125] RBP: 00007fbf231bf090 R08: 0000000000000000 R09: 0000000000000000 [ 393.624315][T20125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.624327][T20125] R13: 00007fbf24986038 R14: 00007fbf24985fa0 R15: 00007fff857e9aa8 [ 393.624349][T20125] [ 394.106636][T20150] loop6: detected capacity change from 0 to 512 [ 394.145646][T20150] netlink: 'syz.6.4991': attribute type 13 has an invalid length. [ 394.185706][T20150] tipc: Resetting bearer [ 394.220385][T20151] loop6: detected capacity change from 0 to 1024 [ 394.263427][T20151] EXT4-fs: inline encryption not supported [ 394.269358][T20151] EXT4-fs: Ignoring removed i_version option [ 394.306096][T20151] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 394.340544][T20151] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #3: block 1: comm syz.6.4991: lblock 1 mapped to illegal pblock 1 (length 1) [ 394.397223][T20151] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4991: Failed to acquire dquot type 0 [ 394.460442][T20170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4996'. [ 394.469589][T20170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4996'. [ 394.528602][T20151] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.4991: Freeing blocks not in datazone - block = 0, count = 4096 [ 394.544128][T20151] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.4991: Invalid inode bitmap blk 0 in block_group 0 [ 394.558489][T17161] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 394.606737][ T23] tipc: Node number set to 272306501 [ 394.610078][T20151] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 394.657016][ T29] kauditd_printk_skb: 289 callbacks suppressed [ 394.657034][ T29] audit: type=1326 audit(1755126769.342:18741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20172 comm="syz.0.4997" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffafdc9ebe9 code=0x0 [ 394.697003][T20151] EXT4-fs (loop6): 1 orphan inode deleted [ 394.705802][T17161] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 394.714345][T17161] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u8:20: Failed to release dquot type 0 [ 394.727254][T20151] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.766752][ T29] audit: type=1400 audit(1755126769.442:18742): avc: denied { mount } for pid=20149 comm="syz.6.4991" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 394.770624][T20150] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm syz.6.4991: lblock 1 mapped to illegal pblock 1 (length 1) [ 394.800290][T20179] tipc: Started in network mode [ 394.807850][T20179] tipc: Node identity 76aca1af44f2, cluster identity 4711 [ 394.814719][T20187] ALSA: seq fatal error: cannot create timer (-22) [ 394.815013][T20179] tipc: Enabled bearer , priority 0 [ 394.821773][T20185] ALSA: seq fatal error: cannot create timer (-22) [ 394.838425][T20186] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20186 comm=syz.0.4997 [ 394.846041][T20187] loop3: detected capacity change from 0 to 512 [ 394.858209][T20184] usb usb9: usbfs: process 20184 (syz.5.5000) did not claim interface 16 before use [ 394.858628][T20188] syzkaller0: entered promiscuous mode [ 394.873230][T20188] syzkaller0: entered allmulticast mode [ 394.875922][T20150] Quota error (device loop6): find_tree_dqentry: Can't read quota tree block 1 [ 394.881063][ T29] audit: type=1400 audit(1755126769.522:18743): avc: denied { mount } for pid=20181 comm="syz.5.5000" name="/" dev="ramfs" ino=66763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 394.887898][T20150] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 60928 [ 394.887923][T20150] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4991: Failed to acquire dquot type 0 [ 394.931516][ T29] audit: type=1400 audit(1755126769.522:18744): avc: denied { write } for pid=20181 comm="syz.5.5000" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 394.938785][T20184] loop5: detected capacity change from 0 to 2048 [ 394.954663][ T29] audit: type=1400 audit(1755126769.532:18745): avc: denied { read } for pid=20178 comm="syz.1.4999" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 394.978555][T20179] tipc: Resetting bearer [ 394.984391][ T29] audit: type=1400 audit(1755126769.532:18746): avc: denied { open } for pid=20178 comm="syz.1.4999" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 395.011263][T20187] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5001: corrupted inode contents [ 395.013816][ T29] audit: type=1400 audit(1755126769.532:18747): avc: denied { ioctl } for pid=20178 comm="syz.1.4999" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 395.030057][T20187] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.5001: mark_inode_dirty error [ 395.063727][T20187] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5001: corrupted inode contents [ 395.075862][T20187] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.5001: mark_inode_dirty error [ 395.093798][T20187] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5001: corrupted inode contents [ 395.099446][T20196] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5002'. [ 395.127358][T20187] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 395.127433][T20196] loop6: detected capacity change from 0 to 512 [ 395.144187][T20187] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.5001: corrupted inode contents [ 395.156629][T20187] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.5001: mark_inode_dirty error [ 395.169950][T20187] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 395.180640][T20187] EXT4-fs (loop3): 1 truncate cleaned up [ 395.181055][T20196] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.188408][T20187] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.208367][T17174] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:33: Failed to release dquot type 1 [ 395.229873][T20187] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #12: block 13: comm syz.3.5001: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 395.258321][T20185] EXT4-fs error (device loop3): ext4_empty_dir:3124: inode #12: block 13: comm syz.3.5001: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 395.287821][T20185] netdevsim netdevsim3: Direct firmware load for ..€ failed with error -2 [ 395.406687][T20211] loop6: detected capacity change from 0 to 164 [ 395.442803][T20212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5004'. [ 395.562101][T20220] netlink: 'syz.6.5006': attribute type 24 has an invalid length. [ 395.595179][T20224] dummy0: entered allmulticast mode [ 395.786994][T20217] dummy0: left allmulticast mode [ 395.888102][ T23] tipc: Node number set to 845062575 [ 395.951268][T20233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5012'. [ 396.581766][T20254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20254 comm=syz.5.5013 [ 396.642109][T20264] loop3: detected capacity change from 0 to 164 [ 396.647648][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5019'. [ 396.669219][T20261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20261 comm=syz.6.5018 [ 396.691696][T20264] syz.3.5021: attempt to access beyond end of device [ 396.691696][T20264] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 396.719315][T20267] 9pnet_fd: Insufficient options for proto=fd [ 396.720059][T20264] syz.3.5021: attempt to access beyond end of device [ 396.720059][T20264] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 396.813191][T20269] lo speed is unknown, defaulting to 1000 [ 396.857406][T20269] vxcan1 speed is unknown, defaulting to 1000 [ 397.212533][T20287] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 397.219987][T20287] netlink: 'syz.1.5029': attribute type 13 has an invalid length. [ 397.343544][T20291] loop5: detected capacity change from 0 to 164 [ 397.547953][T20306] usb usb9: usbfs: process 20306 (syz.6.5037) did not claim interface 16 before use [ 397.569037][T20306] loop6: detected capacity change from 0 to 2048 [ 397.799166][T20315] syz!: rxe_newlink: already configured on team_slave_0 [ 397.847709][T20315] netlink: 'syz.6.5040': attribute type 13 has an invalid length. [ 398.024987][T20323] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5043'. [ 398.065330][T20326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5044'. [ 398.262399][T20336] loop6: detected capacity change from 0 to 164 [ 398.397522][T20341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5048'. [ 398.415672][T20341] loop6: detected capacity change from 0 to 512 [ 398.444499][T20341] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.835833][T20356] usb usb9: usbfs: process 20356 (syz.3.5049) did not claim interface 16 before use [ 398.878408][T20359] syz!: rxe_newlink: already configured on team_slave_0 [ 398.910355][T20354] netlink: 'syz.6.5052': attribute type 13 has an invalid length. [ 398.938926][T20356] loop3: detected capacity change from 0 to 2048 [ 399.016365][T20365] loop6: detected capacity change from 0 to 512 [ 399.047066][T20365] EXT4-fs: inline encryption not supported [ 399.056453][T20365] ext4: Unknown parameter 'noacl' [ 399.263115][T20374] loop3: detected capacity change from 0 to 1024 [ 399.402619][T20380] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5059'. [ 399.537571][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5061'. [ 399.558812][T20385] loop3: detected capacity change from 0 to 512 [ 399.605827][T20385] ext4 filesystem being mounted at /408/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 399.749788][T20397] netlink: 'syz.0.5064': attribute type 13 has an invalid length. [ 399.898976][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 399.898994][ T29] audit: type=1400 audit(1755126774.582:19122): avc: denied { execute } for pid=20418 comm="syz.0.5070" dev="tmpfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 399.935852][ T29] audit: type=1400 audit(1755126774.612:19123): avc: denied { execute_no_trans } for pid=20418 comm="syz.0.5070" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=3132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 399.973948][ T29] audit: type=1400 audit(1755126774.652:19124): avc: denied { create } for pid=20416 comm="syz.1.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 400.007058][ T29] audit: type=1400 audit(1755126774.682:19125): avc: denied { prog_load } for pid=20424 comm="syz.0.5072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 400.026412][ T29] audit: type=1400 audit(1755126774.682:19126): avc: denied { create } for pid=20416 comm="syz.1.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.047345][ T29] audit: type=1400 audit(1755126774.682:19127): avc: denied { bpf } for pid=20424 comm="syz.0.5072" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 400.068201][ T29] audit: type=1400 audit(1755126774.682:19128): avc: denied { open } for pid=20416 comm="syz.1.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 400.075257][T20432] loop3: detected capacity change from 0 to 1024 [ 400.087784][ T29] audit: type=1400 audit(1755126774.682:19129): avc: denied { perfmon } for pid=20416 comm="syz.1.5069" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 400.115163][ T29] audit: type=1400 audit(1755126774.682:19130): avc: denied { kernel } for pid=20416 comm="syz.1.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 400.134894][ T29] audit: type=1400 audit(1755126774.682:19131): avc: denied { cpu } for pid=20416 comm="syz.1.5069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 400.144309][T20432] EXT4-fs: Ignoring removed bh option [ 400.372174][T20440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5076'. [ 400.462132][T20447] loop6: detected capacity change from 0 to 164 [ 400.589005][T20445] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 400.607847][T20445] netlink: 'syz.3.5078': attribute type 13 has an invalid length. [ 400.742380][T20460] loop5: detected capacity change from 0 to 164 [ 400.792663][T20462] loop3: detected capacity change from 0 to 164 [ 400.812235][T20460] syz.5.5082: attempt to access beyond end of device [ 400.812235][T20460] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 400.846238][T20462] syz.3.5084: attempt to access beyond end of device [ 400.846238][T20462] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 400.851382][T20460] syz.5.5082: attempt to access beyond end of device [ 400.851382][T20460] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 400.911417][T20462] syz.3.5084: attempt to access beyond end of device [ 400.911417][T20462] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 400.980266][T20465] macsec1: entered promiscuous mode [ 400.985698][T20465] bridge0: entered promiscuous mode [ 401.023748][T20469] loop3: detected capacity change from 0 to 164 [ 401.033956][T20465] bridge0: port 3(macsec1) entered blocking state [ 401.040529][T20465] bridge0: port 3(macsec1) entered disabled state [ 401.053775][T20465] macsec1: entered allmulticast mode [ 401.059183][T20465] bridge0: entered allmulticast mode [ 401.086232][T20465] macsec1: left allmulticast mode [ 401.091319][T20465] bridge0: left allmulticast mode [ 401.112450][T20465] bridge0: left promiscuous mode [ 401.135053][T20476] macsec1: entered promiscuous mode [ 401.140479][T20476] bridge0: entered promiscuous mode [ 401.149764][T20483] loop3: detected capacity change from 0 to 1024 [ 401.161471][T20476] bridge0: port 3(macsec1) entered blocking state [ 401.168035][T20476] bridge0: port 3(macsec1) entered disabled state [ 401.175755][T20476] macsec1: entered allmulticast mode [ 401.181074][T20476] bridge0: entered allmulticast mode [ 401.209484][T20483] EXT4-fs mount: 19 callbacks suppressed [ 401.209501][T20483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.233698][T20476] macsec1: left allmulticast mode [ 401.238940][T20476] bridge0: left allmulticast mode [ 401.249728][T20476] bridge0: left promiscuous mode [ 401.287345][T13939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.519814][T20515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5100'. [ 401.580735][T20518] usb usb9: usbfs: process 20518 (syz.1.5101) did not claim interface 16 before use [ 402.083412][T20528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5102'. [ 402.430526][T20551] usb usb9: usbfs: process 20551 (syz.1.5114) did not claim interface 16 before use [ 402.521536][T20549] program syz.3.5112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.261643][T20557] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 403.289009][T20555] netlink: 'syz.3.5115': attribute type 13 has an invalid length. [ 403.332257][T20560] loop6: detected capacity change from 0 to 164 [ 403.361225][T20562] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5117'. [ 403.386376][T20562] loop5: detected capacity change from 0 to 512 [ 403.392547][T20564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5118'. [ 403.427508][T20562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.441424][T20562] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.495368][T20579] loop3: detected capacity change from 0 to 164 [ 403.567844][T17441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.583254][T20585] SELinux: policydb magic number 0x6572666b does not match expected magic number 0xf97cff8c [ 403.597968][T20585] SELinux: failed to load policy [ 403.655222][T20594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5128'. [ 403.697943][T20596] usb usb9: usbfs: process 20596 (syz.5.5129) did not claim interface 16 before use [ 403.739681][T20596] loop5: detected capacity change from 0 to 2048 [ 403.740198][T20598] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 403.754959][T20598] netlink: 'syz.1.5130': attribute type 13 has an invalid length. [ 403.779767][T20596] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.818307][T20596] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.023878][T20626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5140'. [ 404.093117][T20628] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5141'. [ 404.332369][T20634] loop6: detected capacity change from 0 to 164 [ 404.462475][T20640] loop6: detected capacity change from 0 to 512 [ 404.509757][T20640] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.752656][T20650] usb usb9: usbfs: process 20650 (syz.0.5149) did not claim interface 0 before use [ 404.795690][T20650] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 405.012692][T20660] FAULT_INJECTION: forcing a failure. [ 405.012692][T20660] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.025845][T20660] CPU: 1 UID: 0 PID: 20660 Comm: syz.3.5151 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 405.025881][T20660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.025897][T20660] Call Trace: [ 405.025906][T20660] [ 405.025917][T20660] __dump_stack+0x1d/0x30 [ 405.025945][T20660] dump_stack_lvl+0xe8/0x140 [ 405.025969][T20660] dump_stack+0x15/0x1b [ 405.025986][T20660] should_fail_ex+0x265/0x280 [ 405.026012][T20660] should_fail+0xb/0x20 [ 405.026034][T20660] should_fail_usercopy+0x1a/0x20 [ 405.026120][T20660] _copy_to_user+0x20/0xa0 [ 405.026204][T20660] simple_read_from_buffer+0xb5/0x130 [ 405.026232][T20660] proc_fail_nth_read+0x10e/0x150 [ 405.026270][T20660] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 405.026305][T20660] vfs_read+0x1a5/0x770 [ 405.026365][T20660] ? __rcu_read_unlock+0x4f/0x70 [ 405.026387][T20660] ? __fget_files+0x184/0x1c0 [ 405.026423][T20660] ksys_read+0xda/0x1a0 [ 405.026452][T20660] __x64_sys_read+0x40/0x50 [ 405.026481][T20660] x64_sys_call+0x27bc/0x2ff0 [ 405.026534][T20660] do_syscall_64+0xd2/0x200 [ 405.026572][T20660] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 405.026678][T20660] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 405.026727][T20660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.026750][T20660] RIP: 0033:0x7f4d2e45d5fc [ 405.026767][T20660] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 405.026788][T20660] RSP: 002b:00007f4d2cec7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 405.026809][T20660] RAX: ffffffffffffffda RBX: 00007f4d2e685fa0 RCX: 00007f4d2e45d5fc [ 405.026883][T20660] RDX: 000000000000000f RSI: 00007f4d2cec70a0 RDI: 0000000000000006 [ 405.026898][T20660] RBP: 00007f4d2cec7090 R08: 0000000000000000 R09: 0000000000000000 [ 405.026912][T20660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.026926][T20660] R13: 00007f4d2e686038 R14: 00007f4d2e685fa0 R15: 00007ffe7cf552a8 [ 405.026949][T20660] [ 405.280577][T20662] usb usb9: usbfs: process 20662 (syz.3.5152) did not claim interface 16 before use [ 405.359040][T20662] loop3: detected capacity change from 0 to 2048 [ 405.423357][T20662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.449867][T20662] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.515646][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.556567][T20673] loop3: detected capacity change from 0 to 164 [ 405.634586][T20679] loop6: detected capacity change from 0 to 512 [ 405.671298][T20679] msdos: Unknown parameter 'gh' [ 405.703647][ T29] kauditd_printk_skb: 756 callbacks suppressed [ 405.703664][ T29] audit: type=1400 audit(1755126780.382:19888): avc: denied { setopt } for pid=20680 comm="syz.0.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 405.744092][T20681] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20681 comm=syz.0.5159 [ 405.762260][ T29] audit: type=1400 audit(1755126780.412:19889): avc: denied { bind } for pid=20680 comm="syz.0.5159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 405.781825][ T29] audit: type=1400 audit(1755126780.412:19890): avc: denied { name_bind } for pid=20680 comm="syz.0.5159" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 405.803790][ T29] audit: type=1400 audit(1755126780.412:19891): avc: denied { node_bind } for pid=20680 comm="syz.0.5159" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 405.826559][ T29] audit: type=1400 audit(1755126780.422:19892): avc: denied { name_bind } for pid=20680 comm="syz.0.5159" src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 405.848346][ T29] audit: type=1400 audit(1755126780.422:19893): avc: denied { node_bind } for pid=20680 comm="syz.0.5159" saddr=::ffff:224.0.0.1 src=3684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 405.901507][ T29] audit: type=1400 audit(1755126780.542:19894): avc: denied { create } for pid=20678 comm="syz.6.5158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 405.921246][ T29] audit: type=1400 audit(1755126780.552:19895): avc: denied { bind } for pid=20678 comm="syz.6.5158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 405.940869][ T29] audit: type=1400 audit(1755126780.562:19896): avc: denied { name_bind } for pid=20678 comm="syz.6.5158" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 405.962010][ T29] audit: type=1400 audit(1755126780.562:19897): avc: denied { node_bind } for pid=20678 comm="syz.6.5158" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 406.230425][T20689] FAULT_INJECTION: forcing a failure. [ 406.230425][T20689] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.243577][T20689] CPU: 0 UID: 0 PID: 20689 Comm: syz.6.5161 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 406.243621][T20689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.243635][T20689] Call Trace: [ 406.243644][T20689] [ 406.243655][T20689] __dump_stack+0x1d/0x30 [ 406.243681][T20689] dump_stack_lvl+0xe8/0x140 [ 406.243701][T20689] dump_stack+0x15/0x1b [ 406.243794][T20689] should_fail_ex+0x265/0x280 [ 406.243823][T20689] should_fail+0xb/0x20 [ 406.243840][T20689] should_fail_usercopy+0x1a/0x20 [ 406.243862][T20689] _copy_from_user+0x1c/0xb0 [ 406.243938][T20689] ___sys_sendmsg+0xc1/0x1d0 [ 406.243990][T20689] __x64_sys_sendmsg+0xd4/0x160 [ 406.244046][T20689] x64_sys_call+0x191e/0x2ff0 [ 406.244068][T20689] do_syscall_64+0xd2/0x200 [ 406.244104][T20689] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 406.244157][T20689] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 406.244187][T20689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.244210][T20689] RIP: 0033:0x7fbf2475ebe9 [ 406.244226][T20689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.244249][T20689] RSP: 002b:00007fbf231bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.244341][T20689] RAX: ffffffffffffffda RBX: 00007fbf24985fa0 RCX: 00007fbf2475ebe9 [ 406.244356][T20689] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000017 [ 406.244371][T20689] RBP: 00007fbf231bf090 R08: 0000000000000000 R09: 0000000000000000 [ 406.244386][T20689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.244402][T20689] R13: 00007fbf24986038 R14: 00007fbf24985fa0 R15: 00007fff857e9aa8 [ 406.244444][T20689] [ 406.561497][T20692] FAULT_INJECTION: forcing a failure. [ 406.561497][T20692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.574696][T20692] CPU: 1 UID: 0 PID: 20692 Comm: syz.3.5163 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 406.574763][T20692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 406.574779][T20692] Call Trace: [ 406.574866][T20692] [ 406.574874][T20692] __dump_stack+0x1d/0x30 [ 406.574897][T20692] dump_stack_lvl+0xe8/0x140 [ 406.574918][T20692] dump_stack+0x15/0x1b [ 406.574935][T20692] should_fail_ex+0x265/0x280 [ 406.574970][T20692] should_fail+0xb/0x20 [ 406.574989][T20692] should_fail_usercopy+0x1a/0x20 [ 406.575013][T20692] _copy_from_user+0x1c/0xb0 [ 406.575118][T20692] ___sys_sendmsg+0xc1/0x1d0 [ 406.575160][T20692] __x64_sys_sendmsg+0xd4/0x160 [ 406.575188][T20692] x64_sys_call+0x191e/0x2ff0 [ 406.575212][T20692] do_syscall_64+0xd2/0x200 [ 406.575359][T20692] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 406.575386][T20692] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 406.575420][T20692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.575447][T20692] RIP: 0033:0x7f4d2e45ebe9 [ 406.575480][T20692] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.575561][T20692] RSP: 002b:00007f4d2cec7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.575593][T20692] RAX: ffffffffffffffda RBX: 00007f4d2e685fa0 RCX: 00007f4d2e45ebe9 [ 406.575606][T20692] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000014 [ 406.575619][T20692] RBP: 00007f4d2cec7090 R08: 0000000000000000 R09: 0000000000000000 [ 406.575729][T20692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.575742][T20692] R13: 00007f4d2e686038 R14: 00007f4d2e685fa0 R15: 00007ffe7cf552a8 [ 406.575763][T20692] [ 406.625059][T20701] 9pnet_fd: Insufficient options for proto=fd [ 406.784264][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5166'. [ 406.798726][T20712] loop6: detected capacity change from 0 to 164 [ 406.866819][T20715] usb usb9: usbfs: process 20715 (syz.0.5169) did not claim interface 0 before use [ 406.912591][T20718] loop6: detected capacity change from 0 to 512 [ 406.922022][T20715] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 406.956916][T20718] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 406.970408][T20718] ext4 filesystem being mounted at /486/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.033447][T20729] FAULT_INJECTION: forcing a failure. [ 407.033447][T20729] name failslab, interval 1, probability 0, space 0, times 0 [ 407.046144][T20729] CPU: 0 UID: 0 PID: 20729 Comm: syz.5.5173 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 407.046181][T20729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.046198][T20729] Call Trace: [ 407.046258][T20729] [ 407.046266][T20729] __dump_stack+0x1d/0x30 [ 407.046293][T20729] dump_stack_lvl+0xe8/0x140 [ 407.046319][T20729] dump_stack+0x15/0x1b [ 407.046341][T20729] should_fail_ex+0x265/0x280 [ 407.046369][T20729] should_failslab+0x8c/0xb0 [ 407.046401][T20729] kmem_cache_alloc_noprof+0x50/0x310 [ 407.046429][T20729] ? getname_flags+0x80/0x3b0 [ 407.046549][T20729] getname_flags+0x80/0x3b0 [ 407.046586][T20729] do_sys_openat2+0x60/0x110 [ 407.046710][T20729] __x64_sys_openat+0xf2/0x120 [ 407.046824][T20729] x64_sys_call+0x2e9c/0x2ff0 [ 407.046847][T20729] do_syscall_64+0xd2/0x200 [ 407.046882][T20729] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 407.046914][T20729] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 407.047000][T20729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.047079][T20729] RIP: 0033:0x7f2c2a04ebe9 [ 407.047099][T20729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.047206][T20729] RSP: 002b:00007f2c28ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 407.047234][T20729] RAX: ffffffffffffffda RBX: 00007f2c2a275fa0 RCX: 00007f2c2a04ebe9 [ 407.047250][T20729] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 407.047265][T20729] RBP: 00007f2c28ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 407.047281][T20729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.047296][T20729] R13: 00007f2c2a276038 R14: 00007f2c2a275fa0 R15: 00007ffec91c4cc8 [ 407.047322][T20729] [ 407.254848][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.294512][T20737] loop6: detected capacity change from 0 to 1024 [ 407.331951][T20741] loop5: detected capacity change from 0 to 512 [ 407.358354][T20737] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.361507][T20741] netlink: 'syz.5.5177': attribute type 13 has an invalid length. [ 407.453406][T20741] loop5: detected capacity change from 0 to 1024 [ 407.490263][T20741] EXT4-fs: inline encryption not supported [ 407.496189][T20741] EXT4-fs: Ignoring removed i_version option [ 407.536146][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.548985][T20741] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 407.590704][T20741] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #3: block 1: comm syz.5.5177: lblock 1 mapped to illegal pblock 1 (length 1) [ 407.605929][T20747] loop6: detected capacity change from 0 to 164 [ 407.641750][T20741] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5177: Failed to acquire dquot type 0 [ 407.668884][T20741] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.5177: Freeing blocks not in datazone - block = 0, count = 4096 [ 407.716921][T20741] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.5177: Invalid inode bitmap blk 0 in block_group 0 [ 407.737589][T17158] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 407.770420][T20741] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 407.787627][T17158] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:17: Failed to release dquot type 0 [ 407.788591][T20741] EXT4-fs (loop5): 1 orphan inode deleted [ 407.829247][T20741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.868190][T20741] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm syz.5.5177: lblock 1 mapped to illegal pblock 1 (length 1) [ 407.908118][T20741] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5177: Failed to acquire dquot type 0 [ 407.911020][T20754] FAULT_INJECTION: forcing a failure. [ 407.911020][T20754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.932670][T20754] CPU: 0 UID: 0 PID: 20754 Comm: syz.6.5181 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 407.932702][T20754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 407.932717][T20754] Call Trace: [ 407.932725][T20754] [ 407.932734][T20754] __dump_stack+0x1d/0x30 [ 407.932756][T20754] dump_stack_lvl+0xe8/0x140 [ 407.932778][T20754] dump_stack+0x15/0x1b [ 407.932797][T20754] should_fail_ex+0x265/0x280 [ 407.932821][T20754] should_fail+0xb/0x20 [ 407.932956][T20754] should_fail_usercopy+0x1a/0x20 [ 407.932983][T20754] _copy_to_user+0x20/0xa0 [ 407.933016][T20754] simple_read_from_buffer+0xb5/0x130 [ 407.933037][T20754] proc_fail_nth_read+0x10e/0x150 [ 407.933064][T20754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 407.933113][T20754] vfs_read+0x1a5/0x770 [ 407.933133][T20754] ? __rcu_read_unlock+0x4f/0x70 [ 407.933194][T20754] ? __fget_files+0x184/0x1c0 [ 407.933225][T20754] ksys_read+0xda/0x1a0 [ 407.933248][T20754] __x64_sys_read+0x40/0x50 [ 407.933293][T20754] x64_sys_call+0x27bc/0x2ff0 [ 407.933320][T20754] do_syscall_64+0xd2/0x200 [ 407.933379][T20754] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 407.933404][T20754] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 407.933435][T20754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.933530][T20754] RIP: 0033:0x7fbf2475d5fc [ 407.933561][T20754] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 407.933603][T20754] RSP: 002b:00007fbf2316b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 407.933626][T20754] RAX: ffffffffffffffda RBX: 00007fbf24986090 RCX: 00007fbf2475d5fc [ 407.933672][T20754] RDX: 000000000000000f RSI: 00007fbf2316b0a0 RDI: 0000000000000006 [ 407.933684][T20754] RBP: 00007fbf2316b090 R08: 0000000000000000 R09: 0000000000000000 [ 407.933699][T20754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.933715][T20754] R13: 00007fbf24986128 R14: 00007fbf24986090 R15: 00007fff857e9aa8 [ 407.933743][T20754] [ 408.167168][T17441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.216742][T20764] loop5: detected capacity change from 0 to 512 [ 408.223707][T20764] EXT4-fs: inline encryption not supported [ 408.255634][T20764] ext4: Unknown parameter 'noacl' [ 408.596996][T20781] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 408.619702][T20780] loop3: detected capacity change from 0 to 164 [ 408.629404][T20770] netlink: 'syz.1.5186': attribute type 13 has an invalid length. [ 408.661069][T20780] syz.3.5190: attempt to access beyond end of device [ 408.661069][T20780] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 408.706236][T20785] netlink: 'syz.0.5192': attribute type 13 has an invalid length. [ 408.715319][T20780] syz.3.5190: attempt to access beyond end of device [ 408.715319][T20780] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 408.852746][T20795] loop3: detected capacity change from 0 to 1024 [ 408.901677][T20795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.995076][T13939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.177665][T20800] loop5: detected capacity change from 0 to 8192 [ 409.734104][T20821] netlink: 'syz.0.5205': attribute type 13 has an invalid length. [ 409.941326][T20833] loop3: detected capacity change from 0 to 164 [ 410.018655][T20840] loop3: detected capacity change from 0 to 1024 [ 410.050439][T20840] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.135907][T20851] loop5: detected capacity change from 0 to 164 [ 410.250909][T20855] loop5: detected capacity change from 0 to 1024 [ 410.287082][T20855] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.350768][T17441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.489769][T20863] netlink: 'syz.0.5218': attribute type 13 has an invalid length. [ 410.562839][T20872] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 410.580248][T20872] SELinux: failed to load policy [ 410.614101][T20870] loop5: detected capacity change from 0 to 8192 [ 410.855216][T13939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.909976][ T29] kauditd_printk_skb: 653 callbacks suppressed [ 410.909995][ T29] audit: type=1400 audit(1755126785.592:20546): avc: denied { module_request } for pid=20882 comm="syz.1.5226" kmod="netdev-veth0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 410.938303][ T58] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 410.948087][ T58] ref_tracker: netdev@ffff888118994550 has 1/1 users at [ 410.948087][ T58] batadv_hard_if_event+0x6c1/0xf10 [ 410.948087][ T58] raw_notifier_call_chain+0x6f/0x1b0 [ 410.948087][ T58] call_netdevice_notifiers_info+0xae/0x100 [ 410.948087][ T58] register_netdevice+0xd48/0xf00 [ 410.948087][ T58] veth_newlink+0x49b/0x770 [ 410.948087][ T58] rtnl_newlink_create+0x1b9/0x620 [ 410.948087][ T58] rtnl_newlink+0xf29/0x12d0 [ 410.948087][ T58] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 410.948087][ T58] netlink_rcv_skb+0x120/0x220 [ 410.948087][ T58] rtnetlink_rcv+0x1c/0x30 [ 410.948087][ T58] netlink_unicast+0x5c0/0x690 [ 410.948087][ T58] netlink_sendmsg+0x58b/0x6b0 [ 410.948087][ T58] __sock_sendmsg+0x145/0x180 [ 410.948087][ T58] __sys_sendto+0x268/0x330 [ 410.948087][ T58] __x64_sys_sendto+0x76/0x90 [ 410.948087][ T58] x64_sys_call+0x2d05/0x2ff0 [ 410.948087][ T58] [ 410.961522][T20885] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5226'. [ 411.054484][ T29] audit: type=1400 audit(1755126785.642:20547): avc: denied { setopt } for pid=20882 comm="syz.1.5226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 411.074527][ T29] audit: type=1400 audit(1755126785.732:20548): avc: denied { read } for pid=2974 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 411.096658][ T29] audit: type=1400 audit(1755126785.732:20549): avc: denied { search } for pid=2974 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.118366][ T29] audit: type=1400 audit(1755126785.732:20550): avc: denied { search } for pid=2974 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.140102][ T29] audit: type=1400 audit(1755126785.732:20551): avc: denied { add_name } for pid=2974 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 411.161119][ T29] audit: type=1400 audit(1755126785.732:20552): avc: denied { create } for pid=2974 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 411.181922][ T29] audit: type=1400 audit(1755126785.732:20553): avc: denied { append open } for pid=2974 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 411.205263][ T29] audit: type=1400 audit(1755126785.732:20554): avc: denied { getattr } for pid=2974 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 411.239039][ T29] audit: type=1400 audit(1755126785.762:20555): avc: denied { sys_module } for pid=20882 comm="syz.1.5226" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 411.453088][T20898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5229'. [ 411.499535][T20900] loop5: detected capacity change from 0 to 512 [ 411.510052][T20900] EXT4-fs: inline encryption not supported [ 411.535748][T20900] ext4: Unknown parameter 'noacl' [ 412.296260][T20920] tipc: Enabling of bearer rejected, already enabled [ 412.341454][T20920] macvlan1: entered promiscuous mode [ 412.342029][T20920] ipvlan0: entered promiscuous mode [ 412.376266][T20920] ipvlan0: left promiscuous mode [ 412.376420][T20920] macvlan1: left promiscuous mode [ 412.633389][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5238'. [ 412.717663][T20929] lo speed is unknown, defaulting to 1000 [ 412.727349][T20936] loop5: detected capacity change from 0 to 164 [ 412.806725][T20941] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5241'. [ 412.822013][T20941] loop3: detected capacity change from 0 to 512 [ 412.851887][T20941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.865071][T20941] ext4 filesystem being mounted at /455/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 412.876489][T20929] vxcan1 speed is unknown, defaulting to 1000 [ 412.960729][T20952] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5242'. [ 413.010295][T20960] usb usb9: usbfs: process 20960 (syz.0.5245) did not claim interface 0 before use [ 413.037410][T20960] vhci_hcd: default hub control req: a100 v0000 i0000 l0 [ 413.049615][T13939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.099787][T20964] loop3: detected capacity change from 0 to 512 [ 413.118514][T20964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.146053][T20966] FAULT_INJECTION: forcing a failure. [ 413.146053][T20966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 413.159288][T20966] CPU: 0 UID: 0 PID: 20966 Comm: syz.1.5248 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 413.159377][T20966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 413.159393][T20966] Call Trace: [ 413.159402][T20966] [ 413.159412][T20966] __dump_stack+0x1d/0x30 [ 413.159433][T20966] dump_stack_lvl+0xe8/0x140 [ 413.159453][T20966] dump_stack+0x15/0x1b [ 413.159644][T20966] should_fail_ex+0x265/0x280 [ 413.159672][T20966] should_fail+0xb/0x20 [ 413.159691][T20966] should_fail_usercopy+0x1a/0x20 [ 413.159712][T20966] _copy_from_user+0x1c/0xb0 [ 413.159757][T20966] ___sys_sendmsg+0xc1/0x1d0 [ 413.159869][T20966] __x64_sys_sendmsg+0xd4/0x160 [ 413.159902][T20966] x64_sys_call+0x191e/0x2ff0 [ 413.159929][T20966] do_syscall_64+0xd2/0x200 [ 413.159962][T20966] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 413.160066][T20966] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 413.160097][T20966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.160124][T20966] RIP: 0033:0x7f992fc0ebe9 [ 413.160207][T20966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.160225][T20966] RSP: 002b:00007f992e66f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.160318][T20966] RAX: ffffffffffffffda RBX: 00007f992fe35fa0 RCX: 00007f992fc0ebe9 [ 413.160335][T20966] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000015 [ 413.160351][T20966] RBP: 00007f992e66f090 R08: 0000000000000000 R09: 0000000000000000 [ 413.160364][T20966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.160376][T20966] R13: 00007f992fe36038 R14: 00007f992fe35fa0 R15: 00007ffedee35d78 [ 413.160397][T20966] [ 413.378943][T20974] loop5: detected capacity change from 0 to 512 [ 413.416010][T20978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5250'. [ 413.467356][T20974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.866561][T20998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5255'. [ 414.145140][T21012] loop6: detected capacity change from 0 to 164 [ 414.183888][T21012] syz.6.5257: attempt to access beyond end of device [ 414.183888][T21012] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 414.249920][T21012] syz.6.5257: attempt to access beyond end of device [ 414.249920][T21012] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 414.275556][T13939] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.355398][T21014] loop3: detected capacity change from 0 to 164 [ 414.633600][T17441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.697244][T21029] loop5: detected capacity change from 0 to 1024 [ 414.715966][T21029] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.735857][T21027] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5260'. [ 414.806677][T17441] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.954497][T21048] loop6: detected capacity change from 0 to 164 [ 415.059926][T21050] program syz.0.5262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.145057][T21051] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 415.153940][T21051] netlink: 'syz.5.5269': attribute type 13 has an invalid length. [ 415.189054][T21054] syz!: rxe_newlink: already configured on team_slave_0 [ 415.208930][T21054] netlink: 'syz.6.5270': attribute type 13 has an invalid length. [ 415.309580][T21063] loop6: detected capacity change from 0 to 512 [ 415.326016][T21063] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.372273][T21065] loop5: detected capacity change from 0 to 2048 [ 415.422147][T21065] Alternate GPT is invalid, using primary GPT. [ 415.428646][T21065] loop5: p1 p2 p3 [ 415.512038][T21084] loop3: detected capacity change from 0 to 164 [ 415.560883][ T5265] ================================================================== [ 415.569021][ T5265] BUG: KCSAN: data-race in generic_fillattr / touch_atime [ 415.576159][ T5265] [ 415.578486][ T5265] write to 0xffff8881205d4c90 of 4 bytes by task 3295 on cpu 1: [ 415.586145][ T5265] touch_atime+0x1e8/0x340 [ 415.590576][ T5265] shmem_file_read_iter+0x477/0x540 [ 415.595786][ T5265] vfs_read+0x64c/0x770 [ 415.599948][ T5265] ksys_read+0xda/0x1a0 [ 415.604108][ T5265] __x64_sys_read+0x40/0x50 [ 415.608616][ T5265] x64_sys_call+0x27bc/0x2ff0 [ 415.613302][ T5265] do_syscall_64+0xd2/0x200 [ 415.617815][ T5265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.623717][ T5265] [ 415.626040][ T5265] read to 0xffff8881205d4c90 of 4 bytes by task 5265 on cpu 0: [ 415.633621][ T5265] generic_fillattr+0x172/0x340 [ 415.638481][ T5265] shmem_getattr+0x181/0x200 [ 415.643079][ T5265] vfs_getattr_nosec+0x146/0x1e0 [ 415.648030][ T5265] __se_sys_newfstat+0x96/0x2e0 [ 415.652889][ T5265] __x64_sys_newfstat+0x31/0x40 [ 415.657751][ T5265] x64_sys_call+0x2764/0x2ff0 [ 415.662448][ T5265] do_syscall_64+0xd2/0x200 [ 415.666964][ T5265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.672863][ T5265] [ 415.675182][ T5265] value changed: 0x0e781953 -> 0x0f4ee05c [ 415.680892][ T5265] [ 415.683210][ T5265] Reported by Kernel Concurrency Sanitizer on: [ 415.689370][ T5265] CPU: 0 UID: 0 PID: 5265 Comm: udevd Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094 #0 PREEMPT(voluntary) [ 415.701346][ T5265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 415.711413][ T5265] ================================================================== [ 415.777565][T21085] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5279'. [ 415.857543][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 415.879997][ T5265] udevd[5265]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 415.893140][ T5744] udevd[5744]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 416.164305][T12730] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.