last executing test programs: 2m33.747369135s ago: executing program 4 (id=227): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e01, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x7, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000200)='sockfs\x00', 0x0) signalfd(r4, &(0x7f0000000100)={[0x4]}, 0x8) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000480)='\xbd\x10\xe2\n\xc4\xa8\xf80\xce\x9cqa\xfeK\xc2;Y\x8b\xbbfd\xa5!\x95\x88V9g\x00\x00`V\xd5\x1c\xa8?\a\x9e[O<\xf4s\x85~\t\x00\x00\x00\x04a\xf8\xa6f\x96nB\x02\x10\xc0\xa8\xea\x16uq\xc4\xb0\xe2\xf4\x00\x00C$', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='.]:&\x00', &(0x7f0000000140)='\x00', 0x0) close(r4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 2m33.746798795s ago: executing program 4 (id=228): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r2, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x700, 0x7800, 0x7, 0xa, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x64, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@timestamp_addr={0x44, 0x4, 0x39, 0x1, 0x8}]}}}}}) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x81, 0x1, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x7800, 0x101, 0x55b5c3b6}}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r8, @ANYBLOB="010029bd7000000000001b0000000c00018008000100", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x0, 0x5a, 0x0, 0x4, 0x8}, 0x28) sendmsg$can_bcm(r9, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x47, 0x2, 0x40, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7860, 0x7f, 0x80000001}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000980)={0xe8, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r11, 0x0, 0x2}, 0x18) 2m33.443837858s ago: executing program 4 (id=234): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r3) r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000100)={0x0, 0x5353, 0x800, 0x0, 0x2a4}, &(0x7f0000ffe000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) socket$inet(0x2, 0x4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r7}, 0x70) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @private0}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mount(0x0, 0x0, 0x0, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) 2m33.240583948s ago: executing program 4 (id=236): socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) sendfile(r1, r0, 0x0, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r6, &(0x7f00000004c0)}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000007dbe00000008000a", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r7, 0xf505, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001dc0)=@newtaction={0x44, 0x58, 0x284f, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ct={0x2c, 0xd, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r10 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r11 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r11, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r10, 0x7, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='usrjquota=') 2m33.014417478s ago: executing program 4 (id=238): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e01, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000040)=0x7, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180), 0x4) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000200)='sockfs\x00', 0x0) signalfd(r4, &(0x7f0000000100)={[0x4]}, 0x8) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000007c0)='\xd5@=\b\a:\x993\x00', &(0x7f0000000600)='dU|\xcbM\xe6\x91q\b', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000001ec0)='\\$#[\\/\x00\xd5\xd4^\xa7\xe4\xd4\x1f.yh\x18\xb8s\xe6\f\xaf*4\xe1\xa1e\x04%f\x8f\xde\x91\x04\xbb\xc8\x17\x15\xa4\xf0\x00\x15w\x00\x00\xed\xdd}\x00\x18\xf3\xde\n\xbe\x91\xc4\xc5\xe6\xd3o\xaau\xf34\t\x9d\x80rg\xbc\xee\x96p\x18\x9e(h\xeb\xd9\xde\xa6\xfc\x8e\xe3,\xae\xa8\xf0\x82y\x91\x1c{\x85 \xc7P\xa3\x9c\x06\xc1\xd3\x92\xcd\xcc\x17\xb2}\x13:\xbbh\"%;\b\x7f\x91\x8a\xa5Z\x92~<\xfe3\x19\xdcVJ\f\xd1\x89d\xf9N\xbd\x92\x86\xa2\xa8\xc0:\x1f\n\xc9\x8eUO\x8e\xea\x99\xe1\xbe%Y\x9eH#\xa4\x9d5\xa88m6\x89kE\xce\xc3\aBW\xec_\xea_\x81\xbe\x86~\x84F\xa9\xcd\xba\xfb\xd8\x8f\x01\x81~\x9c#\r\x87\xcf\x19\xb9\xbd \xcb\xff\x88io\xb0\xb1\xa0B\x8cI\x82+\xc4\xcf\xf4!+\x16v\xb6\x8a\xb7k}\x1d\xf2\x1c\x00\x8f\xd7\x84R\x12\xed){SM[\xe6g6\xfeF\x1dJ\x83', &(0x7f0000000480)='\xbd\x10\xe2\n\xc4\xa8\xf80\xce\x9cqa\xfeK\xc2;Y\x8b\xbbfd\xa5!\x95\x88V9g\x00\x00`V\xd5\x1c\xa8?\a\x9e[O<\xf4s\x85~\t\x00\x00\x00\x04a\xf8\xa6f\x96nB\x02\x10\xc0\xa8\xea\x16uq\xc4\xb0\xe2\xf4\x00\x00C$', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000002c0)='.]:&\x00', &(0x7f0000000140)='\x00', 0x0) close(r4) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x10}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 2m32.813156057s ago: executing program 4 (id=245): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m32.808638217s ago: executing program 32 (id=245): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4d, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m29.819082239s ago: executing program 5 (id=259): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="60000000010a01030000000000000000030000040900010073797a31000000000900010073797a31000000000900010073797a3100000000080002400000000108000240000000020c8c044000000010000000050c0004400000000000000005"], 0x60}, 0x1, 0x0, 0x0, 0x404880c}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000e9ff00000000000000000000000045984a0d7544899aa877845893bc74c5c6866e61d062114b040338e9d5c31b996fd8bfd09c1d580cf0365844a9d93d6bca2203bb605ed1ce9ec8a2f20b193df0a00f66c9292beb102ab527812cfe8439b29b05"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000fa300848027bc87000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000390009002cbd70000000000004000000040000000c0001800600060006"], 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000024c0)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x0, 0x0, 0x1c0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x20, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@icmp={{0x28}, {0x10, "94fe"}}, @common=@ah={{0x30}, {[0x55, 0x3], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast, 0x4, 0x1, [0x3d, 0x37, 0x25, 0x23, 0x35, 0x25, 0x9, 0xe, 0x2f, 0x32, 0x39, 0x3c, 0xb, 0x2c, 0x2a], 0x2, 0x2, 0x1}}}, {{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0xffffffffffffffff, 0x2, 0x1}, {{0xab3}, 0x7}, {{0x3}, 0x90}, 0x358}}, @common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, 0x8000, 0x1, [0x13, 0x34, 0x2f, 0x14, 0x3e, 0x3c, 0x3f, 0x18, 0x2a, 0x19, 0x2f, 0x1b, 0x33, 0x25, 0x25, 0x2c], 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010300000000fdffffff000400004e224e2300000000040100"/56, @ANYRES32=0x0, @ANYBLOB="070000000000000005000000000000000800030011000000"], 0x54}, 0x1, 0x0, 0x0, 0x20040849}, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000500)=[{&(0x7f0000000880)="8d343837b0174bc5c711344c503a0ddfd7899c7519f9be38dcb2c5a56cd6bf2e32949d0c38746da3a2189247bb5e5888b62ca5db9305aa60ffb0a950e884b093287b56e876fd899c8db967f0a45d75e605c5e258a0d4338de4a2f86819dc6ef1f98e0a034c2fd6d109152eb5f31836969e6880fbcef1ea6de6513aac19074661ca1699a7458a20fb53fbf77b50a5f5bf", 0x90}, {&(0x7f0000000a00)="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", 0xfa}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r7}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0xffffffff}, 0x0, 0x0) 2m29.721565604s ago: executing program 1 (id=260): fsopen(0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') write$binfmt_format(r4, &(0x7f0000000180)='1\x00', 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000380)='ext4_load_inode\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") close_range(r0, 0xffffffffffffffff, 0x0) 2m29.435582946s ago: executing program 1 (id=262): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r2, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x700, 0x7800, 0x7, 0xa, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x64, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@timestamp_addr={0x44, 0x4, 0x39, 0x1, 0x8}]}}}}}) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010029bd7000000000001b0000000c00018008000100", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x0, 0x5a, 0x0, 0x4, 0x8}, 0x28) sendmsg$can_bcm(r8, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x47, 0x2, 0x40, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7860, 0x7f, 0x80000001}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000980)={0xe8, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0x2}, 0x18) 2m29.025878114s ago: executing program 1 (id=267): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, 0x0, 0x177) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf2501000000"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) set_mempolicy(0x2, 0x0, 0x2c2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './mnt\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1fc, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xc}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1d}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x26}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x39}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_TX_RATES={0x1a0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x24, 0x24, 0x18]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x258d, 0x0, 0xffff, 0x8, 0x10, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x2, 0x526, 0xc64b, 0x8001, 0x5, 0x9]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x24, 0x30, 0x6, 0x2, 0x3, 0x60, 0x16, 0x60, 0xc, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb075, 0x35bb, 0x4, 0x3282, 0x10, 0x2, 0xa90]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x4, 0x6, 0xff, 0x1, 0x2, 0x7, 0x4]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x3}, {0x7, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x6, 0x40, 0x5, 0xa31c, 0x180]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x0, 0xd4, 0x1, 0x3ff, 0x8, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x16, 0x3, 0x5, 0x1b, 0x36, 0x36, 0x18, 0xc, 0xb, 0x1, 0x48, 0xb, 0x36, 0x9, 0x16, 0x60, 0x5, 0x6c, 0x2]}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x5398, 0x100, 0x0, 0x0, 0x7, 0x0, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x0, 0xb, 0x3, 0xb, 0x2434, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x60, 0x36, 0x16, 0x5, 0x30, 0x1, 0x0, 0x48, 0xb, 0x1b, 0x60, 0x6, 0x60, 0x24, 0x1b, 0x36, 0xb, 0x24, 0x36, 0x3, 0x30, 0x1, 0x60, 0x1, 0x16, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x4, 0x3, 0x7, 0xfffe, 0x3, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x9, 0x478, 0x10, 0x9, 0xd, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x5, 0x0, 0x1, 0x2, 0x1, 0x5]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './mnt\x00'}) 2m28.908800199s ago: executing program 1 (id=268): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x148, 0x11, 0x148, 0x0, 0x0, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x8, 0x3, 0xac9b, {0x170f}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) 2m28.835864623s ago: executing program 5 (id=269): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8) sendmsg$sock(r1, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m28.757392006s ago: executing program 1 (id=270): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_usb_connect$uac1(0x5, 0xa2, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000fc0)=""/224, 0xe0) prlimit64(0x0, 0x4, &(0x7f0000000140)={0x8, 0x73}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x3, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000700)=ANY=[@ANYBLOB="2b63707520fad939e31987e49d4c638ed6183fe80b6acc17e01a7da90c28c652499ae431973fb1924dc83170034a6afd1785a48007863f5b4ca041756025afb774ba8626ca874357e82ace0b36e352b3d493fc11e54a5c0cf5d416e72af0586cac7ee6e5392394a6d7dcbc4367a27a31424915a0375934120480c91f0319960ef8164209071c5d1e68317050343e17fb740e03b31063aa1b062c47273156fdb35ca18d9cb6c8dc8756610911856a35ddabc4b72c4a7cc1f3f29ca45095ddec70dc49e8c434ff8bb7c763dd656f6acbe6ce256e98f62cf747120af280a6803cf117e2b212fe3bbbc35faf59f9bd6105d9430827ba4c31138181c3a3f8a84a94813ab4942c5a2c230000000000"], 0x5) add_key$keyring(0x0, &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x800, 0x7, 0x2, 0x6, 0x16, "c92d91fe49cf206cf702337522000e16bb5929"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8288745dd33e062f) 2m28.755070066s ago: executing program 5 (id=271): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r2, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x700, 0x7800, 0x7, 0xa, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x64, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@timestamp_addr={0x44, 0x4, 0x39, 0x1, 0x8}]}}}}}) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="010029bd7000000000001b0000000c00018008000100", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x0, 0x5a, 0x0, 0x4, 0x8}, 0x28) sendmsg$can_bcm(r8, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x47, 0x2, 0x40, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7860, 0x7f, 0x80000001}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000980)={0xe8, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r10, 0x0, 0x2}, 0x18) 2m28.45846763s ago: executing program 1 (id=275): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(&(0x7f0000000180)) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1006) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000240)}) r3 = socket(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x20000012}) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000bc0)={[{@nodioread_nolock}, {@noinit_itable}, {@lazytime}, {@nouid32}, {@nodelalloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000001040)="$eJzs3MtvVFUYAPDv3j4AebQiPkDUKjFpfLS0oLJwo9HEBUYTXeCytgNpGKih1QghMhiDGxNDomvj0sS/wJ0xMerKxK1uXBkSomxAVzX3zr0wM8wAlWmnMr9fMp1z5p7bc777PPecaQPoW2PZjyRiS0T8GhEj9WxzgbH625VLp2f/vnR6Nonl5Tf+TPJyly+dni2LluttLjLjaUT6UVJU0mzx5KmjM9Vq5USRn1w69s7k4slTT793bOZI5Ujl+PSBA/v3TT337PQzXYkzi+vyrg8Wdu985a3zr84eOv/2j19n7d1SLG+Mo1vGssD/Ws61Lnu825X12NaGdDLYw4awIgMRke2uofz8H4mBuLbzRuLlD3vaOGBVZfemDZ0X15aBO1gSvW4B0BvljT57/i1fa9T1WBcuvlB/AMrivlK86ksGIy3KDLU833bTWEQcqv3zRfaKVRqHAABo9Mns5wfjqXb9vzTuy99/z39uK+ZQRiPi7ojYHhH3RMSOiLg3Ii97f0Q8sML6W6eGru//pBf+c3C3IOv/PV/MbTX3/8reX4wOFLmtefxDyeH5amVvsU3GY2hDlp+6QR3fvvTLp52WNfb/sldWf9kXLNpxYbBlgG5uZmkm75R2wcWzEbsG28WfXJ0JSCJiZ0TsWtmv3lYm5p/4anenQjeP/wa6MM+0/GUWXi2LvxYt8ZeSxvnJ+evmJyc3RrWyd7I8Kq7308/nXu9U/23F3wUXK/X3hv3fWmQ0aZyvXVx5Hed++7jjM821+Dd1Pv6T5nXmZpbS4eTNfJ55uPjs/ZmlpRNTEcPJwTzf9Pn0tXXLfFk+O/7H97Q//7cX62TVPxgR2UH8UEQ8HBGPFG1/NCIei4g9N4j/hxc7Lyvjj7RH+/9sxFzb69/Vjd6y/1eeGDj6/Ted6r+169/+PDVefJJf/26iXXOyy0VrA29n2wEAAMD/RZp/Bz5JJ66m03Riov4d/h1xV1pdWFx68vDCu8fn6t+VH42htBzpGinGQ6vz1cpUUit+Y318dLoYKy7HS/cV48afDWzK8xOzC9W5HscO/W5zh/M/88dAr1sHrLJNbT+dHl7zhgA90DqPnjZnz7wWLgZwp/L32tC/bnL+p2vVDmDtuf9D/2p3/p9pyZsLgDuT+z/0L+c/9Kn0u163AOgh93/oS7fzd/2rmNi4PprR9J8Camu1xdbrTskTEWUiXRftkVilRK+vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//KVfoRQ==") ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000a80)=ANY=[]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRESHEX=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r7, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r7, 0x7, &(0x7f0000000380)={0x1, 0x1, 0x7, 0x90}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'team0\x00', 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x3f, 0x2d, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x400000, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xbab, 0x0, 0x272, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000003, 0x5e, 0xfffffffc, 0x8, 0x3, 0x0, 0x400000, 0x6, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x404, 0x0, 0x0, 0xd79, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xc, 0x0, 0x800, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xe95]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) pwritev(r9, 0x0, 0x0, 0x9, 0x3) timerfd_gettime(r9, &(0x7f0000000040)) epoll_create1(0x80000) 2m28.45816756s ago: executing program 33 (id=275): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000240)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(&(0x7f0000000180)) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1006) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, &(0x7f0000000240)}) r3 = socket(0x2, 0x1, 0x0) r4 = epoll_create1(0x0) epoll_pwait2(r4, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x20000012}) r5 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000bc0)={[{@nodioread_nolock}, {@noinit_itable}, {@lazytime}, {@nouid32}, {@nodelalloc}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x481, &(0x7f0000001040)="$eJzs3MtvVFUYAPDv3j4AebQiPkDUKjFpfLS0oLJwo9HEBUYTXeCytgNpGKih1QghMhiDGxNDomvj0sS/wJ0xMerKxK1uXBkSomxAVzX3zr0wM8wAlWmnMr9fMp1z5p7bc777PPecaQPoW2PZjyRiS0T8GhEj9WxzgbH625VLp2f/vnR6Nonl5Tf+TPJyly+dni2LluttLjLjaUT6UVJU0mzx5KmjM9Vq5USRn1w69s7k4slTT793bOZI5Ujl+PSBA/v3TT337PQzXYkzi+vyrg8Wdu985a3zr84eOv/2j19n7d1SLG+Mo1vGssD/Ws61Lnu825X12NaGdDLYw4awIgMRke2uofz8H4mBuLbzRuLlD3vaOGBVZfemDZ0X15aBO1gSvW4B0BvljT57/i1fa9T1WBcuvlB/AMrivlK86ksGIy3KDLU833bTWEQcqv3zRfaKVRqHAABo9Mns5wfjqXb9vzTuy99/z39uK+ZQRiPi7ojYHhH3RMSOiLg3Ii97f0Q8sML6W6eGru//pBf+c3C3IOv/PV/MbTX3/8reX4wOFLmtefxDyeH5amVvsU3GY2hDlp+6QR3fvvTLp52WNfb/sldWf9kXLNpxYbBlgG5uZmkm75R2wcWzEbsG28WfXJ0JSCJiZ0TsWtmv3lYm5p/4anenQjeP/wa6MM+0/GUWXi2LvxYt8ZeSxvnJ+evmJyc3RrWyd7I8Kq7308/nXu9U/23F3wUXK/X3hv3fWmQ0aZyvXVx5Hed++7jjM821+Dd1Pv6T5nXmZpbS4eTNfJ55uPjs/ZmlpRNTEcPJwTzf9Pn0tXXLfFk+O/7H97Q//7cX62TVPxgR2UH8UEQ8HBGPFG1/NCIei4g9N4j/hxc7Lyvjj7RH+/9sxFzb69/Vjd6y/1eeGDj6/Ted6r+169/+PDVefJJf/26iXXOyy0VrA29n2wEAAMD/RZp/Bz5JJ66m03Riov4d/h1xV1pdWFx68vDCu8fn6t+VH42htBzpGinGQ6vz1cpUUit+Y318dLoYKy7HS/cV48afDWzK8xOzC9W5HscO/W5zh/M/88dAr1sHrLJNbT+dHl7zhgA90DqPnjZnz7wWLgZwp/L32tC/bnL+p2vVDmDtuf9D/2p3/p9pyZsLgDuT+z/0L+c/9Kn0u163AOgh93/oS7fzd/2rmNi4PprR9J8Camu1xdbrTskTEWUiXRftkVilRK+vTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//KVfoRQ==") ioctl$FS_IOC_FIEMAP(r5, 0xc020660b, &(0x7f0000000a80)=ANY=[]) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRESHEX=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000500)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r7, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r7, 0x7, &(0x7f0000000380)={0x1, 0x1, 0x7, 0x90}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'team0\x00', 0x100}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x400000, 0x0, 0x5, 0x3f, 0x2d, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x400000, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x6, 0xbab, 0x0, 0x272, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000003, 0x5e, 0xfffffffc, 0x8, 0x3, 0x0, 0x400000, 0x6, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x404, 0x0, 0x0, 0xd79, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xc, 0x0, 0x800, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0xe95]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) pwritev(r9, 0x0, 0x0, 0x9, 0x3) timerfd_gettime(r9, &(0x7f0000000040)) epoll_create1(0x80000) 2m28.45744697s ago: executing program 5 (id=277): r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x7}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4, 0x0, 0x1}, 0x20) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) write$cgroup_int(r2, &(0x7f0000000740)=0x7, 0x12) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)=r5}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r5}, 0x18) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) ftruncate(r6, 0x6000000) copy_file_range(r6, 0x0, r6, &(0x7f00000004c0)=0x102, 0x9, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x18) semtimedop(0x0, &(0x7f0000000180)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) futex(0x0, 0x8a, 0x0, 0x0, 0x0, 0x4) 2m28.287152137s ago: executing program 5 (id=279): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/4153], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0xa, [@int={0x6, 0x0, 0x0, 0x1, 0x0, 0x54, 0x0, 0x3, 0x2}, @enum64={0x1, 0x3, 0x0, 0x13, 0x0, 0x8, [{0xc, 0xe, 0x1}, {0x8, 0x8, 0xc}, {0xb, 0xffff8000, 0x7df}]}, @enum={0x2, 0x7, 0x0, 0x6, 0x4, [{0x8, 0x3}, {0x5, 0x8}, {0xd, 0x5}, {0x10, 0x4}, {0x3, 0x4}, {0x6, 0x8932}, {0xe, 0x8}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x401}}, @union={0xe, 0x6, 0x0, 0x5, 0x0, 0x2, [{0x3, 0x4, 0x921e}, {0xb, 0x2, 0x5}, {0x1, 0x5, 0x6}, {0x7, 0x4, 0x9}, {0xd, 0x0, 0x3ff}, {0xb, 0x2, 0x9}]}]}, {0x0, [0x0, 0x0, 0x30, 0x61, 0x5f, 0x2e, 0x41, 0x4f]}}, &(0x7f0000000140)=""/119, 0x112, 0x77, 0x1, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x10, 0x7, 0x1, 0x7, 0x24008, 0xffffffffffffffff, 0x1000, '\x00', 0x0, r0, 0x0, 0x2, 0x2}, 0x50) 2m26.87312063s ago: executing program 5 (id=292): socket(0x28, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x1b, "c90900917d1ee422a7127949dc4c323333badf70d1d2cde6767566"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe64, 0xff, @empty, 0x8e1726d}, 0x1c) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe64, 0x5, @empty, 0x82}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB="0000000000000000b7050000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000018c0), 0x0, 0x0, 0x3) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2m26.839659792s ago: executing program 34 (id=292): socket(0x28, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x1b, "c90900917d1ee422a7127949dc4c323333badf70d1d2cde6767566"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe64, 0xff, @empty, 0x8e1726d}, 0x1c) r4 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe64, 0x5, @empty, 0x82}, 0x1c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) connect$unix(r4, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e) r6 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB="0000000000000000b7050000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000018c0), 0x0, 0x0, 0x3) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 5.252806317s ago: executing program 0 (id=2259): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r3) r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000100)={0x0, 0x5353, 0x800, 0x0, 0x2a4}, &(0x7f0000ffe000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) socket$inet(0x2, 0x4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r7}, 0x70) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @private0}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mount(0x0, 0x0, 0x0, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298ea"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x200014e}) 4.788878718s ago: executing program 0 (id=2265): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181082, 0x0) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b140, 0x0, 0x6, 0x3a2}) r2 = socket$rxrpc(0x21, 0x2, 0xa) write$selinux_load(r1, 0x0, 0x0) bind$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) listen(r2, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 4.751627909s ago: executing program 0 (id=2267): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") creat(&(0x7f00000000c0)='./bus\x00', 0x182) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ppoll(&(0x7f0000000740)=[{r4, 0x104}], 0x1, 0x0, 0x0, 0x0) pread64(r4, &(0x7f0000000480), 0x1, 0x2) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000080)={0x21800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r5, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) ioctl$int_in(r2, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r2, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x80642, 0x150) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fstatfs(0xffffffffffffffff, &(0x7f00000001c0)=""/166) 2.949709619s ago: executing program 2 (id=2305): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r1, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x700, 0x7800, 0x7, 0xa, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x64, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@timestamp_addr={0x44, 0x4, 0x39, 0x1, 0x8}]}}}}}) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010029bd7000000000001b0000000c00018008000100", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x0, 0x5a, 0x0, 0x4, 0x8}, 0x28) sendmsg$can_bcm(r7, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x47, 0x2, 0x40, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7860, 0x7f, 0x80000001}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000980)={0xe8, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r9, 0x0, 0x2}, 0x18) 2.752576518s ago: executing program 2 (id=2308): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) 2.739463728s ago: executing program 2 (id=2309): socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x100000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x2c020400) 1.728985773s ago: executing program 0 (id=2318): sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, 0x0, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0xffffffff}, 0x0, 0x0) 902.94071ms ago: executing program 3 (id=2331): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000700000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msync(&(0x7f0000ca6000/0x1000)=nil, 0x1000, 0x0) 865.837442ms ago: executing program 7 (id=2332): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, 0x0, 0x177) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c12"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) set_mempolicy(0x2, 0x0, 0x2c2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './mnt\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d0, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xc}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1d}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x26}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x39}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x24, 0x24, 0x18]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x258d, 0x0, 0xffff, 0x8, 0x10, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x2, 0x526, 0xc64b, 0x8001, 0x5, 0x9]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x24, 0x30, 0x6, 0x2, 0x3, 0x60, 0x16, 0x60, 0xc, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb075, 0x35bb, 0x4, 0x3282, 0x10, 0x2, 0xa90]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x4, 0x6, 0xff, 0x1, 0x2, 0x7, 0x4]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x3}, {0x7, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x6, 0x40, 0x5, 0xa31c, 0x180]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x0, 0xd4, 0x1, 0x3ff, 0x8, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x3, 0x5, 0x1b, 0x36, 0x36, 0x18, 0xc, 0xb, 0x1, 0x48, 0xb, 0x36, 0x9, 0x16, 0x60, 0x5, 0x6c]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x0, 0xb, 0x3, 0xb, 0x2434, 0x8]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x16, 0x30, 0x1, 0x0, 0x60, 0x60, 0x24, 0x1b, 0x36, 0x24, 0x36, 0x30, 0x60, 0x1, 0x16, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x4, 0x3, 0x7, 0xfffe, 0x3, 0x5]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x9, 0x478, 0x10, 0x9, 0xd, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x5, 0x0, 0x1, 0x2, 0x1, 0x5]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './mnt\x00'}) 865.403352ms ago: executing program 3 (id=2333): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000940)=""/4096, 0x1000) 836.701803ms ago: executing program 0 (id=2334): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r3) r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000100)={0x0, 0x5353, 0x800, 0x0, 0x2a4}, &(0x7f0000ffe000), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe) io_uring_register$IORING_UNREGISTER_FILES(r4, 0x3, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) socket$inet(0x2, 0x4, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r1, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r7}, 0x70) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}, 0x104101, 0x4, 0x0, 0x3, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r8, 0xc008240a, &(0x7f0000000040)={0x1, 0x0, [0x0]}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x401, 0x2000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @private0}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mount(0x0, 0x0, 0x0, 0x5, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298ea"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r10 = syz_open_dev$usbfs(&(0x7f0000000480), 0x73, 0x188341) ioctl$USBDEVFS_IOCTL(r10, 0xc0105512, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) io_uring_setup(0x330b, &(0x7f0000000640)={0x0, 0xffffffee, 0x1, 0x103fc, 0x200014e}) 814.370694ms ago: executing program 3 (id=2335): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x3f00000000000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRESDEC=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000740)=[{&(0x7f00000009c0)=""/238, 0xee}, {&(0x7f0000000340)}, {&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/241, 0xf1}, {&(0x7f0000003dc0)=""/4096, 0x1000}], 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x5d031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x4d, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8ab859c3d9fe9a2f9edb8e36339e135d", {"1f142a168a75d33e838bef40d2fcff6c", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) 806.367004ms ago: executing program 7 (id=2336): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'batadv_slave_1\x00', {}, {}, 0x2b, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6_vti0\x00', {0x0, 0x0, 0x5, 0x0, 0x162a0916, 0x7, 0x3ff, 0x88}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723ae6ffffffffffffff3a73302030"], 0x56) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x17, 0x7ffc1ffd}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000900)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x64, 0x34, 0x30, 0x36, 0x64, 0x32, 0x61], 0x2d, [0x65, 0x64, 0x37, 0x34], 0x2d, [0x34, 0x34, 0x62, 0xd], 0x2d, [0x31, 0x63, 0x33, 0x66], 0x2d, [0x35, 0x62, 0x32, 0x66, 0x35, 0x32, 0x1, 0x66]}}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r7}}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000000e22d062d70c2e7dbb68acc3f6660d5812aa2b3f5fa830deab246a7696f8b4cf7627b88e909a8873f45e229f71a5d3739a7d4c35740f8167138d70cbd84241bd2cb56a74f78547d2ccc1fbdee86bedd3d2745d4e9891a785bcb7996dbfec5c8cc27f65f31cfc86ba", @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 778.813045ms ago: executing program 3 (id=2337): socket(0xa, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x502, &(0x7f0000000600)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@remote}, {@in6=@remote, 0x4d3, 0x32}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @algo_auth_trunc={0x5d, 0x14, {{'cmac(aes)\x00'}, 0x88, 0x0, "e80c857b65087dea03da4c290569c738c3"}}]}, 0x198}}, 0x0) 650.115851ms ago: executing program 7 (id=2338): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181082, 0x0) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b140, 0x0, 0x6, 0x3a2}) r2 = socket$rxrpc(0x21, 0x2, 0xa) recvmmsg(r2, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 639.733541ms ago: executing program 3 (id=2339): socket(0xa, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x502, &(0x7f0000000600)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 579.423204ms ago: executing program 7 (id=2340): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r1, 0x301, 0x70bd26, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'gretap0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x700, 0x7800, 0x7, 0xa, {{0x6, 0x4, 0x1, 0x9, 0x18, 0x64, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, {[@timestamp_addr={0x44, 0x4, 0x39, 0x1, 0x8}]}}}}}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010029bd7000000000001b0000000c00018008000100", @ANYRES32, @ANYBLOB], 0x20}}, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x0, 0x5a, 0x0, 0x4, 0x8}, 0x28) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x47, 0x2, 0x40, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x7860, 0x7f, 0x80000001}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000800)={&(0x7f0000000980)={0xe8, r1, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24000000}, 0x24000000) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r8, 0x0, 0x2}, 0x18) 457.49988ms ago: executing program 0 (id=2341): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000008cf3db4cbbac5c060000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000000d000000110000002057e268ff6a14e1c5b8ed8f763c055d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r0, &(0x7f0000000b40)=[{&(0x7f0000001200)=""/4088, 0xff8}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f0000000240)=""/265, 0x109}, {&(0x7f0000000880)=""/126, 0x7e}, {0x0}, {&(0x7f0000000a00)=""/202, 0xca}], 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r3, 0x10c000) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0xe0, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4008550d, &(0x7f0000000080)) 423.040961ms ago: executing program 3 (id=2343): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='sched_switch\x00', r9}, 0xe) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 322.282126ms ago: executing program 6 (id=2344): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd70010000000003000000580001"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 237.212219ms ago: executing program 6 (id=2345): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'batadv_slave_1\x00', {}, {}, 0x2b, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6_vti0\x00', {0x0, 0x0, 0x5, 0x0, 0x162a0916, 0x7, 0x3ff, 0x88}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723ae6ffffffffffffff3a73302030"], 0x56) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x17, 0x7ffc1ffd}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000900)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x64, 0x34, 0x30, 0x36, 0x64, 0x32, 0x61], 0x2d, [0x65, 0x64, 0x37, 0x34], 0x2d, [0x34, 0x34, 0x62, 0xd], 0x2d, [0x31, 0x63, 0x33, 0x66], 0x2d, [0x35, 0x62, 0x32, 0x66, 0x35, 0x32, 0x1, 0x66]}}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r7}}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000000e22d062d70c2e7dbb68acc3f6660d5812aa2b3f5fa830deab246a7696f8b4cf7627b88e909a8873f45e229f71a5d3739a7d4c35740f8167138d70cbd84241bd2cb56a74f78547d2ccc1fbdee86bedd3d2745d4e9891a785bcb7996dbfec5c8cc27f65f31cfc86ba", @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 164.641132ms ago: executing program 6 (id=2346): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000940)=""/4096, 0x1000) 149.719673ms ago: executing program 6 (id=2347): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [0xff, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 'veth0_macvtap\x00', 'batadv_slave_1\x00', {}, {}, 0x2b, 0x40}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0xbe75}}}, {{@uncond, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6_vti0\x00', {0x0, 0x0, 0x5, 0x0, 0x162a0916, 0x7, 0x3ff, 0x88}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x2, 0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723ae6ffffffffffffff3a73302030"], 0x56) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x17, 0x7ffc1ffd}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000900)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x64, 0x34, 0x30, 0x36, 0x64, 0x32, 0x61], 0x2d, [0x65, 0x64, 0x37, 0x34], 0x2d, [0x34, 0x34, 0x62, 0xd], 0x2d, [0x31, 0x63, 0x33, 0x66], 0x2d, [0x35, 0x62, 0x32, 0x66, 0x35, 0x32, 0x1, 0x66]}}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x2}}, 0xfe5e) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r7}}, 0x20) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000000e22d062d70c2e7dbb68acc3f6660d5812aa2b3f5fa830deab246a7696f8b4cf7627b88e909a8873f45e229f71a5d3739a7d4c35740f8167138d70cbd84241bd2cb56a74f78547d2ccc1fbdee86bedd3d2745d4e9891a785bcb7996dbfec5c8cc27f65f31cfc86ba", @ANYRES16=r9, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 147.595793ms ago: executing program 2 (id=2348): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msync(&(0x7f0000ca6000/0x1000)=nil, 0x1000, 0x0) 59.492757ms ago: executing program 2 (id=2349): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, 0x0, 0x177) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c12"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) set_mempolicy(0x2, 0x0, 0x2c2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './mnt\x00'}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1d0, r4, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x51}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xc}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1d}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x26}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x39}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_TX_RATES={0x174, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xb, 0x24, 0x24, 0x18]}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x258d, 0x0, 0xffff, 0x8, 0x10, 0x2, 0x2, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x2, 0x526, 0xc64b, 0x8001, 0x5, 0x9]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x24, 0x30, 0x6, 0x2, 0x3, 0x60, 0x16, 0x60, 0xc, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xb075, 0x35bb, 0x4, 0x3282, 0x10, 0x2, 0xa90]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x4, 0x6, 0xff, 0x1, 0x2, 0x7, 0x4]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x6, 0x3}, {0x7, 0x6}, {0x0, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x6, 0x40, 0x5, 0xa31c, 0x180]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x0, 0xd4, 0x1, 0x3ff, 0x8, 0x9, 0x6]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x16, 0x3, 0x5, 0x1b, 0x36, 0x36, 0x18, 0xc, 0xb, 0x1, 0x48, 0xb, 0x36, 0x9, 0x16, 0x60, 0x5, 0x2]}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8, 0x0, 0xb, 0x3, 0xb, 0x2434, 0x8]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x16, 0x30, 0x1, 0x0, 0x60, 0x60, 0x24, 0x1b, 0x36, 0x24, 0x36, 0x30, 0x60, 0x1, 0x16, 0x0]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x3, 0x4, 0x3, 0x7, 0xfffe, 0x3, 0x5]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x9, 0x478, 0x10, 0x9, 0xd, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x5, 0x0, 0x1, 0x2, 0x1, 0x5]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20000800}, 0x8080) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './mnt\x00'}) 50.132018ms ago: executing program 6 (id=2350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x181082, 0x0) io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x60b140, 0x0, 0x6, 0x3a2}) recvmmsg(0xffffffffffffffff, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) 44.649548ms ago: executing program 7 (id=2351): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0xfffffffffffffd15}}}}}, 0x0) 17.626079ms ago: executing program 2 (id=2352): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$eJzs3c9vHFcdAPDvjL22k7h1WnoABG1oCwFFWcebNqp6gHJCCFVC9AhSauyNFWXXa3nXpTaRcM9ckajECY78AZx74s4FwY1LOSDxwwLVSBwGzezY2di7tpPYXmv385FG+9688XzfizPvzbxd7wtgbF2LiO2ImIqI9yNirtyflFu8093y4z7bebi0u/NwKYkse++fSVGe74uen8ldKc85ExE/+E7Ej5PDcdubWw8WG436epmf7zTX5tubWzfvNxdX6iv11VrtzsKdW2/dfrP2BK2ZObL0leZUmfryp3/Y/sZP82rNlnt623Gauk2v7MfJTUbE984i2BBMlO2ZGnZFeCppRLwYEa8W1/9cTBS/TQBglGXZXGRzvXkAYNSlxRxYklbLuYDZSNNqtTuH91JcThutdufGvdbG6nJ3ruxqVNJ79xv1W+Vc4dWoJHl+oUg/ytcO5G9HxAsR8YvpS0W+utRqLA/zxgcAxtiVA+P/f6a74z8AMOKO/tgMADCKjP8AMH6M/wAwfoz/ADB+uuP/pSf9sSzLfnYW1QEAzoHnfwAYP8Z/ABgr33/33XzLdsvvv17+YHPjQeuDm8v19oNqc2OputRaX6uutForxXf2NI87X6PVWlt4IzY+vPrNtXZnvr25dbfZ2ljt3C2+1/tuvVIctX0OLQMABnnhlU/+nOQj8tuXii161nKoDLVmwFlLh10BYGgmhl0BYGi6q331WaAPGHmPnvGf+EMApgdgRBx3BzDT7w+EsizLzq5KwBm7/gXz/zCuyvn/SZ8ChvFz3Px/sTawNwlhJE0OuwLA0GRZctI1/+OkBwIAF9sRc/xXz/M+BBieAe//v1i+/rZ8c+BHyweP+PgsawUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX2976v9Vymd/ZSNNqNeK5YgGgSnLvfqN+KyKej4g/TVem8/zCkOsMADyr9G9Juf7X9bnXZx8revnKfnIqIn7yq/d++eFip7P+x4ip5F/Te/s7H5f7a8cGmzmLFgAAR9sbp4vXngf5z3YeLu1t51mfv3+7e1eQx93dmYrd/fiTMVm8zkQlIi7/OynzXUnP3MWz2P4oIj7fr/1JzBZzIN1bloPx89jPnVL8iRPFTx+Ln5YLNKflv8XnTqEuMG4+yfufd/pdf2lcK177X/8zRQ/17Mr+Lz/V0m7RBz6Kv9f/TQzo/66dNMYbv/9uN3XpcNlHEV+cjNiLvdvT/+zFTwbEf/2E8f/ypZdfHVSW/TrievSP3xtrvtNcm29vbt2831xcqa/UV2u1Owt3br11+83afDFHPT94NPjH2zeeH1SWt//ygPgzx7T/q4NOeuAp9zf/e/+HXzki/tdf6xc/jZeOiJ+PiV8b2OLHLV7+3cDn7jz+8uH2Jyf5/d84YfxP/7p1aNlwAGB42ptbDxYbjfq6hMTFT+T/ZS9ANfomvnVesaaif9HPX+te0weKsuypYg3qMU5j1g24CPYv+oj477ArAwAAAAAAAAAAAAAA9HUef7E07DYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwuv4fAAD//9VG0+g=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1e}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000060000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001f0800014000e7ff0d0900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b0000000000701080000000000000000000000010c00034000000000000000080900010073797a30000000001c0007800800024000000002080001400000000739baf8cd229d2a4cfd707bd16908000240000000040900010073797a31000000000c0003400000000000000006040007800c0003400000000000000e223400078008000140fffffff3080001400000040008000240000000030800024000000005080001400000000108000140000000060900010073797a3000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x8458}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x700}, @generic={0x0, 0x7, "d588380003"}]}}}}}}, 0x4a) 1.20003ms ago: executing program 7 (id=2353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 0s ago: executing program 6 (id=2354): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, &(0x7f0000000040), 0x1) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r3, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000c40)=ANY=[@ANYBLOB="1401000027000100000000000000000001"], 0x114}], 0x1}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000080)=[0x1b7b, 0x2], 0x2) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r6, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): oot:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 152.274175][ T8580] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 152.309561][ T8580] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.326150][ T8580] EXT4-fs (loop2): mount failed [ 152.377150][ T8597] loop0: detected capacity change from 0 to 256 [ 152.385381][ T8586] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 152.392047][ T8586] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 152.399692][ T8586] vhci_hcd vhci_hcd.0: Device attached [ 152.420059][ T8586] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1600'. [ 152.432313][ T8594] loop6: detected capacity change from 0 to 512 [ 152.432961][ T8586] xt_TPROXY: Can be used only with -p tcp or -p udp [ 152.450381][ T8594] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.1597: ea_inode with extended attributes [ 152.452295][ T8602] vhci_hcd: connection closed [ 152.463909][ T3582] vhci_hcd: stop threads [ 152.472899][ T3582] vhci_hcd: release socket [ 152.477330][ T3582] vhci_hcd: disconnect device [ 152.477794][ T8594] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1597: error while reading EA inode 11 err=-117 [ 152.505882][ T8608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1602'. [ 152.509839][ T8594] EXT4-fs (loop6): 1 orphan inode deleted [ 152.518746][ T8608] batadv1: entered promiscuous mode [ 152.525648][ T8608] batadv1: entered allmulticast mode [ 152.598885][ T8604] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 152.637909][ T8625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1610'. [ 153.007065][ T8637] FAULT_INJECTION: forcing a failure. [ 153.007065][ T8637] name failslab, interval 1, probability 0, space 0, times 0 [ 153.019833][ T8637] CPU: 0 UID: 0 PID: 8637 Comm: syz.7.1615 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.019938][ T8637] Tainted: [W]=WARN [ 153.019944][ T8637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.019957][ T8637] Call Trace: [ 153.019963][ T8637] [ 153.019971][ T8637] __dump_stack+0x1d/0x30 [ 153.019992][ T8637] dump_stack_lvl+0xe8/0x140 [ 153.020078][ T8637] dump_stack+0x15/0x1b [ 153.020094][ T8637] should_fail_ex+0x265/0x280 [ 153.020121][ T8637] should_failslab+0x8c/0xb0 [ 153.020204][ T8637] kmem_cache_alloc_noprof+0x50/0x480 [ 153.020236][ T8637] ? pidfs_xattr_set+0xa2/0x150 [ 153.020257][ T8637] pidfs_xattr_set+0xa2/0x150 [ 153.020319][ T8637] ? __pfx_pidfs_xattr_set+0x10/0x10 [ 153.020344][ T8637] __vfs_setxattr+0x2e6/0x310 [ 153.020380][ T8637] __vfs_setxattr_noperm+0xe8/0x410 [ 153.020407][ T8637] __vfs_setxattr_locked+0x1af/0x1d0 [ 153.020431][ T8637] vfs_setxattr+0x132/0x270 [ 153.020460][ T8637] file_setxattr+0x139/0x1b0 [ 153.020498][ T8637] path_setxattrat+0x290/0x310 [ 153.020533][ T8637] __x64_sys_fsetxattr+0x6b/0x80 [ 153.020560][ T8637] x64_sys_call+0x1ced/0x3000 [ 153.020648][ T8637] do_syscall_64+0xd2/0x200 [ 153.020667][ T8637] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.020692][ T8637] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 153.020723][ T8637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.020803][ T8637] RIP: 0033:0x7fbdd53cf749 [ 153.020818][ T8637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.020883][ T8637] RSP: 002b:00007fbdd3e2f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 153.020902][ T8637] RAX: ffffffffffffffda RBX: 00007fbdd5625fa0 RCX: 00007fbdd53cf749 [ 153.020916][ T8637] RDX: 0000000000000000 RSI: 00002000000018c0 RDI: 0000000000000004 [ 153.020967][ T8637] RBP: 00007fbdd3e2f090 R08: 0000000000000003 R09: 0000000000000000 [ 153.020978][ T8637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.020989][ T8637] R13: 00007fbdd5626038 R14: 00007fbdd5625fa0 R15: 00007ffc6df3c148 [ 153.021005][ T8637] [ 153.502894][ T8653] random: crng reseeded on system resumption [ 153.550411][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.588541][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.675365][ T8659] loop6: detected capacity change from 0 to 2048 [ 153.720355][ T8661] loop0: detected capacity change from 0 to 1024 [ 153.737637][ T8661] ext4: Unknown parameter 'fsuuid' [ 153.834588][ T8667] warn_alloc: 1 callbacks suppressed [ 153.834602][ T8667] syz.0.1627: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 153.854435][ T8667] CPU: 0 UID: 0 PID: 8667 Comm: syz.0.1627 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 153.854471][ T8667] Tainted: [W]=WARN [ 153.854541][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 153.854552][ T8667] Call Trace: [ 153.854558][ T8667] [ 153.854566][ T8667] __dump_stack+0x1d/0x30 [ 153.854610][ T8667] dump_stack_lvl+0xe8/0x140 [ 153.854628][ T8667] dump_stack+0x15/0x1b [ 153.854644][ T8667] warn_alloc+0x12b/0x1a0 [ 153.854750][ T8667] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 153.854822][ T8667] __vmalloc_node_range_noprof+0x9d/0xed0 [ 153.854903][ T8667] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 153.854937][ T8667] ? slow_avc_audit+0x104/0x140 [ 153.854991][ T8667] ? should_fail_ex+0x30/0x280 [ 153.855058][ T8667] ? xskq_create+0x36/0xe0 [ 153.855081][ T8667] vmalloc_user_noprof+0x7d/0xb0 [ 153.855264][ T8667] ? xskq_create+0x80/0xe0 [ 153.855286][ T8667] xskq_create+0x80/0xe0 [ 153.855366][ T8667] xsk_init_queue+0x95/0xf0 [ 153.855388][ T8667] xsk_setsockopt+0x3f5/0x640 [ 153.855467][ T8667] ? __pfx_xsk_setsockopt+0x10/0x10 [ 153.855487][ T8667] __sys_setsockopt+0x184/0x200 [ 153.855521][ T8667] __x64_sys_setsockopt+0x64/0x80 [ 153.855553][ T8667] x64_sys_call+0x20ec/0x3000 [ 153.855648][ T8667] do_syscall_64+0xd2/0x200 [ 153.855691][ T8667] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.855771][ T8667] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 153.855801][ T8667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.855822][ T8667] RIP: 0033:0x7f8e992df749 [ 153.855835][ T8667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.855851][ T8667] RSP: 002b:00007f8e97d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 153.855948][ T8667] RAX: ffffffffffffffda RBX: 00007f8e99535fa0 RCX: 00007f8e992df749 [ 153.855960][ T8667] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 153.855973][ T8667] RBP: 00007f8e97d47090 R08: 0000000000000004 R09: 0000000000000000 [ 153.855987][ T8667] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.856010][ T8667] R13: 00007f8e99536038 R14: 00007f8e99535fa0 R15: 00007ffef71a3b58 [ 153.856030][ T8667] [ 153.856038][ T8667] Mem-Info: [ 154.076610][ T8632] loop2: detected capacity change from 0 to 512 [ 154.076809][ T8667] active_anon:7647 inactive_anon:9 isolated_anon:0 [ 154.076809][ T8667] active_file:29928 inactive_file:2407 isolated_file:0 [ 154.076809][ T8667] unevictable:44 dirty:818 writeback:0 [ 154.076809][ T8667] slab_reclaimable:3538 slab_unreclaimable:17283 [ 154.076809][ T8667] mapped:30241 shmem:638 pagetables:1117 [ 154.076809][ T8667] sec_pagetables:0 bounce:0 [ 154.076809][ T8667] kernel_misc_reclaimable:0 [ 154.076809][ T8667] free:1869235 free_pcp:13835 free_cma:0 [ 154.076865][ T8667] Node 0 active_anon:30588kB inactive_anon:36kB active_file:119712kB inactive_file:9628kB unevictable:176kB isolated(anon):0kB isolated(file):0kB mapped:120964kB dirty:3272kB writeback:0kB shmem:2552kB kernel_stack:4416kB pagetables:4468kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 154.101260][ T8632] ext4 filesystem being mounted at /321/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.131285][ T8667] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 154.131401][ T8667] lowmem_reserve[]: 0 2881 7859 7859 [ 154.204196][ T8667] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 154.235915][ T8667] lowmem_reserve[]: 0 0 4978 4978 [ 154.241007][ T8667] Node 0 Normal free:4514852kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36968kB inactive_anon:36kB active_file:119712kB inactive_file:9628kB unevictable:60kB writepending:3272kB zspages:0kB present:5242880kB managed:5098240kB mlocked:88kB bounce:0kB free_pcp:45072kB local_pcp:2416kB free_cma:0kB [ 154.274355][ T8667] lowmem_reserve[]: 0 0 0 0 [ 154.278896][ T8667] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 154.291634][ T8667] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 154.307786][ T8667] Node 0 Normal: 10*4kB (E) 180*8kB (ME) 429*16kB (UME) 388*32kB (UME) 178*64kB (UME) 124*128kB (UME) 106*256kB (UME) 40*512kB (UME) 60*1024kB (UM) 38*2048kB (UM) 1043*4096kB (UME) = 4507032kB [ 154.326881][ T8667] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 154.336196][ T8667] 36717 total pagecache pages [ 154.340992][ T8667] 3 pages in swap cache [ 154.345134][ T8667] Free swap = 124984kB [ 154.349341][ T8667] Total swap = 124996kB [ 154.353479][ T8667] 2097051 pages RAM [ 154.357272][ T8667] 0 pages HighMem/MovableOnly [ 154.361987][ T8667] 81087 pages reserved [ 154.404010][ T8671] netlink: 'syz.7.1628': attribute type 5 has an invalid length. [ 154.435733][ T8683] loop2: detected capacity change from 0 to 1024 [ 154.456014][ T8683] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.481967][ T8693] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1635'. [ 154.491424][ T8693] unsupported nlmsg_type 40 [ 154.505001][ T8691] loop6: detected capacity change from 0 to 1024 [ 154.517285][ T8693] syz_tun: entered allmulticast mode [ 154.523229][ T8683] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.1631: lblock 0 mapped to illegal pblock 0 (length 6) [ 154.531091][ T8693] dvmrp8: entered allmulticast mode [ 154.546109][ T8695] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1636'. [ 154.556492][ T8683] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 154.559088][ T8692] syz_tun: left allmulticast mode [ 154.568793][ T8683] EXT4-fs (loop2): This should not happen!! Data will be lost [ 154.568793][ T8683] [ 154.592048][ T8695] loop7: detected capacity change from 0 to 512 [ 154.610599][ T8695] ext4: Bad value for 'max_batch_time' [ 154.628540][ T8683] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 7: comm syz.2.1631: lblock 7 mapped to illegal pblock 7 (length 9) [ 154.654154][ T8683] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 9 with error 117 [ 154.666578][ T8683] EXT4-fs (loop2): This should not happen!! Data will be lost [ 154.666578][ T8683] [ 154.708868][ T3572] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 112: padding at end of block bitmap is not set [ 154.735125][ T8709] loop3: detected capacity change from 0 to 256 [ 154.756591][ T3572] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 1 with error 117 [ 154.769085][ T3572] EXT4-fs (loop2): This should not happen!! Data will be lost [ 154.769085][ T3572] [ 155.122181][ T8736] FAULT_INJECTION: forcing a failure. [ 155.122181][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 155.134865][ T8736] CPU: 0 UID: 0 PID: 8736 Comm: syz.7.1649 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 155.134904][ T8736] Tainted: [W]=WARN [ 155.134911][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 155.134924][ T8736] Call Trace: [ 155.134930][ T8736] [ 155.134937][ T8736] __dump_stack+0x1d/0x30 [ 155.134957][ T8736] dump_stack_lvl+0xe8/0x140 [ 155.134978][ T8736] dump_stack+0x15/0x1b [ 155.134996][ T8736] should_fail_ex+0x265/0x280 [ 155.135027][ T8736] should_failslab+0x8c/0xb0 [ 155.135053][ T8736] kmem_cache_alloc_noprof+0x50/0x480 [ 155.135083][ T8736] ? mas_alloc_nodes+0x1a2/0x210 [ 155.135105][ T8736] mas_alloc_nodes+0x1a2/0x210 [ 155.135122][ T8736] mas_preallocate+0x2ca/0x510 [ 155.135142][ T8736] __split_vma+0x240/0x650 [ 155.135166][ T8736] ? mntput+0x4b/0x80 [ 155.135184][ T8736] ? terminate_walk+0x27f/0x2a0 [ 155.135215][ T8736] vms_gather_munmap_vmas+0x17a/0x7b0 [ 155.135240][ T8736] ? _parse_integer_limit+0x170/0x190 [ 155.135271][ T8736] do_vmi_align_munmap+0x1ac/0x3d0 [ 155.135301][ T8736] do_vmi_munmap+0x1db/0x220 [ 155.135324][ T8736] __vm_munmap+0x193/0x270 [ 155.135352][ T8736] __x64_sys_munmap+0x36/0x50 [ 155.135370][ T8736] x64_sys_call+0x9c0/0x3000 [ 155.135389][ T8736] do_syscall_64+0xd2/0x200 [ 155.135408][ T8736] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 155.135436][ T8736] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 155.135468][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.135490][ T8736] RIP: 0033:0x7fbdd53cf749 [ 155.135504][ T8736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.135519][ T8736] RSP: 002b:00007fbdd3e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 155.135537][ T8736] RAX: ffffffffffffffda RBX: 00007fbdd5625fa0 RCX: 00007fbdd53cf749 [ 155.135551][ T8736] RDX: 0000000000000000 RSI: 0000000000e06500 RDI: 0000200000470000 [ 155.135564][ T8736] RBP: 00007fbdd3e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 155.135577][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.135590][ T8736] R13: 00007fbdd5626038 R14: 00007fbdd5625fa0 R15: 00007ffc6df3c148 [ 155.135609][ T8736] [ 155.448731][ T8739] loop6: detected capacity change from 0 to 512 [ 155.464432][ T8739] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.1650: ea_inode with extended attributes [ 155.480224][ T8744] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 155.480637][ T8739] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1650: error while reading EA inode 11 err=-117 [ 155.487605][ T8744] vhci_hcd: invalid port number 96 [ 155.504898][ T8744] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 155.531343][ T8739] EXT4-fs (loop6): 1 orphan inode deleted [ 155.619709][ T8743] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 155.853846][ T8749] __nla_validate_parse: 1 callbacks suppressed [ 155.853860][ T8749] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1653'. [ 155.964153][ T8761] loop0: detected capacity change from 0 to 512 [ 155.974289][ T8758] loop2: detected capacity change from 0 to 512 [ 155.982974][ T8761] ext4 filesystem being mounted at /345/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.994604][ T8761] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1657: corrupted xattr block 33: bad e_name length [ 156.002273][ T8758] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1656: ea_inode with extended attributes [ 156.008488][ T8761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 156.021048][ T8758] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1656: error while reading EA inode 11 err=-117 [ 156.032028][ T8761] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1657: corrupted xattr block 33: bad e_name length [ 156.042370][ T8758] EXT4-fs (loop2): 1 orphan inode deleted [ 156.055981][ T8761] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 156.070663][ T8761] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.1657: corrupted inode contents [ 156.082570][ T8761] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #4: comm syz.0.1657: mark_inode_dirty error [ 156.094141][ T8761] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.1657: corrupted inode contents [ 156.106145][ T8761] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.1657: mark_inode_dirty error [ 156.117537][ T8761] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1657: Failed to acquire dquot type 1 [ 156.133342][ T8762] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 156.151270][ T8767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1658'. [ 156.163589][ T8767] batadv1: entered promiscuous mode [ 156.168834][ T8767] batadv1: entered allmulticast mode [ 156.263490][ T8772] loop7: detected capacity change from 0 to 1024 [ 156.281351][ T8776] loop6: detected capacity change from 0 to 256 [ 156.288295][ T8772] ext4: Unknown parameter 'fsuuid' [ 156.337334][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1663'. [ 156.348074][ T8781] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1663'. [ 156.378201][ T8784] FAULT_INJECTION: forcing a failure. [ 156.378201][ T8784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.391366][ T8784] CPU: 1 UID: 0 PID: 8784 Comm: syz.7.1664 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 156.391402][ T8784] Tainted: [W]=WARN [ 156.391408][ T8784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 156.391419][ T8784] Call Trace: [ 156.391425][ T8784] [ 156.391431][ T8784] __dump_stack+0x1d/0x30 [ 156.391529][ T8784] dump_stack_lvl+0xe8/0x140 [ 156.391552][ T8784] dump_stack+0x15/0x1b [ 156.391571][ T8784] should_fail_ex+0x265/0x280 [ 156.391600][ T8784] should_fail+0xb/0x20 [ 156.391615][ T8784] should_fail_usercopy+0x1a/0x20 [ 156.391763][ T8784] _copy_from_user+0x1c/0xb0 [ 156.391785][ T8784] ___sys_sendmsg+0xc1/0x1d0 [ 156.391811][ T8784] __x64_sys_sendmsg+0xd4/0x160 [ 156.391832][ T8784] x64_sys_call+0x191e/0x3000 [ 156.391935][ T8784] do_syscall_64+0xd2/0x200 [ 156.391954][ T8784] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 156.392052][ T8784] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 156.392081][ T8784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.392130][ T8784] RIP: 0033:0x7fbdd53cf749 [ 156.392146][ T8784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.392165][ T8784] RSP: 002b:00007fbdd3e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.392185][ T8784] RAX: ffffffffffffffda RBX: 00007fbdd5625fa0 RCX: 00007fbdd53cf749 [ 156.392199][ T8784] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 156.392230][ T8784] RBP: 00007fbdd3e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 156.392241][ T8784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.392252][ T8784] R13: 00007fbdd5626038 R14: 00007fbdd5625fa0 R15: 00007ffc6df3c148 [ 156.392268][ T8784] [ 156.612967][ T8775] netlink: 'syz.0.1661': attribute type 5 has an invalid length. [ 156.624567][ T8792] loop7: detected capacity change from 0 to 512 [ 156.631852][ T8792] EXT4-fs: Ignoring removed oldalloc option [ 156.647961][ T8792] EXT4-fs (loop7): 1 truncate cleaned up [ 156.731324][ T8799] loop3: detected capacity change from 0 to 512 [ 156.754129][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1671'. [ 156.774731][ T8806] batadv1: entered promiscuous mode [ 156.775875][ T8799] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1669: ea_inode with extended attributes [ 156.779976][ T8806] batadv1: entered allmulticast mode [ 156.796094][ T8799] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1669: error while reading EA inode 11 err=-117 [ 156.816049][ T8799] EXT4-fs (loop3): 1 orphan inode deleted [ 156.855998][ T8799] EXT4-fs mount: 26 callbacks suppressed [ 156.856014][ T8799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.864699][ T8810] loop2: detected capacity change from 0 to 1024 [ 156.880681][ T8810] ext4: Unknown parameter 'fsuuid' [ 156.963956][ T8802] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 156.997559][ T8812] loop2: detected capacity change from 0 to 512 [ 157.009012][ T8812] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1674: ea_inode with extended attributes [ 157.023384][ T8812] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1674: error while reading EA inode 11 err=-117 [ 157.036282][ T8812] EXT4-fs (loop2): 1 orphan inode deleted [ 157.042643][ T8812] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.055361][ T29] kauditd_printk_skb: 595 callbacks suppressed [ 157.055373][ T29] audit: type=1326 audit(1763956392.439:13113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd161c9df90 code=0x7ffc0000 [ 157.088196][ T29] audit: type=1326 audit(1763956392.439:13114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd161c9df90 code=0x7ffc0000 [ 157.111684][ T29] audit: type=1326 audit(1763956392.439:13115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 157.135241][ T29] audit: type=1326 audit(1763956392.439:13116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 157.158805][ T29] audit: type=1326 audit(1763956392.459:13117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 157.170074][ T8818] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 157.182219][ T29] audit: type=1326 audit(1763956392.459:13118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 157.213020][ T29] audit: type=1326 audit(1763956392.459:13119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 157.236650][ T29] audit: type=1400 audit(1763956392.469:13120): avc: denied { create } for pid=8800 comm="syz.7.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 157.256290][ T29] audit: type=1326 audit(1763956392.469:13121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 157.279787][ T29] audit: type=1326 audit(1763956392.469:13122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8811 comm="syz.2.1674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 157.324299][ T8822] FAULT_INJECTION: forcing a failure. [ 157.324299][ T8822] name failslab, interval 1, probability 0, space 0, times 0 [ 157.337030][ T8822] CPU: 1 UID: 0 PID: 8822 Comm: syz.6.1677 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 157.337101][ T8822] Tainted: [W]=WARN [ 157.337108][ T8822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 157.337121][ T8822] Call Trace: [ 157.337129][ T8822] [ 157.337136][ T8822] __dump_stack+0x1d/0x30 [ 157.337200][ T8822] dump_stack_lvl+0xe8/0x140 [ 157.337244][ T8822] dump_stack+0x15/0x1b [ 157.337260][ T8822] should_fail_ex+0x265/0x280 [ 157.337290][ T8822] should_failslab+0x8c/0xb0 [ 157.337340][ T8822] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 157.337367][ T8822] ? __alloc_skb+0x101/0x320 [ 157.337403][ T8822] __alloc_skb+0x101/0x320 [ 157.337445][ T8822] ? audit_log_start+0x342/0x720 [ 157.337464][ T8822] audit_log_start+0x3a0/0x720 [ 157.337484][ T8822] ? kstrtouint+0x76/0xc0 [ 157.337517][ T8822] audit_seccomp+0x48/0x100 [ 157.337583][ T8822] ? __seccomp_filter+0x82d/0x1250 [ 157.337700][ T8822] __seccomp_filter+0x83e/0x1250 [ 157.337728][ T8822] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 157.337819][ T8822] ? vfs_write+0x7e8/0x960 [ 157.337917][ T8822] ? __rcu_read_unlock+0x4f/0x70 [ 157.337945][ T8822] ? __fget_files+0x184/0x1c0 [ 157.337994][ T8822] __secure_computing+0x82/0x150 [ 157.338023][ T8822] syscall_trace_enter+0xcf/0x1e0 [ 157.338053][ T8822] do_syscall_64+0xac/0x200 [ 157.338109][ T8822] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 157.338139][ T8822] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 157.338271][ T8822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.338294][ T8822] RIP: 0033:0x7f910699f749 [ 157.338310][ T8822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.338377][ T8822] RSP: 002b:00007f9105407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 157.338402][ T8822] RAX: ffffffffffffffda RBX: 00007f9106bf5fa0 RCX: 00007f910699f749 [ 157.338416][ T8822] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.338505][ T8822] RBP: 00007f9105407090 R08: 0000000000000000 R09: 0000000000000000 [ 157.338516][ T8822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.338603][ T8822] R13: 00007f9106bf6038 R14: 00007f9106bf5fa0 R15: 00007ffd5bf511c8 [ 157.338623][ T8822] [ 157.376237][ T8823] netlink: 'syz.6.1677': attribute type 1 has an invalid length. [ 157.570347][ T8823] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1677'. [ 157.591700][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.642062][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.651840][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.769853][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.781361][ T8827] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1679'. [ 157.847791][ T8842] netlink: 96 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 157.883614][ T8834] netlink: 'syz.7.1681': attribute type 5 has an invalid length. [ 157.963804][ T8852] loop0: detected capacity change from 0 to 512 [ 158.002097][ T8852] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.018465][ T8847] loop2: detected capacity change from 0 to 512 [ 158.035007][ T8847] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1686: ea_inode with extended attributes [ 158.059349][ T8852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.082166][ T8852] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.097992][ T8847] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1686: error while reading EA inode 11 err=-117 [ 158.120834][ T8847] EXT4-fs (loop2): 1 orphan inode deleted [ 158.131228][ T8847] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.216358][ T8854] netlink: 'syz.7.1689': attribute type 5 has an invalid length. [ 158.228659][ T8850] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 158.238665][ T8864] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1690'. [ 158.250468][ T8864] syz_tun: entered allmulticast mode [ 158.259605][ T8864] dvmrp8: entered allmulticast mode [ 158.265843][ T8863] syz_tun: left allmulticast mode [ 158.419526][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.420295][ T8872] lo speed is unknown, defaulting to 1000 [ 158.446457][ T8875] loop7: detected capacity change from 0 to 512 [ 158.463420][ T8878] netlink: 96 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 158.486325][ T8872] lo speed is unknown, defaulting to 1000 [ 158.504205][ T8875] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.560399][ T8875] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(10) [ 158.567010][ T8875] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 158.574602][ T8875] vhci_hcd vhci_hcd.0: Device attached [ 158.646583][ T8884] vhci_hcd: connection closed [ 158.646804][ T396] vhci_hcd: stop threads [ 158.655768][ T396] vhci_hcd: release socket [ 158.660282][ T396] vhci_hcd: disconnect device [ 158.738924][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.868257][ T8827] loop6: detected capacity change from 0 to 2048 [ 158.900917][ T8910] loop2: detected capacity change from 0 to 1024 [ 158.909627][ T8910] ext4: Unknown parameter 'fsuuid' [ 158.931622][ T8827] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.974797][ T8916] loop0: detected capacity change from 0 to 256 [ 158.988616][ T8827] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.083006][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.092276][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.137622][ T8930] loop3: detected capacity change from 0 to 512 [ 159.169327][ T8930] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.182002][ T8930] ext4 filesystem being mounted at /337/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.194539][ T8930] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1712: corrupted xattr block 33: bad e_name length [ 159.208448][ T4538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.217542][ T8930] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 159.226673][ T8930] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.1712: corrupted xattr block 33: bad e_name length [ 159.240175][ T8930] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 159.256679][ T8930] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.1712: corrupted inode contents [ 159.256763][ T8930] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #4: comm syz.3.1712: mark_inode_dirty error [ 159.257040][ T8930] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #4: comm syz.3.1712: corrupted inode contents [ 159.291906][ T8930] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #4: comm syz.3.1712: mark_inode_dirty error [ 159.292045][ T8930] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.1712: Failed to acquire dquot type 1 [ 159.339175][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.361857][ T8934] loop7: detected capacity change from 0 to 512 [ 159.370555][ T8934] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1713: ea_inode with extended attributes [ 159.383481][ T8934] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1713: error while reading EA inode 11 err=-117 [ 159.396103][ T8934] EXT4-fs (loop7): 1 orphan inode deleted [ 159.402311][ T8934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.468932][ T8935] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 159.618341][ T8949] netlink: 'syz.3.1719': attribute type 5 has an invalid length. [ 159.737267][ T3747] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:47: bg 0: block 345: padding at end of block bitmap is not set [ 159.751967][ T3747] EXT4-fs (loop6): Remounting filesystem read-only [ 159.797008][ T4471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.117104][ T8980] loop3: detected capacity change from 0 to 128 [ 160.450651][ T4538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.507613][ T8994] loop7: detected capacity change from 0 to 512 [ 160.529244][ T8994] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.543613][ T8994] ext4 filesystem being mounted at /287/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.574132][ T4538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.642713][ T8999] syz_tun: entered allmulticast mode [ 160.666658][ T8999] dvmrp8: entered allmulticast mode [ 160.679708][ T8998] syz_tun: left allmulticast mode [ 160.755155][ T9005] SELinux: Context system_u:object_r:mqueue_spool_t:s0 is not valid (left unmapped). [ 160.777077][ T9014] loop3: detected capacity change from 0 to 512 [ 160.782355][ T9005] wireguard0: entered promiscuous mode [ 160.788800][ T9005] wireguard0: entered allmulticast mode [ 160.801148][ T9009] syz_tun: entered allmulticast mode [ 160.804053][ T9014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.807316][ T9006] syz_tun: left allmulticast mode [ 160.819331][ T9014] ext4 filesystem being mounted at /348/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 160.878651][ T9014] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.1743: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 160.896520][ T9014] EXT4-fs (loop3): Remounting filesystem read-only [ 160.919436][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.990799][ T9018] loop7: detected capacity change from 0 to 512 [ 161.002268][ T9020] loop0: detected capacity change from 0 to 512 [ 161.016802][ T9018] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1744: ea_inode with extended attributes [ 161.030284][ T9020] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1745: ea_inode with extended attributes [ 161.043279][ T9018] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1744: error while reading EA inode 11 err=-117 [ 161.048868][ T9020] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1745: error while reading EA inode 11 err=-117 [ 161.073824][ T9018] EXT4-fs (loop7): 1 orphan inode deleted [ 161.078827][ T9033] __nla_validate_parse: 6 callbacks suppressed [ 161.078841][ T9033] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1749'. [ 161.079811][ T9020] EXT4-fs (loop0): 1 orphan inode deleted [ 161.096565][ T9018] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.101101][ T9020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.118844][ T9036] loop3: detected capacity change from 0 to 512 [ 161.131876][ T9033] syz_tun: entered allmulticast mode [ 161.138239][ T3660] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 161.144388][ T4600] Bluetooth: hci0: command 0x1003 tx timeout [ 161.146607][ T9033] dvmrp8: entered allmulticast mode [ 161.157281][ T9036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.163199][ T9032] syz_tun: left allmulticast mode [ 161.177565][ T9036] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 161.183012][ T9030] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 161.184253][ T9036] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 161.191852][ T9022] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 161.199152][ T9036] vhci_hcd vhci_hcd.0: Device attached [ 161.218726][ T9036] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1750'. [ 161.230101][ T9040] vhci_hcd: connection closed [ 161.230354][ T396] vhci_hcd: stop threads [ 161.239354][ T396] vhci_hcd: release socket [ 161.243803][ T396] vhci_hcd: disconnect device [ 161.297136][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1753'. [ 161.310538][ T9047] batadv1: entered promiscuous mode [ 161.315805][ T9047] batadv1: entered allmulticast mode [ 161.474886][ T9050] loop6: detected capacity change from 0 to 1024 [ 161.481738][ T9050] ext4: Unknown parameter 'fsuuid' [ 161.534375][ T9056] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1756'. [ 161.544446][ T9056] syz_tun: entered allmulticast mode [ 161.550442][ T9055] syz_tun: left allmulticast mode [ 161.595970][ T9062] loop6: detected capacity change from 0 to 256 [ 161.671945][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1759'. [ 161.717306][ T4538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.762656][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.772701][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.826269][ T9083] batadv1: entered promiscuous mode [ 161.831620][ T9083] batadv1: entered allmulticast mode [ 161.939791][ T9087] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1766'. [ 161.977841][ T9087] syz_tun: entered allmulticast mode [ 162.052077][ T9086] syz_tun: left allmulticast mode [ 162.082256][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 162.082326][ T29] audit: type=1326 audit(1763956397.459:13629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e992df749 code=0x7ffc0000 [ 162.135416][ T29] audit: type=1326 audit(1763956397.499:13630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9081 comm="syz.0.1765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e992df749 code=0x7ffc0000 [ 162.188254][ T9091] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1768'. [ 162.200148][ T9091] syz_tun: entered allmulticast mode [ 162.206182][ T9090] syz_tun: left allmulticast mode [ 162.243576][ T3747] Bluetooth: hci0: Frame reassembly failed (-84) [ 162.350140][ T29] audit: type=1400 audit(1763956397.729:13631): avc: denied { map } for pid=9095 comm="syz.0.1770" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 162.351803][ T9100] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 162.381761][ T9100] vhci_hcd: invalid port number 96 [ 162.381850][ T9104] loop3: detected capacity change from 0 to 512 [ 162.386863][ T9100] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 162.411454][ T9104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.426013][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1764'. [ 162.431375][ T9104] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 162.441491][ T9104] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 162.449081][ T9104] vhci_hcd vhci_hcd.0: Device attached [ 162.457864][ T9104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1773'. [ 162.474697][ T29] audit: type=1326 audit(1763956397.849:13632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 162.498925][ T9109] vhci_hcd: connection closed [ 162.499067][ T29] audit: type=1326 audit(1763956397.879:13633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 162.527629][ T29] audit: type=1326 audit(1763956397.879:13634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 162.551163][ T29] audit: type=1326 audit(1763956397.879:13635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 162.551350][ T3572] vhci_hcd: stop threads [ 162.574849][ T29] audit: type=1326 audit(1763956397.879:13636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 162.578871][ T3572] vhci_hcd: release socket [ 162.578880][ T3572] vhci_hcd: disconnect device [ 162.611601][ T29] audit: type=1326 audit(1763956397.879:13637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 162.635090][ T29] audit: type=1326 audit(1763956397.879:13638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9111 comm="syz.6.1774" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 162.684961][ T9117] loop2: detected capacity change from 0 to 512 [ 162.786885][ T9115] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1776'. [ 162.994234][ T9131] loop2: detected capacity change from 0 to 512 [ 163.023072][ T9131] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1780: ea_inode with extended attributes [ 163.036199][ T9131] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1780: error while reading EA inode 11 err=-117 [ 163.048978][ T9131] EXT4-fs (loop2): 1 orphan inode deleted [ 163.055036][ T9131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.120973][ T9132] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 163.131596][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.231666][ T9147] ref_ctr increment failed for inode: 0x787 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888109ffd080 [ 163.388322][ T9153] loop3: detected capacity change from 0 to 256 [ 163.589971][ T9174] loop0: detected capacity change from 0 to 512 [ 163.599255][ T9177] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 163.606687][ T9177] vhci_hcd: invalid port number 96 [ 163.611836][ T9177] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 163.619780][ T9174] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1796: ea_inode with extended attributes [ 163.633170][ T9174] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1796: error while reading EA inode 11 err=-117 [ 163.646945][ T9174] EXT4-fs (loop0): 1 orphan inode deleted [ 163.653124][ T9174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.716892][ T9178] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 163.740828][ T9184] FAULT_INJECTION: forcing a failure. [ 163.740828][ T9184] name failslab, interval 1, probability 0, space 0, times 0 [ 163.753466][ T9184] CPU: 1 UID: 0 PID: 9184 Comm: syz.6.1799 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 163.753545][ T9184] Tainted: [W]=WARN [ 163.753551][ T9184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 163.753562][ T9184] Call Trace: [ 163.753568][ T9184] [ 163.753574][ T9184] __dump_stack+0x1d/0x30 [ 163.753594][ T9184] dump_stack_lvl+0xe8/0x140 [ 163.753614][ T9184] dump_stack+0x15/0x1b [ 163.753672][ T9184] should_fail_ex+0x265/0x280 [ 163.753766][ T9184] should_failslab+0x8c/0xb0 [ 163.753828][ T9184] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 163.753856][ T9184] ? __alloc_skb+0x101/0x320 [ 163.753888][ T9184] __alloc_skb+0x101/0x320 [ 163.753970][ T9184] ? audit_log_start+0x342/0x720 [ 163.753990][ T9184] audit_log_start+0x3a0/0x720 [ 163.754014][ T9184] ? kstrtouint+0x76/0xc0 [ 163.754074][ T9184] audit_seccomp+0x48/0x100 [ 163.754181][ T9184] ? __seccomp_filter+0x82d/0x1250 [ 163.754274][ T9184] __seccomp_filter+0x83e/0x1250 [ 163.754298][ T9184] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 163.754325][ T9184] ? vfs_write+0x7e8/0x960 [ 163.754457][ T9184] __secure_computing+0x82/0x150 [ 163.754506][ T9184] syscall_trace_enter+0xcf/0x1e0 [ 163.754615][ T9184] do_syscall_64+0xac/0x200 [ 163.754634][ T9184] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 163.754657][ T9184] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 163.754759][ T9184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.754780][ T9184] RIP: 0033:0x7f910699f749 [ 163.754796][ T9184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.754817][ T9184] RSP: 002b:00007f9105407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 163.754838][ T9184] RAX: ffffffffffffffda RBX: 00007f9106bf5fa0 RCX: 00007f910699f749 [ 163.754861][ T9184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.754872][ T9184] RBP: 00007f9105407090 R08: 0000000000000000 R09: 0000000000000000 [ 163.754917][ T9184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.754928][ T9184] R13: 00007f9106bf6038 R14: 00007f9106bf5fa0 R15: 00007ffd5bf511c8 [ 163.754946][ T9184] [ 163.975142][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.997601][ T9186] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 164.267695][ T3660] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 164.273841][ T4600] Bluetooth: hci0: command 0x1003 tx timeout [ 164.348016][ T9212] loop3: detected capacity change from 0 to 1024 [ 164.373652][ T9212] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.395994][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.435614][ T9222] FAULT_INJECTION: forcing a failure. [ 164.435614][ T9222] name failslab, interval 1, probability 0, space 0, times 0 [ 164.448278][ T9222] CPU: 1 UID: 0 PID: 9222 Comm: syz.0.1815 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.448308][ T9222] Tainted: [W]=WARN [ 164.448315][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.448328][ T9222] Call Trace: [ 164.448335][ T9222] [ 164.448343][ T9222] __dump_stack+0x1d/0x30 [ 164.448431][ T9222] dump_stack_lvl+0xe8/0x140 [ 164.448454][ T9222] dump_stack+0x15/0x1b [ 164.448525][ T9222] should_fail_ex+0x265/0x280 [ 164.448600][ T9222] should_failslab+0x8c/0xb0 [ 164.448631][ T9222] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 164.448696][ T9222] ? __get_vm_area_node+0x106/0x1d0 [ 164.448725][ T9222] __get_vm_area_node+0x106/0x1d0 [ 164.448758][ T9222] __vmalloc_node_range_noprof+0x28c/0xed0 [ 164.448794][ T9222] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 164.448849][ T9222] ? __rcu_read_unlock+0x4f/0x70 [ 164.448874][ T9222] ? cred_has_capability+0x210/0x280 [ 164.448942][ T9222] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 164.448990][ T9222] __vmalloc_noprof+0x83/0xc0 [ 164.449021][ T9222] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 164.449111][ T9222] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 164.449144][ T9222] ? bpf_prog_alloc+0x2a/0x150 [ 164.449173][ T9222] bpf_prog_alloc+0x3c/0x150 [ 164.449241][ T9222] bpf_prog_load+0x506/0x1100 [ 164.449265][ T9222] ? security_bpf+0x2b/0x90 [ 164.449288][ T9222] __sys_bpf+0x469/0x7c0 [ 164.449311][ T9222] __x64_sys_bpf+0x41/0x50 [ 164.449348][ T9222] x64_sys_call+0x2aee/0x3000 [ 164.449372][ T9222] do_syscall_64+0xd2/0x200 [ 164.449391][ T9222] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.449418][ T9222] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.449453][ T9222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.449530][ T9222] RIP: 0033:0x7f8e992df749 [ 164.449543][ T9222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.449639][ T9222] RSP: 002b:00007f8e97d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.449659][ T9222] RAX: ffffffffffffffda RBX: 00007f8e99535fa0 RCX: 00007f8e992df749 [ 164.449671][ T9222] RDX: 00000000000000a8 RSI: 0000200000000480 RDI: 0000000000000005 [ 164.449683][ T9222] RBP: 00007f8e97d47090 R08: 0000000000000000 R09: 0000000000000000 [ 164.449697][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.449711][ T9222] R13: 00007f8e99536038 R14: 00007f8e99535fa0 R15: 00007ffef71a3b58 [ 164.449731][ T9222] [ 164.449738][ T9222] syz.0.1815: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 164.707071][ T9222] CPU: 1 UID: 0 PID: 9222 Comm: syz.0.1815 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 164.707100][ T9222] Tainted: [W]=WARN [ 164.707106][ T9222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 164.707117][ T9222] Call Trace: [ 164.707124][ T9222] [ 164.707131][ T9222] __dump_stack+0x1d/0x30 [ 164.707226][ T9222] dump_stack_lvl+0xe8/0x140 [ 164.707243][ T9222] dump_stack+0x15/0x1b [ 164.707326][ T9222] warn_alloc+0x12b/0x1a0 [ 164.707363][ T9222] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 164.707470][ T9222] ? __rcu_read_unlock+0x4f/0x70 [ 164.707546][ T9222] ? cred_has_capability+0x210/0x280 [ 164.707580][ T9222] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 164.707613][ T9222] __vmalloc_noprof+0x83/0xc0 [ 164.707689][ T9222] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 164.707719][ T9222] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 164.707750][ T9222] ? bpf_prog_alloc+0x2a/0x150 [ 164.707781][ T9222] bpf_prog_alloc+0x3c/0x150 [ 164.707893][ T9222] bpf_prog_load+0x506/0x1100 [ 164.707933][ T9222] ? security_bpf+0x2b/0x90 [ 164.707994][ T9222] __sys_bpf+0x469/0x7c0 [ 164.708019][ T9222] __x64_sys_bpf+0x41/0x50 [ 164.708052][ T9222] x64_sys_call+0x2aee/0x3000 [ 164.708116][ T9222] do_syscall_64+0xd2/0x200 [ 164.708168][ T9222] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 164.708199][ T9222] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 164.708305][ T9222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.708433][ T9222] RIP: 0033:0x7f8e992df749 [ 164.708447][ T9222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.708464][ T9222] RSP: 002b:00007f8e97d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 164.708485][ T9222] RAX: ffffffffffffffda RBX: 00007f8e99535fa0 RCX: 00007f8e992df749 [ 164.708499][ T9222] RDX: 00000000000000a8 RSI: 0000200000000480 RDI: 0000000000000005 [ 164.708513][ T9222] RBP: 00007f8e97d47090 R08: 0000000000000000 R09: 0000000000000000 [ 164.708527][ T9222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.708541][ T9222] R13: 00007f8e99536038 R14: 00007f8e99535fa0 R15: 00007ffef71a3b58 [ 164.708645][ T9222] [ 164.922934][ T9222] Mem-Info: [ 164.926031][ T9222] active_anon:8462 inactive_anon:11 isolated_anon:0 [ 164.926031][ T9222] active_file:29928 inactive_file:2431 isolated_file:0 [ 164.926031][ T9222] unevictable:0 dirty:591 writeback:0 [ 164.926031][ T9222] slab_reclaimable:3549 slab_unreclaimable:16707 [ 164.926031][ T9222] mapped:30234 shmem:1484 pagetables:1054 [ 164.926031][ T9222] sec_pagetables:0 bounce:0 [ 164.926031][ T9222] kernel_misc_reclaimable:0 [ 164.926031][ T9222] free:1868920 free_pcp:13862 free_cma:0 [ 164.971223][ T9222] Node 0 active_anon:33848kB inactive_anon:44kB active_file:119712kB inactive_file:9724kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120936kB dirty:2364kB writeback:0kB shmem:5936kB kernel_stack:4400kB pagetables:4216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 164.998669][ T9222] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.028391][ T9222] lowmem_reserve[]: 0 2881 7859 7859 [ 165.033778][ T9222] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 165.065011][ T9222] lowmem_reserve[]: 0 0 4978 4978 [ 165.070084][ T9222] Node 0 Normal free:4513708kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33384kB inactive_anon:44kB active_file:119712kB inactive_file:9724kB unevictable:0kB writepending:2364kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:52044kB local_pcp:9404kB free_cma:0kB [ 165.103214][ T9222] lowmem_reserve[]: 0 0 0 0 [ 165.107749][ T9222] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 165.120399][ T9222] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 165.136536][ T9222] Node 0 Normal: 1219*4kB (UME) 269*8kB (UME) 356*16kB (UME) 432*32kB (UME) 376*64kB (UME) 237*128kB (UME) 113*256kB (UME) 33*512kB (UME) 55*1024kB (UM) 40*2048kB (UM) 1037*4096kB (UME) = 4512564kB [ 165.156032][ T9222] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 165.165325][ T9222] 33755 total pagecache pages [ 165.170079][ T9222] 5 pages in swap cache [ 165.174264][ T9222] Free swap = 124976kB [ 165.178415][ T9222] Total swap = 124996kB [ 165.182545][ T9222] 2097051 pages RAM [ 165.186318][ T9222] 0 pages HighMem/MovableOnly [ 165.191055][ T9222] 81087 pages reserved [ 165.196994][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.270769][ T9241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.279454][ T9234] loop0: detected capacity change from 0 to 512 [ 165.325189][ T9241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.336512][ T9234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.360819][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.374891][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.376601][ T9234] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 165.389181][ T9234] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 165.396818][ T9234] vhci_hcd vhci_hcd.0: Device attached [ 165.403051][ T9252] syz_tun: entered allmulticast mode [ 165.411258][ T9251] syz_tun: left allmulticast mode [ 165.417024][ T9253] vhci_hcd: connection closed [ 165.423925][ T396] vhci_hcd: stop threads [ 165.432902][ T396] vhci_hcd: release socket [ 165.437316][ T396] vhci_hcd: disconnect device [ 165.457322][ T9257] loop7: detected capacity change from 0 to 1024 [ 165.467567][ T9257] ext4: Unknown parameter 'fsuuid' [ 165.524555][ T9263] syz_tun: entered allmulticast mode [ 165.530687][ T9262] syz_tun: left allmulticast mode [ 165.737093][ T9272] loop7: detected capacity change from 0 to 512 [ 165.745694][ T9272] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1834: ea_inode with extended attributes [ 165.758574][ T9272] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1834: error while reading EA inode 11 err=-117 [ 165.771046][ T9272] EXT4-fs (loop7): 1 orphan inode deleted [ 165.777110][ T9272] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.844021][ T9279] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 165.932676][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.991182][ T9293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.999951][ T9293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.124704][ T9304] loop3: detected capacity change from 0 to 512 [ 166.133533][ T9304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.150283][ T9304] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.163174][ T9304] ext4 filesystem being mounted at /370/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.297266][ T9312] __nla_validate_parse: 8 callbacks suppressed [ 166.297282][ T9312] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1848'. [ 166.313872][ T9312] syz_tun: entered allmulticast mode [ 166.320353][ T9311] syz_tun: left allmulticast mode [ 166.360515][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.377510][ T9316] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 166.441889][ T9321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=9321 comm=syz.0.1850 [ 166.466051][ T9320] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1852'. [ 166.507957][ T4538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.544054][ T9334] netlink: 96 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 166.549514][ T9330] loop0: detected capacity change from 0 to 1024 [ 166.569640][ T9330] ext4: Unknown parameter 'fsuuid' [ 166.680573][ T9351] loop0: detected capacity change from 0 to 512 [ 166.711749][ T9351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 166.734321][ T9359] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1868'. [ 166.744288][ T9359] syz_tun: entered allmulticast mode [ 166.758315][ T9358] syz_tun: left allmulticast mode [ 166.785822][ T9351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.828641][ T9351] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 166.886433][ T9367] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 166.915799][ T9372] netlink: 96 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 166.946801][ T9377] loop2: detected capacity change from 0 to 1024 [ 166.954006][ T9377] ext4: Unknown parameter 'fsuuid' [ 167.050546][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.055841][ T9387] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1879'. [ 167.081532][ T9387] syz_tun: entered allmulticast mode [ 167.087393][ T9386] syz_tun: left allmulticast mode [ 167.150016][ T9396] netlink: 96 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 167.326658][ T9402] netlink: 'syz.2.1886': attribute type 5 has an invalid length. [ 167.504033][ T29] kauditd_printk_skb: 812 callbacks suppressed [ 167.504045][ T29] audit: type=1326 audit(1763956402.879:14449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9416 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 167.557426][ T29] audit: type=1326 audit(1763956402.909:14450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9416 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=26 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 167.580259][ T29] audit: type=1326 audit(1763956402.909:14451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9416 comm="wg1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 167.603296][ T29] audit: type=1326 audit(1763956402.929:14452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 167.627034][ T29] audit: type=1326 audit(1763956402.929:14453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 167.650516][ T29] audit: type=1326 audit(1763956402.929:14454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 167.674103][ T29] audit: type=1326 audit(1763956402.929:14455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 167.697764][ T29] audit: type=1326 audit(1763956402.929:14456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 167.721244][ T29] audit: type=1326 audit(1763956402.929:14457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 167.744760][ T29] audit: type=1326 audit(1763956402.929:14458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9419 comm="syz.7.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 167.775399][ T9420] loop7: detected capacity change from 0 to 512 [ 167.784424][ T9420] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1892: ea_inode with extended attributes [ 167.809455][ T9420] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1892: error while reading EA inode 11 err=-117 [ 167.822290][ T9420] EXT4-fs (loop7): 1 orphan inode deleted [ 167.829086][ T9420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.869937][ T9425] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 167.877241][ T9425] vhci_hcd: invalid port number 96 [ 167.882381][ T9425] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 167.899974][ T9422] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 167.988167][ T9433] 9pnet_fd: Insufficient options for proto=fd [ 168.075923][ T9438] loop3: detected capacity change from 0 to 1024 [ 168.082947][ T9438] ext4: Unknown parameter 'fsuuid' [ 168.195693][ T9451] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1905'. [ 168.851945][ T4538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.880080][ T9464] loop6: detected capacity change from 0 to 256 [ 169.169027][ T9462] loop2: detected capacity change from 0 to 8192 [ 169.227323][ T9492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1914'. [ 169.426587][ T9502] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 169.435834][ T9502] vhci_hcd: invalid port number 96 [ 169.440982][ T9502] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 169.500328][ T9504] loop7: detected capacity change from 0 to 1024 [ 169.507387][ T9504] ext4: Unknown parameter 'fsuuid' [ 169.705581][ T9507] netlink: 96 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 169.880771][ T9521] loop0: detected capacity change from 0 to 256 [ 169.881891][ T9513] loop3: detected capacity change from 0 to 512 [ 169.930959][ T9513] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1924: ea_inode with extended attributes [ 169.956131][ T9513] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1924: error while reading EA inode 11 err=-117 [ 169.974113][ T9513] EXT4-fs (loop3): 1 orphan inode deleted [ 169.985924][ T9513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.038197][ T9532] loop6: detected capacity change from 0 to 256 [ 170.045576][ T9516] netlink: 'syz.7.1926': attribute type 5 has an invalid length. [ 170.069037][ T9525] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 170.333661][ T9553] loop7: detected capacity change from 0 to 1024 [ 170.340695][ T9553] ext4: Unknown parameter 'fsuuid' [ 170.604663][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.617275][ T9567] loop7: detected capacity change from 0 to 512 [ 170.631941][ T9567] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.1939: ea_inode with extended attributes [ 170.645177][ T9567] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1939: error while reading EA inode 11 err=-117 [ 170.659651][ T9567] EXT4-fs (loop7): 1 orphan inode deleted [ 170.665784][ T9567] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.731062][ T9570] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 170.746077][ T9584] loop2: detected capacity change from 0 to 1024 [ 170.753416][ T9584] ext4: Unknown parameter 'fsuuid' [ 170.835093][ T9582] loop0: detected capacity change from 0 to 512 [ 170.845977][ T9582] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #11: comm syz.0.1944: ea_inode with extended attributes [ 170.869920][ T9582] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.1944: error while reading EA inode 11 err=-117 [ 170.900372][ T9582] EXT4-fs (loop0): 1 orphan inode deleted [ 170.913840][ T9582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.014459][ T9591] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 171.331414][ T9605] __nla_validate_parse: 4 callbacks suppressed [ 171.331431][ T9605] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1952'. [ 171.347804][ T9605] syz_tun: entered allmulticast mode [ 171.353919][ T9604] syz_tun: left allmulticast mode [ 171.397243][ T4538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.587998][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.728209][ T9628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.738896][ T9628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.758733][ T9643] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1969'. [ 171.769640][ T9643] syz_tun: entered allmulticast mode [ 171.789126][ T9631] loop6: detected capacity change from 0 to 512 [ 171.811540][ T9631] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 171.866838][ T9634] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1966'. [ 171.908749][ T9631] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1965: Invalid block bitmap block 0 in block_group 0 [ 171.911767][ T9656] loop0: detected capacity change from 0 to 256 [ 171.942813][ T9631] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 171.966679][ T9656] FAT-fs (loop0): Directory bread(block 64) failed [ 171.973653][ T9631] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #11: comm syz.6.1965: attempt to clear invalid blocks 983261 len 1 [ 171.987117][ T9656] FAT-fs (loop0): Directory bread(block 65) failed [ 171.999482][ T9654] loop2: detected capacity change from 0 to 512 [ 172.007817][ T9656] FAT-fs (loop0): Directory bread(block 66) failed [ 172.014438][ T9656] FAT-fs (loop0): Directory bread(block 67) failed [ 172.021081][ T9631] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.1965: Invalid inode table block 0 in block_group 0 [ 172.022708][ T9654] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #11: comm syz.2.1973: ea_inode with extended attributes [ 172.033804][ T9656] FAT-fs (loop0): Directory bread(block 68) failed [ 172.046727][ T9631] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 172.062593][ T9631] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 172.071172][ T9656] FAT-fs (loop0): Directory bread(block 69) failed [ 172.077904][ T9656] FAT-fs (loop0): Directory bread(block 70) failed [ 172.084450][ T9656] FAT-fs (loop0): Directory bread(block 71) failed [ 172.091318][ T9654] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.1973: error while reading EA inode 11 err=-117 [ 172.105244][ T9631] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.1965: Invalid inode table block 0 in block_group 0 [ 172.118633][ T9656] FAT-fs (loop0): Directory bread(block 72) failed [ 172.125133][ T9656] FAT-fs (loop0): Directory bread(block 73) failed [ 172.132258][ T9654] EXT4-fs (loop2): 1 orphan inode deleted [ 172.150801][ T9654] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.163288][ T9631] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 172.178207][ T9658] bio_check_eod: 96 callbacks suppressed [ 172.178228][ T9658] syz.0.1972: attempt to access beyond end of device [ 172.178228][ T9658] loop0: rw=524288, sector=1192, nr_sectors = 4 limit=256 [ 172.202120][ T9631] EXT4-fs error (device loop6): ext4_truncate:4637: inode #11: comm syz.6.1965: mark_inode_dirty error [ 172.217290][ T9631] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 172.226460][ T9656] syz.0.1972: attempt to access beyond end of device [ 172.226460][ T9656] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 172.239794][ T9657] syz.0.1972: attempt to access beyond end of device [ 172.239794][ T9657] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 172.239846][ T9631] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.1965: Invalid inode table block 0 in block_group 0 [ 172.265891][ T9657] syz.0.1972: attempt to access beyond end of device [ 172.265891][ T9657] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 172.268387][ T9659] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 172.286583][ T9658] syz.0.1972: attempt to access beyond end of device [ 172.286583][ T9658] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 172.286935][ T9631] EXT4-fs (loop6): 1 truncate cleaned up [ 172.306886][ T9656] syz.0.1972: attempt to access beyond end of device [ 172.306886][ T9656] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 172.324117][ T9662] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1974'. [ 172.324352][ T9631] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.344357][ T9662] syz_tun: entered allmulticast mode [ 172.359278][ T9661] syz_tun: left allmulticast mode [ 172.359445][ T9631] EXT4-fs error (device loop6): __ext4_get_inode_loc:4832: comm syz.6.1965: Invalid inode table block 0 in block_group 0 [ 172.377514][ T9657] syz.0.1972: attempt to access beyond end of device [ 172.377514][ T9657] loop0: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 172.391275][ T9631] FAULT_INJECTION: forcing a failure. [ 172.391275][ T9631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.404349][ T9631] CPU: 1 UID: 0 PID: 9631 Comm: syz.6.1965 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.404381][ T9631] Tainted: [W]=WARN [ 172.404387][ T9631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.404403][ T9631] Call Trace: [ 172.404409][ T9631] [ 172.404442][ T9631] __dump_stack+0x1d/0x30 [ 172.404465][ T9631] dump_stack_lvl+0xe8/0x140 [ 172.404487][ T9631] dump_stack+0x15/0x1b [ 172.404507][ T9631] should_fail_ex+0x265/0x280 [ 172.404653][ T9631] should_fail+0xb/0x20 [ 172.404671][ T9631] should_fail_usercopy+0x1a/0x20 [ 172.404695][ T9631] strncpy_from_user+0x25/0x230 [ 172.404747][ T9631] ? kmem_cache_alloc_noprof+0x242/0x480 [ 172.404843][ T9631] ? getname_flags+0x80/0x3b0 [ 172.404874][ T9631] getname_flags+0xae/0x3b0 [ 172.404967][ T9631] do_sys_openat2+0x60/0x110 [ 172.404986][ T9631] __x64_sys_openat+0xf2/0x120 [ 172.405005][ T9631] x64_sys_call+0x2eab/0x3000 [ 172.405030][ T9631] do_syscall_64+0xd2/0x200 [ 172.405053][ T9631] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 172.405135][ T9631] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 172.405195][ T9631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.405214][ T9631] RIP: 0033:0x7f910699f749 [ 172.405230][ T9631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.405294][ T9631] RSP: 002b:00007f9105407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 172.405312][ T9631] RAX: ffffffffffffffda RBX: 00007f9106bf5fa0 RCX: 00007f910699f749 [ 172.405327][ T9631] RDX: 0000000000080042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 172.405346][ T9631] RBP: 00007f9105407090 R08: 0000000000000000 R09: 0000000000000000 [ 172.405361][ T9631] R10: 00000000000001bd R11: 0000000000000246 R12: 0000000000000001 [ 172.405375][ T9631] R13: 00007f9106bf6038 R14: 00007f9106bf5fa0 R15: 00007ffd5bf511c8 [ 172.405394][ T9631] [ 172.561016][ T29] kauditd_printk_skb: 866 callbacks suppressed [ 172.561030][ T29] audit: type=1326 audit(1763956407.899:15325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 172.575887][ T9631] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1965: Invalid inode bitmap blk 0 in block_group 0 [ 172.607788][ T29] audit: type=1326 audit(1763956407.949:15326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 172.662586][ T29] audit: type=1326 audit(1763956407.949:15327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 172.686013][ T29] audit: type=1326 audit(1763956407.949:15328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 172.709529][ T29] audit: type=1326 audit(1763956407.949:15329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 172.732951][ T29] audit: type=1326 audit(1763956407.949:15330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 172.756655][ T29] audit: type=1326 audit(1763956407.949:15331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 172.780226][ T29] audit: type=1400 audit(1763956407.959:15332): avc: denied { unlink } for pid=3318 comm="syz-executor" name="file0" dev="tmpfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 172.805190][ T29] audit: type=1326 audit(1763956408.089:15333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 172.817539][ T9670] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1977'. [ 172.828727][ T29] audit: type=1326 audit(1763956408.089:15334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9630 comm="syz.6.1965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 172.863469][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.883583][ T4471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.948057][ T9678] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1981'. [ 172.967162][ T9674] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1979'. [ 172.984851][ T9676] FAULT_INJECTION: forcing a failure. [ 172.984851][ T9676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.988239][ T9674] 0ªX¹¦À: renamed from caif0 [ 172.998087][ T9676] CPU: 0 UID: 0 PID: 9676 Comm: syz.2.1978 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 172.998121][ T9676] Tainted: [W]=WARN [ 172.998199][ T9676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 172.998211][ T9676] Call Trace: [ 172.998218][ T9676] [ 172.998225][ T9676] __dump_stack+0x1d/0x30 [ 172.998308][ T9676] dump_stack_lvl+0xe8/0x140 [ 172.998329][ T9676] dump_stack+0x15/0x1b [ 172.998347][ T9676] should_fail_ex+0x265/0x280 [ 172.998444][ T9676] should_fail+0xb/0x20 [ 172.998459][ T9676] should_fail_usercopy+0x1a/0x20 [ 172.998479][ T9676] _copy_from_user+0x1c/0xb0 [ 172.998504][ T9676] __sys_sendto+0x19e/0x330 [ 172.998582][ T9676] __x64_sys_sendto+0x76/0x90 [ 172.998611][ T9676] x64_sys_call+0x2d14/0x3000 [ 172.998634][ T9676] do_syscall_64+0xd2/0x200 [ 172.998654][ T9676] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 172.998688][ T9676] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 172.998720][ T9676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.998818][ T9676] RIP: 0033:0x7fd161c9f749 [ 172.998833][ T9676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.998901][ T9676] RSP: 002b:00007fd1606ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 172.998920][ T9676] RAX: ffffffffffffffda RBX: 00007fd161ef5fa0 RCX: 00007fd161c9f749 [ 172.998973][ T9676] RDX: 000000000000e90c RSI: 00002000000000c0 RDI: 0000000000000003 [ 172.999066][ T9676] RBP: 00007fd1606ff090 R08: 0000200000000540 R09: 0000000000000014 [ 172.999084][ T9676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.999097][ T9676] R13: 00007fd161ef6038 R14: 00007fd161ef5fa0 R15: 00007ffeed4df6b8 [ 172.999189][ T9676] [ 173.190894][ T9674] 0ªX¹¦À: entered allmulticast mode [ 173.196100][ T9674] net_ratelimit: 10 callbacks suppressed [ 173.196115][ T9674] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 173.218498][ T9678] syz_tun: entered allmulticast mode [ 173.223943][ T9681] netlink: 'syz.6.1979': attribute type 30 has an invalid length. [ 173.274657][ T9689] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 173.292458][ T9689] SELinux: failed to load policy [ 173.655727][ T9714] loop3: detected capacity change from 0 to 512 [ 173.670600][ T9714] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.1993: ea_inode with extended attributes [ 173.670880][ T9714] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.1993: error while reading EA inode 11 err=-117 [ 173.671053][ T9714] EXT4-fs (loop3): 1 orphan inode deleted [ 173.671469][ T9714] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.797575][ T9718] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 173.933732][ T9725] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1994'. [ 174.238764][ T9737] loop0: detected capacity change from 0 to 512 [ 174.255612][ T9747] loop2: detected capacity change from 0 to 256 [ 174.267937][ T9737] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 174.279167][ T9737] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2001: Invalid block bitmap block 0 in block_group 0 [ 174.300493][ T9737] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 174.312821][ T9737] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.2001: attempt to clear invalid blocks 983261 len 1 [ 174.326766][ T9737] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.2001: Invalid inode table block 0 in block_group 0 [ 174.340236][ T9753] FAULT_INJECTION: forcing a failure. [ 174.340236][ T9753] name failslab, interval 1, probability 0, space 0, times 0 [ 174.340431][ T9737] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 174.352921][ T9753] CPU: 0 UID: 0 PID: 9753 Comm: syz.7.2006 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 174.352951][ T9753] Tainted: [W]=WARN [ 174.352959][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 174.352980][ T9753] Call Trace: [ 174.352986][ T9753] [ 174.352993][ T9753] __dump_stack+0x1d/0x30 [ 174.353016][ T9753] dump_stack_lvl+0xe8/0x140 [ 174.353094][ T9753] dump_stack+0x15/0x1b [ 174.353112][ T9753] should_fail_ex+0x265/0x280 [ 174.353161][ T9753] should_failslab+0x8c/0xb0 [ 174.353189][ T9753] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 174.353288][ T9753] ? __alloc_skb+0x101/0x320 [ 174.353345][ T9753] __alloc_skb+0x101/0x320 [ 174.353373][ T9753] netlink_alloc_large_skb+0xbf/0xf0 [ 174.353477][ T9753] netlink_sendmsg+0x3cf/0x6b0 [ 174.353499][ T9753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.353564][ T9753] __sock_sendmsg+0x145/0x180 [ 174.353588][ T9753] ____sys_sendmsg+0x31e/0x4e0 [ 174.353611][ T9753] ___sys_sendmsg+0x17b/0x1d0 [ 174.353639][ T9753] __x64_sys_sendmsg+0xd4/0x160 [ 174.353712][ T9753] x64_sys_call+0x191e/0x3000 [ 174.353734][ T9753] do_syscall_64+0xd2/0x200 [ 174.353781][ T9753] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 174.353872][ T9753] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 174.353905][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.353996][ T9753] RIP: 0033:0x7fbdd53cf749 [ 174.354010][ T9753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.354072][ T9753] RSP: 002b:00007fbdd3e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.354092][ T9753] RAX: ffffffffffffffda RBX: 00007fbdd5625fa0 RCX: 00007fbdd53cf749 [ 174.354105][ T9753] RDX: 0000000024000010 RSI: 0000200000000740 RDI: 0000000000000006 [ 174.354118][ T9753] RBP: 00007fbdd3e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 174.354167][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.354180][ T9753] R13: 00007fbdd5626038 R14: 00007fbdd5625fa0 R15: 00007ffc6df3c148 [ 174.354198][ T9753] [ 174.523581][ T9762] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2008'. [ 174.524676][ T9737] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 174.585363][ T9737] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.2001: Invalid inode table block 0 in block_group 0 [ 174.598716][ T9737] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 174.608484][ T9737] EXT4-fs error (device loop0): ext4_truncate:4637: inode #11: comm syz.0.2001: mark_inode_dirty error [ 174.620128][ T9737] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 174.629270][ T9737] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.2001: Invalid inode table block 0 in block_group 0 [ 174.643888][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.644112][ T9737] EXT4-fs (loop0): 1 truncate cleaned up [ 174.659775][ T9737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.694362][ T9737] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.2001: Invalid inode table block 0 in block_group 0 [ 174.707506][ T9737] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.2001: Invalid inode table block 0 in block_group 0 [ 174.727977][ T9767] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2010'. [ 174.739211][ T9767] syz_tun: entered allmulticast mode [ 174.745310][ T9766] syz_tun: left allmulticast mode [ 175.182064][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.197331][ T9796] syz_tun: entered allmulticast mode [ 175.318706][ T9814] loop7: detected capacity change from 0 to 512 [ 175.326941][ T9814] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.2023: ea_inode with extended attributes [ 175.340245][ T9814] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2023: error while reading EA inode 11 err=-117 [ 175.352955][ T9814] EXT4-fs (loop7): 1 orphan inode deleted [ 175.359497][ T9814] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.429917][ T9814] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 175.689695][ T9845] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 175.697003][ T9845] vhci_hcd: invalid port number 96 [ 175.702167][ T9845] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 175.749655][ T9848] loop0: detected capacity change from 0 to 512 [ 175.769459][ T9848] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 175.792541][ T9848] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.805318][ T9848] ext4 filesystem being mounted at /423/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 175.970896][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.042036][ T9856] loop3: detected capacity change from 0 to 1024 [ 176.061287][ T9856] EXT4-fs (loop3): invalid first ino: 0 [ 176.076891][ T4538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.146587][ T9864] syz_tun: entered allmulticast mode [ 176.175231][ T9852] netlink: 'syz.2.2043': attribute type 5 has an invalid length. [ 176.861705][ T9916] loop2: detected capacity change from 0 to 1024 [ 176.880735][ T9918] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 176.887467][ T9916] ext4: Unknown parameter 'fsuuid' [ 176.888563][ T9918] vhci_hcd: invalid port number 96 [ 176.898329][ T9918] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 177.194309][ T9926] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 177.209213][ T9931] loop2: detected capacity change from 0 to 512 [ 177.250405][ T9931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.376413][ T9931] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 177.383074][ T9931] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 177.390814][ T9931] vhci_hcd vhci_hcd.0: Device attached [ 177.413153][ T9948] vhci_hcd: connection closed [ 177.413252][ T3746] vhci_hcd: stop threads [ 177.422218][ T3746] vhci_hcd: release socket [ 177.426626][ T3746] vhci_hcd: disconnect device [ 177.529816][ T9959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.538747][ T9959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.914243][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.945714][ T29] kauditd_printk_skb: 990 callbacks suppressed [ 177.945805][ T29] audit: type=1326 audit(1763956413.319:16325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 177.975762][ T29] audit: type=1326 audit(1763956413.319:16326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 177.999331][ T29] audit: type=1326 audit(1763956413.329:16327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 178.002494][ T9971] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 178.022914][ T29] audit: type=1326 audit(1763956413.329:16328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 178.022945][ T29] audit: type=1326 audit(1763956413.329:16329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 178.078610][ T29] audit: type=1326 audit(1763956413.329:16330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 178.102081][ T29] audit: type=1326 audit(1763956413.329:16331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 178.140012][ T29] audit: type=1326 audit(1763956413.349:16332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 178.159681][ T9976] loop2: detected capacity change from 0 to 1024 [ 178.163514][ T29] audit: type=1326 audit(1763956413.349:16333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 178.170618][ T9976] ext4: Unknown parameter 'fsuuid' [ 178.193251][ T29] audit: type=1326 audit(1763956413.359:16334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.2.2089" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd161c9f749 code=0x7ffc0000 [ 178.376327][ T9993] __nla_validate_parse: 7 callbacks suppressed [ 178.376341][ T9993] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2099'. [ 178.511532][ T9997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.520442][ T9997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.525031][ T9999] loop2: detected capacity change from 0 to 1024 [ 178.540854][ T9999] ext4: Unknown parameter 'fsuuid' [ 178.723992][T10007] loop6: detected capacity change from 0 to 512 [ 178.763918][T10007] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.2104: ea_inode with extended attributes [ 178.800778][T10007] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2104: error while reading EA inode 11 err=-117 [ 178.820767][T10007] EXT4-fs (loop6): 1 orphan inode deleted [ 178.898007][T10009] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 179.263281][T10029] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 179.350041][T10033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2114'. [ 179.714535][T10051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2120'. [ 179.840201][T10054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.848924][T10054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.886814][T10056] loop0: detected capacity change from 0 to 256 [ 179.984161][T10064] loop0: detected capacity change from 0 to 256 [ 180.065782][T10070] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 180.083832][T10072] loop2: detected capacity change from 0 to 512 [ 180.105469][T10072] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 180.112068][T10072] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 180.119758][T10072] vhci_hcd vhci_hcd.0: Device attached [ 180.728020][T10090] netlink: 'syz.3.2129': attribute type 5 has an invalid length. [ 180.829137][T10078] vhci_hcd: connection closed [ 180.829291][ T3746] vhci_hcd: stop threads [ 180.838251][ T3746] vhci_hcd: release socket [ 180.842654][ T3746] vhci_hcd: disconnect device [ 181.041767][T10100] netlink: 'syz.3.2132': attribute type 5 has an invalid length. [ 181.900095][T10128] loop7: detected capacity change from 0 to 512 [ 181.959960][T10128] EXT4-fs error (device loop7): ext4_xattr_inode_iget:441: inode #11: comm syz.7.2142: ea_inode with extended attributes [ 181.998620][T10128] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.2142: error while reading EA inode 11 err=-117 [ 182.050760][T10139] 9pnet_fd: Insufficient options for proto=fd [ 182.060449][T10135] loop0: detected capacity change from 0 to 256 [ 182.060973][T10128] EXT4-fs (loop7): 1 orphan inode deleted [ 182.225793][T10148] loop0: detected capacity change from 0 to 1024 [ 182.228652][T10148] ext4: Unknown parameter 'fsuuid' [ 182.241781][T10129] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 182.308718][T10147] loop3: detected capacity change from 0 to 512 [ 182.318236][T10147] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2149: ea_inode with extended attributes [ 182.332799][T10147] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2149: error while reading EA inode 11 err=-117 [ 182.346328][T10147] EXT4-fs (loop3): 1 orphan inode deleted [ 182.420947][T10149] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 182.457752][T10151] loop6: detected capacity change from 0 to 512 [ 182.489820][T10151] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.2150: ea_inode with extended attributes [ 182.507901][T10151] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2150: error while reading EA inode 11 err=-117 [ 182.520532][T10151] EXT4-fs (loop6): 1 orphan inode deleted [ 182.585293][T10163] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 182.668411][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2154'. [ 182.681501][T10165] batadv1: entered promiscuous mode [ 182.686700][T10165] batadv1: entered allmulticast mode [ 183.013878][ T29] kauditd_printk_skb: 971 callbacks suppressed [ 183.013891][ T29] audit: type=1326 audit(1763956418.389:17306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 183.054402][ T29] audit: type=1326 audit(1763956418.389:17307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 183.078049][ T29] audit: type=1326 audit(1763956418.389:17308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 183.101761][ T29] audit: type=1326 audit(1763956418.389:17309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 183.125391][ T29] audit: type=1326 audit(1763956418.389:17310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 183.149017][ T29] audit: type=1326 audit(1763956418.389:17311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 183.172654][ T29] audit: type=1326 audit(1763956418.389:17312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 183.196381][ T29] audit: type=1326 audit(1763956418.389:17313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 183.219993][ T29] audit: type=1326 audit(1763956418.389:17314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 183.243808][ T29] audit: type=1326 audit(1763956418.389:17315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10169 comm="syz.7.2156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 183.287431][T10174] 9pnet_fd: Insufficient options for proto=fd [ 183.372021][T10180] loop0: detected capacity change from 0 to 512 [ 183.431670][T10180] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 183.438280][T10180] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 183.445899][T10180] vhci_hcd vhci_hcd.0: Device attached [ 183.454424][T10187] vhci_hcd: connection closed [ 183.454641][ T396] vhci_hcd: stop threads [ 183.463684][ T396] vhci_hcd: release socket [ 183.468121][ T396] vhci_hcd: disconnect device [ 183.555984][T10198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2164'. [ 183.639703][T10200] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 183.739422][T10204] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2167'. [ 183.759154][T10206] loop3: detected capacity change from 0 to 1024 [ 183.773094][T10209] 9pnet_fd: Insufficient options for proto=fd [ 183.792708][T10206] ext4: Unknown parameter 'fsuuid' [ 183.947439][T10218] loop3: detected capacity change from 0 to 512 [ 183.984366][T10218] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: inode #11: comm syz.3.2172: ea_inode with extended attributes [ 184.011598][T10218] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.2172: error while reading EA inode 11 err=-117 [ 184.039517][T10218] EXT4-fs (loop3): 1 orphan inode deleted [ 184.113925][T10222] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 184.309454][T10233] loop0: detected capacity change from 0 to 512 [ 184.366740][T10243] FAULT_INJECTION: forcing a failure. [ 184.366740][T10243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.370729][T10238] loop7: detected capacity change from 0 to 256 [ 184.379842][T10243] CPU: 0 UID: 0 PID: 10243 Comm: syz.0.2178 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 184.379906][T10243] Tainted: [W]=WARN [ 184.379913][T10243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 184.379930][T10243] Call Trace: [ 184.379941][T10243] [ 184.379948][T10243] __dump_stack+0x1d/0x30 [ 184.379971][T10243] dump_stack_lvl+0xe8/0x140 [ 184.380037][T10243] dump_stack+0x15/0x1b [ 184.380055][T10243] should_fail_ex+0x265/0x280 [ 184.380087][T10243] should_fail+0xb/0x20 [ 184.380104][T10243] should_fail_usercopy+0x1a/0x20 [ 184.380151][T10243] _copy_from_user+0x1c/0xb0 [ 184.380177][T10243] kstrtouint_from_user+0x69/0xf0 [ 184.380221][T10243] ? 0xffffffff81000000 [ 184.380235][T10243] ? selinux_file_permission+0x1e4/0x320 [ 184.380266][T10243] proc_fail_nth_write+0x50/0x160 [ 184.380352][T10243] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 184.380382][T10243] vfs_write+0x269/0x960 [ 184.380403][T10243] ? vfs_read+0x4e6/0x770 [ 184.380478][T10243] ? __rcu_read_unlock+0x4f/0x70 [ 184.380538][T10243] ? __fget_files+0x184/0x1c0 [ 184.380563][T10243] ? __sys_setsockopt+0x18e/0x200 [ 184.380595][T10243] ksys_write+0xda/0x1a0 [ 184.380637][T10243] __x64_sys_write+0x40/0x50 [ 184.380662][T10243] x64_sys_call+0x2802/0x3000 [ 184.380715][T10243] do_syscall_64+0xd2/0x200 [ 184.380764][T10243] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 184.380792][T10243] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 184.380835][T10243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.380857][T10243] RIP: 0033:0x7f8e992de1ff [ 184.380871][T10243] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 184.380889][T10243] RSP: 002b:00007f8e97d47030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 184.380908][T10243] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e992de1ff [ 184.380921][T10243] RDX: 0000000000000001 RSI: 00007f8e97d470a0 RDI: 0000000000000004 [ 184.380990][T10243] RBP: 00007f8e97d47090 R08: 0000000000000000 R09: 0000000000000000 [ 184.381041][T10243] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 184.381053][T10243] R13: 00007f8e99536038 R14: 00007f8e99535fa0 R15: 00007ffef71a3b58 [ 184.381091][T10243] [ 184.663227][T10247] lo speed is unknown, defaulting to 1000 [ 184.690839][T10251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.709295][T10252] vhci_hcd: invalid port number 236 [ 184.716201][T10251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.766469][T10247] lo speed is unknown, defaulting to 1000 [ 184.793909][T10258] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2185'. [ 184.894455][T10269] loop6: detected capacity change from 0 to 512 [ 184.914165][T10267] loop7: detected capacity change from 0 to 1024 [ 184.930734][T10269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.931703][T10267] ext4: Unknown parameter 'fsuuid' [ 184.960542][T10269] ext4 filesystem being mounted at /367/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.037920][T10273] loop0: detected capacity change from 0 to 256 [ 185.072224][T10269] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2189'. [ 185.102985][T10280] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2192'. [ 185.760723][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.783495][T10306] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 185.792315][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.805569][T10308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.815010][T10308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.053059][T10319] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2204'. [ 186.068299][T10319] syz_tun: entered allmulticast mode [ 186.084300][T10318] syz_tun: left allmulticast mode [ 186.452777][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2210'. [ 186.496764][T10336] batadv1: entered promiscuous mode [ 186.502011][T10336] batadv1: entered allmulticast mode [ 186.639835][T10340] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 186.647141][T10340] vhci_hcd: invalid port number 96 [ 186.652344][T10340] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 187.425153][T10372] loop6: detected capacity change from 0 to 512 [ 187.478708][T10372] EXT4-fs mount: 18 callbacks suppressed [ 187.478724][T10372] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.633013][ T4471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.713722][T10368] netlink: 'syz.3.2221': attribute type 5 has an invalid length. [ 187.745523][ T3743] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.761949][T10386] 9pnet_fd: Insufficient options for proto=fd [ 187.779080][T10388] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2227'. [ 187.849867][T10391] loop3: detected capacity change from 0 to 256 [ 188.054259][T10398] netlink: 'syz.3.2229': attribute type 5 has an invalid length. [ 188.119646][T10411] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 188.127509][ T29] kauditd_printk_skb: 869 callbacks suppressed [ 188.127522][ T29] audit: type=1326 audit(1763956423.499:18185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10403 comm="syz.0.2231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f8e992df749 code=0x7ffc0000 [ 188.167740][T10411] vhci_hcd: invalid port number 96 [ 188.172872][T10411] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 188.189581][ T29] audit: type=1326 audit(1763956423.539:18186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb01c0f749 code=0x7ffc0000 [ 188.213155][ T29] audit: type=1326 audit(1763956423.539:18187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb01c0f749 code=0x7ffc0000 [ 188.236695][ T29] audit: type=1326 audit(1763956423.549:18188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb01c0f749 code=0x7ffc0000 [ 188.260408][ T29] audit: type=1326 audit(1763956423.549:18189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb01c0f749 code=0x7ffc0000 [ 188.283964][ T29] audit: type=1326 audit(1763956423.549:18190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb01c0f749 code=0x7ffc0000 [ 188.307499][ T29] audit: type=1326 audit(1763956423.549:18191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb01c0f749 code=0x7ffc0000 [ 188.331101][ T29] audit: type=1326 audit(1763956423.549:18192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb01c0f749 code=0x7ffc0000 [ 188.354705][ T29] audit: type=1326 audit(1763956423.549:18193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb01c0f749 code=0x7ffc0000 [ 188.378301][ T29] audit: type=1326 audit(1763956423.549:18194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10415 comm="syz.3.2235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb01c0f749 code=0x7ffc0000 [ 188.623550][T10426] loop2: detected capacity change from 0 to 512 [ 188.641310][T10426] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 188.688613][T10426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.711396][T10426] ext4 filesystem being mounted at /449/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.746132][T10426] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2238'. [ 188.827257][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.890790][T10433] loop7: detected capacity change from 0 to 1024 [ 188.905031][T10433] ext4: Unknown parameter 'fsuuid' [ 188.914832][T10435] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2241'. [ 189.366215][T10443] netlink: 'syz.7.2244': attribute type 5 has an invalid length. [ 189.777678][ T3660] Bluetooth: hci0: command 0x1003 tx timeout [ 189.778876][ T4600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.067046][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2258'. [ 190.100379][T10485] batadv1: entered promiscuous mode [ 190.105590][T10485] batadv1: entered allmulticast mode [ 190.355362][T10490] loop6: detected capacity change from 0 to 512 [ 190.398923][T10490] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.468281][ T4471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.477580][T10488] netlink: 'syz.0.2259': attribute type 5 has an invalid length. [ 190.715067][T10513] loop0: detected capacity change from 0 to 512 [ 190.751416][T10517] loop2: detected capacity change from 0 to 1024 [ 190.759191][T10517] ext4: Unknown parameter 'fsuuid' [ 190.765628][T10513] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.772234][T10513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.772380][T10513] ext4 filesystem being mounted at /480/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 190.782383][T10519] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2270'. [ 190.871625][T10516] loop6: detected capacity change from 0 to 512 [ 190.874252][T10539] loop2: detected capacity change from 0 to 512 [ 190.908786][T10539] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.943311][T10516] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.2268: ea_inode with extended attributes [ 190.964641][T10516] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2268: error while reading EA inode 11 err=-117 [ 190.977580][T10516] EXT4-fs (loop6): 1 orphan inode deleted [ 190.983962][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.984681][T10516] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.063957][T10526] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 191.089758][T10559] loop3: detected capacity change from 0 to 1024 [ 191.098597][T10559] ext4: Unknown parameter 'fsuuid' [ 191.124021][T10562] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2283'. [ 191.152488][T10564] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2284'. [ 191.183450][T10567] FAULT_INJECTION: forcing a failure. [ 191.183450][T10567] name failslab, interval 1, probability 0, space 0, times 0 [ 191.196251][T10567] CPU: 0 UID: 0 PID: 10567 Comm: syz.7.2285 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 191.196280][T10567] Tainted: [W]=WARN [ 191.196286][T10567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.196298][T10567] Call Trace: [ 191.196304][T10567] [ 191.196311][T10567] __dump_stack+0x1d/0x30 [ 191.196334][T10567] dump_stack_lvl+0xe8/0x140 [ 191.196356][T10567] dump_stack+0x15/0x1b [ 191.196491][T10567] should_fail_ex+0x265/0x280 [ 191.196522][T10567] should_failslab+0x8c/0xb0 [ 191.196604][T10567] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 191.196697][T10567] ? __alloc_skb+0x101/0x320 [ 191.196778][T10567] __alloc_skb+0x101/0x320 [ 191.196808][T10567] netlink_alloc_large_skb+0xbf/0xf0 [ 191.196838][T10567] netlink_sendmsg+0x3cf/0x6b0 [ 191.196857][T10567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.196875][T10567] __sock_sendmsg+0x145/0x180 [ 191.196936][T10567] ____sys_sendmsg+0x31e/0x4e0 [ 191.196960][T10567] ___sys_sendmsg+0x17b/0x1d0 [ 191.196992][T10567] __x64_sys_sendmsg+0xd4/0x160 [ 191.197012][T10567] x64_sys_call+0x191e/0x3000 [ 191.197030][T10567] do_syscall_64+0xd2/0x200 [ 191.197097][T10567] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 191.197121][T10567] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 191.197150][T10567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.197247][T10567] RIP: 0033:0x7fbdd53cf749 [ 191.197288][T10567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.197304][T10567] RSP: 002b:00007fbdd3e2f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.197320][T10567] RAX: ffffffffffffffda RBX: 00007fbdd5625fa0 RCX: 00007fbdd53cf749 [ 191.197357][T10567] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 191.197368][T10567] RBP: 00007fbdd3e2f090 R08: 0000000000000000 R09: 0000000000000000 [ 191.197379][T10567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.197389][T10567] R13: 00007fbdd5626038 R14: 00007fbdd5625fa0 R15: 00007ffc6df3c148 [ 191.197405][T10567] [ 191.476225][T10577] loop7: detected capacity change from 0 to 512 [ 191.491991][T10577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.510053][T10577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.540559][T10577] ext4 filesystem being mounted at /384/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.557009][T10577] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2289'. [ 191.576343][ T4471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.647857][ T4538] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.694010][T10583] loop3: detected capacity change from 0 to 512 [ 191.736858][T10583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.768370][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.003285][T10604] loop6: detected capacity change from 0 to 512 [ 192.015154][T10604] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2297: bg 0: block 35: padding at end of block bitmap is not set [ 192.030062][T10604] EXT4-fs (loop6): Remounting filesystem read-only [ 192.036644][T10604] EXT4-fs (loop6): 1 truncate cleaned up [ 192.043116][T10604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.083523][ T4471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.102955][T10607] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 192.110811][T10607] SELinux: failed to load policy [ 192.134761][T10609] FAULT_INJECTION: forcing a failure. [ 192.134761][T10609] name failslab, interval 1, probability 0, space 0, times 0 [ 192.147407][T10609] CPU: 0 UID: 0 PID: 10609 Comm: syz.6.2299 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 192.147486][T10609] Tainted: [W]=WARN [ 192.147490][T10609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 192.147497][T10609] Call Trace: [ 192.147501][T10609] [ 192.147505][T10609] __dump_stack+0x1d/0x30 [ 192.147519][T10609] dump_stack_lvl+0xe8/0x140 [ 192.147531][T10609] dump_stack+0x15/0x1b [ 192.147541][T10609] should_fail_ex+0x265/0x280 [ 192.147660][T10609] should_failslab+0x8c/0xb0 [ 192.147689][T10609] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 192.147718][T10609] ? __alloc_skb+0x101/0x320 [ 192.147767][T10609] __alloc_skb+0x101/0x320 [ 192.147784][T10609] netlink_alloc_large_skb+0xbf/0xf0 [ 192.147802][T10609] netlink_sendmsg+0x3cf/0x6b0 [ 192.147815][T10609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.147872][T10609] __sock_sendmsg+0x145/0x180 [ 192.147887][T10609] ____sys_sendmsg+0x31e/0x4e0 [ 192.147899][T10609] ___sys_sendmsg+0x17b/0x1d0 [ 192.147996][T10609] __x64_sys_sendmsg+0xd4/0x160 [ 192.148009][T10609] x64_sys_call+0x191e/0x3000 [ 192.148022][T10609] do_syscall_64+0xd2/0x200 [ 192.148034][T10609] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 192.148093][T10609] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 192.148112][T10609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.148124][T10609] RIP: 0033:0x7f910699f749 [ 192.148133][T10609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.148160][T10609] RSP: 002b:00007f9105407038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.148172][T10609] RAX: ffffffffffffffda RBX: 00007f9106bf5fa0 RCX: 00007f910699f749 [ 192.148201][T10609] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 192.148209][T10609] RBP: 00007f9105407090 R08: 0000000000000000 R09: 0000000000000000 [ 192.148215][T10609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.148223][T10609] R13: 00007f9106bf6038 R14: 00007f9106bf5fa0 R15: 00007ffd5bf511c8 [ 192.148234][T10609] [ 192.371645][T10611] loop6: detected capacity change from 0 to 1024 [ 192.379062][T10611] ext4: Unknown parameter 'fsuuid' [ 192.478390][T10619] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2304'. [ 192.488298][T10619] syz_tun: entered allmulticast mode [ 192.488973][T10618] syz_tun: left allmulticast mode [ 192.561403][T10626] loop6: detected capacity change from 0 to 512 [ 192.574444][T10626] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #11: comm syz.6.2303: ea_inode with extended attributes [ 192.600204][T10626] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.2303: error while reading EA inode 11 err=-117 [ 192.613543][T10626] EXT4-fs (loop6): 1 orphan inode deleted [ 192.619825][T10626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.639925][T10628] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 192.647244][T10628] vhci_hcd: invalid port number 96 [ 192.652396][T10628] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 192.684960][T10626] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 192.719245][ T3732] Bluetooth: hci0: Frame reassembly failed (-84) [ 192.789062][T10641] loop3: detected capacity change from 0 to 512 [ 192.799015][T10641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 192.818958][T10641] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.831822][T10641] ext4 filesystem being mounted at /466/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.846923][T10641] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2311'. [ 192.919517][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.292244][ T29] kauditd_printk_skb: 1101 callbacks suppressed [ 193.292260][ T29] audit: type=1326 audit(1763956428.669:19296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 193.341915][ T4471] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.357882][ T29] audit: type=1326 audit(1763956428.669:19297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10616 comm="syz.6.2303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910699f749 code=0x7ffc0000 [ 193.411744][T10653] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2315'. [ 193.424636][T10653] batadv1: entered promiscuous mode [ 193.425764][ T29] audit: type=1326 audit(1763956428.799:19298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.7.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 193.429985][T10653] batadv1: entered allmulticast mode [ 193.458997][ T29] audit: type=1326 audit(1763956428.839:19299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.7.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 193.482671][ T29] audit: type=1326 audit(1763956428.839:19300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.7.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 193.506260][ T29] audit: type=1326 audit(1763956428.839:19301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.7.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 193.529724][ T29] audit: type=1326 audit(1763956428.839:19302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.7.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdd53cf749 code=0x7ffc0000 [ 193.553405][ T29] audit: type=1326 audit(1763956428.839:19303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.7.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdd53d1667 code=0x7ffc0000 [ 193.576975][ T29] audit: type=1326 audit(1763956428.839:19304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.7.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fbdd53d15dc code=0x7ffc0000 [ 193.600501][ T29] audit: type=1326 audit(1763956428.839:19305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10654 comm="syz.7.2316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fbdd53d1514 code=0x7ffc0000 [ 193.695989][T10655] program syz.7.2316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.722278][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.746680][T10657] program syz.7.2316 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.005078][T10668] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3600 sclass=netlink_route_socket pid=10668 comm=syz.7.2321 [ 194.360858][T10689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2328'. [ 194.391515][T10689] batadv0: entered promiscuous mode [ 194.396739][T10689] batadv0: entered allmulticast mode [ 194.705139][T10708] loop7: detected capacity change from 0 to 1024 [ 194.705338][T10710] loop3: detected capacity change from 0 to 512 [ 194.731341][T10708] ext4: Unknown parameter 'fsuuid' [ 194.740918][ T4600] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 194.770537][T10710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.810534][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.862188][T10704] netlink: 'syz.0.2334': attribute type 5 has an invalid length. [ 194.921162][T10719] loop3: detected capacity change from 0 to 512 [ 194.957962][T10719] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.028086][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.079612][T10728] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 195.093015][T10728] vhci_hcd: invalid port number 96 [ 195.098292][T10728] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 195.106749][T10733] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2343'. [ 195.127814][T10735] loop6: detected capacity change from 0 to 512 [ 195.134423][T10735] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.150306][T10735] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2344'. [ 195.258159][T10738] loop6: detected capacity change from 0 to 1024 [ 195.265207][T10738] ext4: Unknown parameter 'fsuuid' [ 195.311783][T10745] loop6: detected capacity change from 0 to 1024 [ 195.321030][T10745] ext4: Unknown parameter 'fsuuid' [ 195.442314][T10757] loop2: detected capacity change from 0 to 512 [ 195.449560][T10757] ================================================================== [ 195.457653][T10757] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event [ 195.466424][T10757] [ 195.468733][T10757] write to 0xffff8881322c4814 of 4 bytes by task 3304 on cpu 0: [ 195.476346][T10757] fsnotify_detach_mark+0xba/0x160 [ 195.481446][T10757] fsnotify_destroy_mark+0x70/0x150 [ 195.486633][T10757] __se_sys_inotify_rm_watch+0xe8/0x170 [ 195.492176][T10757] __x64_sys_inotify_rm_watch+0x31/0x40 [ 195.497712][T10757] x64_sys_call+0x2e95/0x3000 [ 195.502375][T10757] do_syscall_64+0xd2/0x200 [ 195.506861][T10757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.512739][T10757] [ 195.515043][T10757] read to 0xffff8881322c4814 of 4 bytes by task 10757 on cpu 1: [ 195.522654][T10757] inotify_handle_inode_event+0x34e/0x3d0 [ 195.528449][T10757] fsnotify_handle_inode_event+0x1c0/0x220 [ 195.534243][T10757] fsnotify+0x13cf/0x14b0 [ 195.538558][T10757] __fsnotify_parent+0x2ed/0x330 [ 195.543483][T10757] __fput+0x1de/0x650 [ 195.547444][T10757] fput_close_sync+0x6e/0x120 [ 195.552103][T10757] __x64_sys_close+0x56/0xf0 [ 195.556678][T10757] x64_sys_call+0x273c/0x3000 [ 195.561338][T10757] do_syscall_64+0xd2/0x200 [ 195.565826][T10757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.571701][T10757] [ 195.574007][T10757] value changed: 0x00000003 -> 0x00000000 [ 195.579702][T10757] [ 195.582004][T10757] Reported by Kernel Concurrency Sanitizer on: [ 195.588137][T10757] CPU: 1 UID: 0 PID: 10757 Comm: syz.2.2352 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 195.599494][T10757] Tainted: [W]=WARN [ 195.603276][T10757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 195.613316][T10757] ================================================================== [ 195.639842][T10760] netlink: 256 bytes leftover after parsing attributes in process `syz.6.2354'. [ 195.640506][T10757] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.675053][T10757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.688110][T10757] ext4 filesystem being mounted at /467/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.704149][T10757] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2352'. [ 195.775321][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.