last executing test programs: 4m9.960975549s ago: executing program 32 (id=512): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xfffffffffffffbff}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 4m5.903630055s ago: executing program 33 (id=586): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040041}, 0x44000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) io_uring_setup(0x49a9, &(0x7f0000000580)={0x0, 0x96ae, 0x20, 0x4, 0x4}) 3m58.23211473s ago: executing program 34 (id=716): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a0000000000000000000008080004", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x6, {0x0, 0x1}, {0x45, 0x2}, @period={0x59, 0x200, 0x4, 0x7, 0x0, {0xffff, 0xf, 0x4, 0x5}, 0x0, 0x0}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESDEC, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='xen_mmu_release_ptpage\x00', r6, 0x0, 0x8}, 0x18) syz_usb_disconnect(r5) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x40095505, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000002140), 0x8) unshare(0x22020600) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) getdents64(0xffffffffffffffff, 0x0, 0x0) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="280000004e0000000100ffff010000000100000000000000020000000600000000000000cb0000000700000000000000"], &(0x7f0000000180), 0x1200) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000000), &(0x7f00000000c0)=0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000007000000be0000000100000010130000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffffffff0000000000000000000000000000000000000000b823e26d131cf809d21e51c990aafb4599c70b2639d841feecd1bd156ab3f992c1a858426d75d4c03c7c343170e924a2779d9c09d7532f5ab70706e53d6ae39c1c24467821bde6ead136def4f28c6bce00009989f668b3e706da5ed1fd71a9f7862c1a682dc6531d085b7513b4977539a004c359bd5c955949a759aa6a0dabc5fe43495353d23c0235f32b9c059256a6f81965120e6ec700b870ea6655b3d72179b7634f36731bbef6f5fdb738b68c63dbc80000"], 0x50) preadv(0xffffffffffffffff, &(0x7f0000000540), 0x10000000000002be, 0x0, 0x0) 3m55.370507759s ago: executing program 35 (id=764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b208850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000010000000000000000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x4f7a, &(0x7f0000000180)=""/226, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0xffff, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x1, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x800, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3a4f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x894e, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x319e, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a183000000000000000005000000080003"], 0x78}}, 0x0) 3m52.461795779s ago: executing program 36 (id=811): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x10000004, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xa, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4dcfaf93efe3d4794ff00000002711047000000f4ff"], &(0x7f0000000480)='GPL\x00'}, 0x80) r3 = syz_open_dev$loop(&(0x7f0000000d80), 0x1c, 0x101100) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000dc0)=0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x7}, 0x8164, 0x10000, 0x2, 0x1, 0x8, 0x200, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040004) setreuid(0x0, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r6 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_timedsend(r6, &(0x7f0000036600)="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"/4312, 0x10d8, 0x40, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x103000, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000102010100000000000000000a000000240001800c00028d52afb0c9a5dbc380050001"], 0x38}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r8], 0xb8}, 0x1, 0x0, 0x0, 0x4001}, 0x0) recvfrom$x25(r7, &(0x7f00000002c0)=""/238, 0xee, 0x100, &(0x7f0000000200), 0x12) mq_timedreceive(r6, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f000001a240)={0x0, "41bef1ec2d9f637c287a0a0425ca1cff"}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f000001b240)={r10, 0x7fffffff, 0x3, 0x1}) r11 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r11, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 3m49.145678965s ago: executing program 37 (id=867): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x447}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0x7000000) 3m49.026359236s ago: executing program 38 (id=870): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x6}, 0x18) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x10000}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64], 0x38}}, 0x10) 3m46.781281297s ago: executing program 39 (id=889): socket(0x2, 0x80805, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x3e, 0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='\a\x00\x00\x00'], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE(r1, &(0x7f00000007c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000440)=""/103, 0x67, 0x4, 0xffffffc7, 0x10001, 0x8, 0xc74}}, 0x120) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0xeb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x4, 0xfffffffc, 0xfffffffd}, {}, {0x0, 0xfffffffd}, {0x7, 0x0, 0x0, 0x8}, {0x0, 0x10, 0x0, 0x25}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {}, {0x0, 0x0, 0x5799}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {}, {}, {0x6}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x9, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5a9}, {}, {0x0, 0x0, 0x0, 0x7, 0xffffffff}, {0x0, 0x80}, {}, {0x0, 0xfe}, {0x4, 0x0, 0x0, 0xfffffffe}, {}, {0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7ff}, {0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x81, 0x0, 0xfffffe00}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x9}, {0x9}, {}, {0x3}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {0x0, 0x0, 0x1}, {0x0, 0xdd86}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffe00}, {0x0, 0x80000}, {}, {0x0, 0x8}, {0x80000000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {0x4}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xe}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x7}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xeb4}}, 0x0) 3m46.413967462s ago: executing program 40 (id=891): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000040000000c0000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000008d00)=ANY=[@ANYBLOB="1b0000000000000000000000c72c000000000000", @ANYRES32, @ANYBLOB='\a@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000008e00)={0x19, 0x14, &(0x7f0000008740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000005bc0)='syzkaller\x00', 0xfffffffb, 0x4d, &(0x7f0000008800)=""/77, 0x41100, 0x45, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000008d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1], &(0x7f0000008dc0)=[{0x3, 0x5, 0x10, 0x8}], 0x10, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e0000008500000050"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x9) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={0x0, r4}, 0x18) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a01010000000000000000020000080900020073797a32000000000900010073797a30000000000c0003400000000000000002140000001100e5"], 0x60}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000040), &(0x7f0000000080)=r7}, 0x20) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xa}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) r8 = socket$packet(0x11, 0x3, 0x300) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000980), &(0x7f00000023c0)=0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @broadcast}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_add_memb(r8, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002480)=@getchain={0x2c, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xd, 0x1}}, [{0x8, 0xb, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 3m44.474879109s ago: executing program 41 (id=900): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) syz_usbip_server_init(0x5) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[], 0x15) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x20040080) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) lstat(0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@sr0, r5, &(0x7f00000004c0)='./file0\x00') write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 3m42.513104356s ago: executing program 42 (id=911): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x8) sendto$inet6(r1, 0x0, 0x3e, 0x8, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001a00)=[{{&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000600)=""/98, 0x62}, 0x50}, {{&(0x7f0000000900)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000a00)=[{&(0x7f0000000980)=""/55, 0x37}, {&(0x7f00000009c0)=""/13, 0xd}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000001900)=""/157, 0x9d}], 0x4, &(0x7f00000019c0)=""/38, 0x26}, 0xf}], 0x2, 0x40002120, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_CREATE(r4, &(0x7f00000007c0)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000440)=""/103, 0x67, 0x4, 0xffffffc7, 0x10001, 0x8, 0xc74}}, 0x120) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendto$packet(r8, 0x0, 0x0, 0x40, &(0x7f0000000240)={0x11, 0xf7, r9, 0x1, 0x2, 0x6, @link_local}, 0x14) setsockopt$sock_attach_bpf(r6, 0x10f, 0x8a, &(0x7f0000000300), 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00'}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0xeb4, 0x30, 0x1, 0x0, 0x0, {}, [{0xea0, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0xfffffffe}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x8}, [{}, {0x0, 0x4, 0x80000000, 0x0, 0x3}, {0x0, 0x0, 0xffffffff}, {0x1, 0x0, 0x0, 0x7fff, 0x0, 0xfffffffd}, {}, {0x4, 0xfffffffc, 0xfffffffd}, {}, {0x0, 0xfffffffd}, {0x7, 0x0, 0x0, 0x8}, {0x0, 0x10, 0x0, 0x25}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x8}, {}, {}, {0x0, 0x0, 0x5799}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0xeffffffd, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x9, 0x2, 0xa46}, {}, {}, {0x6}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x1c69, 0x100}, {0x0, 0x0, 0x10000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x20, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x7, 0x9, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x6}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5a9}, {}, {0x0, 0x0, 0x0, 0x7, 0xffffffff}, {0x0, 0x80}, {}, {0x0, 0xfe}, {0x4, 0x0, 0x0, 0xfffffffe}, {}, {0x400}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff7ff}, {0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x1, 0x8000}, {0x0, 0x3}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8001}, {0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x2400000}, {0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x81, 0x0, 0xfffffe00}, {}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x9}, {0x9}, {}, {0x3}, {}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, {0x400}, {0x0, 0xfffffffd}, {0x0, 0xffffffff}, {0x0, 0x0, 0xabd}, {0x0, 0x0, 0x1}, {0x0, 0xdd86}, {0xfffffffd}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {0x40000, 0x0, 0x0, 0x0, 0x0, 0x451d}, {}, {0x0, 0x0, 0x0, 0x0, 0x40000}, {0x4}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffe, 0xfffffe00}, {0x0, 0x80000}, {}, {0x0, 0x8}, {0x80000000, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x212, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {0x4}, {}, {}, {}, {0x2}, {0x4}, {0x3}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x5}, {0x4}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xe}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {0x7}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xeb4}}, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r5) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x005', @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 3m41.773103866s ago: executing program 43 (id=925): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @const={0x0, {0x0, 0x3400}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2a9000, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000000)={0x1, 0x0, 0x0}) write$char_usb(r1, &(0x7f0000000040)="e2", 0xff0f) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x1409, 0x1, 0x70bd29, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x40040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r5}, 0x10) sync_file_range(0xffffffffffffffff, 0xffffffffffff0001, 0x7, 0x2) getsockopt$inet6_tcp_int(r3, 0x6, 0x2, 0x0, &(0x7f0000000500)) r7 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x17, 0x40, 0x6, 0x0, 0x0, 0x10609, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0xffff, 0x8, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r7, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r8 = syz_open_dev$sg(&(0x7f0000001600), 0x1ff, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f00000000c0)=ANY=[]) 3m37.405319806s ago: executing program 44 (id=978): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0xfffffffffffffbff}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x3, 0x2, &(0x7f0000fd7ff0), 0x0, 0xfffffffd) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x100000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 3m19.63870295s ago: executing program 45 (id=1402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) shutdown(0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={0x0, r1}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xf7, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800479c4ebbbc124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b62063cb94aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d4755dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff40000", 0x0, 0x24, 0x60000000, 0x1, 0x0, &(0x7f0000000000)='\x00'}, 0x50) 3m17.283241152s ago: executing program 46 (id=1063): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r0, &(0x7f0000000a40)={0x2, 0x4e22, @remote}, 0x24) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x8, &(0x7f0000000180)=[{0x400, 0x9, 0x9, 0x7}, {0x4, 0x9, 0x1, 0x80000001}, {0x3, 0x8, 0x7, 0x221}, {0x4, 0xe, 0x40, 0x9}, {0x5, 0x80, 0xe, 0x3ff}, {0x6, 0x4, 0x9, 0x3}, {0x4, 0x0, 0xb7, 0x200}, {0x6, 0x5, 0x6}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000400), &(0x7f0000000440)=r8}, 0x20) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 1m4.548590934s ago: executing program 47 (id=4284): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9) (fail_nth: 1) 1m4.215357129s ago: executing program 5 (id=4293): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000780)={[{@bsdgroups}, {@nodiscard}, {@oldalloc}, {@grpjquota}, {@nobarrier}, {@noquota}, {@abort}, {@nodiscard}, {@nodiscard}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") 1m2.205856816s ago: executing program 5 (id=4311): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000031c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20c4, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x206c, 0x3, 0x0, 0x1, [{0x414, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3d0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "48e0cd68839bee487af1265b2435369cd198f7e1749abc6f63d74ee5356fdb91778465b48d5e320ab84e567e8964470f987701ff2d2e0124c68f323f27c43d28c233766ff0d49aab1af6b84259bf540043e3533027f69788451da818ba3b1dc3a553c93598cabac105de05bb3d2058ccaf6b893030ae7e20484eca3962ce4995bd29d067273f2b6a90eb8b3c48d23e1d638e2ee68314bacd118acd84f35feb338ea5b0f79232b8af4af6610b1849c7cd41d84713e33bbed94ffc344a893cf36fa39f1f306dafa3c4e863b8a0745223c5b75eecd2ca96d3fea05d3609b0e5666d22b6d0ce7ed90ac09c"}, @NFTA_DATA_VALUE={0x8f, 0x1, "4ffadf69bbfc8f34d8c620a05fbe7927745715ee052665a8678dc6042acd01a51cb0bd74d545dbf6e54b8c906b2faa16ae9cd4d5233ba0afb334dd44f65ce8b2f7c7105aa1a704c2b38a01399cbcea66fb3e8c02a3aa4b3609a07028a27d8979aa15b01617d961b64d1f8ae1aee6d98f024e65d964276ad7a37130150078b2875b7aebea43b28920295902"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x90, 0x1, "6efeec10c3b710c626e8bd9955818010c6da1635ba3920f95fdad6e4199c1ee0ae672abd7c67f33aa20cb3392aa911c2cdea1adc7f51d9aafb7335a0ead3c5b3bb4849c7b4bd6648e71676c66dc01d4dc7fa02cfe5496451fcd313cda4d9ff44dc381166a9855f0cf8cb689eb441424026356beed1014cd8d21533e4308f72c18ae31899b2c8a9313f46e606"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "d1e4588c237a78263013cb49ceb1e09d0a46641d73fc3d9a4ea72ef7711f1c0657e9661bada1e83ba57218c81b9de56f247d842250f46cb1f941b50eb677d2a96772e86af0c1e6ef2ee06a60b8f67b0ef83a414237d6573c751d19b462ed1b878c2315c10eb314a9f30d997c12a81a135e87bc07a51d2027abd42d400398c980a9ef0a01ffd172b97b3029fa2346f30ef6dd5e252d982b2618dbb69a55153b91537a69da9fd63f00e5d6ac227ffeb85e75a9adf5bdcfb115b0f9cc1236706982edad970d17bfb67333234b0b0e3a81467c64981edab04c3e48ae7257af440f2ded1b5db762"}]}, @NFTA_SET_ELEM_USERDATA={0x40, 0x6, 0x1, 0x0, "b6aac1a9bab2d330a55b6fe3b9cd33657b76e4f33491b30ca8e8ba8ff6c4d96f9b6ff20eb28ef75ea82fbadd35cb4368338f3540ce530b4e8b2984d9"}]}, {0x45c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x90, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd51}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x1c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x80, 0x1, "3e5942155f3a928dd7b25657a055113243c63e0cc2ee6ca09df36a031eb7e606cc44a9e951e29a7adbd79fff01b4b9101243f0c35d89b5ecd26f8309a65d04a7d88887475cc2ea3193cd553c2cbbbc20b5a5606edc5b50929ed75c14b0b75e3a9b6cedc435f6a234d92bc2c5e46bc1facacddd5dfcaab62c4fd7881d"}, @NFTA_DATA_VALUE={0x75, 0x1, "a0f67edef8ee3218627d6a376d279c1085dc25f5d8e397b22c5b41f3030e4b2bd6b9e93ed653ff6453e5078c762d8b6e362d970729009e29156968dc352643afc8ab855b981393060d967c462fded0be691e8a442b4ab0b8b2ae8a0e8fe406ed69966e11f65c362daa1b32a04737c7a957"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x1b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x98, 0x1, "c4245b339faa21c2d175a39bc863a89543bbd3fb69a3046dd8f82966f85a73b327402fd51adf3ca19d4d8eda72a7a3811f2a327efb6b39927bbaabb3a1838eb280fc61687d376a27d097499985d63a6635c056e44ed184585622f13f2db862c1118a3d62ba066965086f7ae74a8176a8e7aa0be986b0ce29422c2da79691aa0b5d142c1e121b40cd440c60e5cfdc771412cd4ed8"}, @NFTA_DATA_VALUE={0xba, 0x1, "ca13f88f19d2c65095da507d0f1891b6b22ef7c5c65c1076af1929db687698b1902b3af8abfaba93ef09a8222515a775e64eb83ca0d14f7fcd20bf2e20f429e7484ac11ded85bcf72c356ee09765e361b9a5893dcd9f9d8ad7fcb1fd186ebcc296fcb37eaa64b7dd9af5c9d59cf79eb2dacf8ad23c65c657f1b16fcc65dde2861a040aa5bff827e192300f1a5a62a87465172a2d5116e8016bf19bff4bfd9c671b6c376f515aad6f02ba9b43df23707c2b4caa1f6287"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xb, 0x1, "6deae281bdeca6"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x79, 0x1, "b8bfa2c624b426abfce6b46d07a9414df20871321d3f0ece1dc8db2645fd9d81900846236ccb1f7844e609708363302d216e5058b863a8cbdb03cf8d8b8008befa397d79e1ce6c3f7f5999711fb53207f5ad50a03ec15663b4a7d4d20b655c705a26d2ec0b28b1996c5f39465fe925c6ca40ab8b4f"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x9a, 0x6, 0x1, 0x0, "ba374bf2391e14f7069586d86d4f88497403897a7d9dad5680d3e58cc767f61316f11666f0614ed8f581a8a511e6a833747483b320e4368208bb810097498da6bfaa121017cd969f126daef185e947e39cdb696e1f54433f80e0f705a0afc423fb6c520c23d538e8649793ccfebe221feae4443ec288fda6fbd83f7cb9a47b548d14f017a95dabf2229c393ff8033a1fc7be9436afc0"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x149c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xb0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xac, 0x1, "6d75702e6b5f9b5b5a111771c71e919bd57478944087515bb8728dfeccf2ecf70616501c3e4257c0cf6d598b7115ee86368a5700347f108ebc94e9fb85441d181cffd528c311cdac34eaf57619f307690b83c307bd1209e8090a3d1c2aa844dd447b03ddf936d80b48593db55e67ed7080482538ab63c57599f7d34c8cd2b3b6d1a8ef851b8dfa07972f46fe8f2e4c2724a9448b0d085101146a0609b1472a2144f7a921f7413a7b"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x96, 0x6, 0x1, 0x0, "03bd83a8926d2a5f096c9d28f4d40df0bdbbf2ac2d387ea3a4f83a3181b401952bd4b60959323867497d2a1d9a8ff41b7cc5a0dbae3ff9200a9bba2b88abf2e755c7b3e7d8411f06ee758be3a08a0731931b45e815095c3e8bd0b2421c00bd775affe1743a25cda7eb19fa257799ff14c2ae25d93aa6a8ea0a089054a81f5c59e1e08a36f335c987391a2c685634e5bda2c2"}, @NFTA_SET_ELEM_KEY={0x1198, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "afff9a2da13483fbb77d632042cd7e35ba5cd3d73287c861b437458d11db9d0898663fee11a921acbb20e62f499c9db505e553ba1a67804fdee9e8e4d6fcb883eca208b5db5730392f46d4e26795a45e97edc13f8c9aabaac840"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DIRECTION={0x5}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "62d326be460654a37dabff8cd53e8fddba797042df061d97d6849540135e04565ea2fc47da753492aa463374a852b0487b0305df3455c96c1e7444601b81d3958d635c0d8eed103e894501f0cc251de0c2f64ecc7f384d10ea7e9bbd937d48b77bd16e9dee6e710e19f64758a05293f9d7ee0d6877a8620bbb312254a4e6e6488a0a942ba1702665c8c7e838d16d4e678131a4938247fe4892b3b83fc1359f2b6c7184c4bfdc47d24c98dd9b3b0d3aa023baa361e6c5894a45f30be5043c5a99dd935f6cb0a95c40339e655e3f9e462fc3e48ba3c7a7e19eb2989ed672480981b1d72db56e19f7b4d223c575"}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xac, 0x6, 0x1, 0x0, "d03b893d36b7f83aa187ded26430f2833a60e21ac760bb3f128fc8cb0234b5ad6d9714a94808b855b66cf0e366395f64a13a65b4b427ccf4660caca0bb500bde50f7a498d39a7650231cb4390df46ea0cd0bd0b1431c444b2574f5dc069ee3aad2d3e7d359936a94cef161cc572b24228b8d8438567b9c0713e9d48c4533bfaa430d543aa964fb475a67d2667d72937a0e8f740ae1a79547e11af84ba702579ec32f560421bb7e86"}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x20ec}}, 0x20008844) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r6}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r9, 0x6f, &(0x7f0000001040)}, 0x10) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x302408, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") 1m1.777520792s ago: executing program 5 (id=4315): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000031c0)={{0x14}, [@NFT_MSG_DELSETELEM={0x20c4, 0xe, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x206c, 0x3, 0x0, 0x1, [{0x414, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x3d0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "48e0cd68839bee487af1265b2435369cd198f7e1749abc6f63d74ee5356fdb91778465b48d5e320ab84e567e8964470f987701ff2d2e0124c68f323f27c43d28c233766ff0d49aab1af6b84259bf540043e3533027f69788451da818ba3b1dc3a553c93598cabac105de05bb3d2058ccaf6b893030ae7e20484eca3962ce4995bd29d067273f2b6a90eb8b3c48d23e1d638e2ee68314bacd118acd84f35feb338ea5b0f79232b8af4af6610b1849c7cd41d84713e33bbed94ffc344a893cf36fa39f1f306dafa3c4e863b8a0745223c5b75eecd2ca96d3fea05d3609b0e5666d22b6d0ce7ed90ac09c"}, @NFTA_DATA_VALUE={0x8f, 0x1, "4ffadf69bbfc8f34d8c620a05fbe7927745715ee052665a8678dc6042acd01a51cb0bd74d545dbf6e54b8c906b2faa16ae9cd4d5233ba0afb334dd44f65ce8b2f7c7105aa1a704c2b38a01399cbcea66fb3e8c02a3aa4b3609a07028a27d8979aa15b01617d961b64d1f8ae1aee6d98f024e65d964276ad7a37130150078b2875b7aebea43b28920295902"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x90, 0x1, "6efeec10c3b710c626e8bd9955818010c6da1635ba3920f95fdad6e4199c1ee0ae672abd7c67f33aa20cb3392aa911c2cdea1adc7f51d9aafb7335a0ead3c5b3bb4849c7b4bd6648e71676c66dc01d4dc7fa02cfe5496451fcd313cda4d9ff44dc381166a9855f0cf8cb689eb441424026356beed1014cd8d21533e4308f72c18ae31899b2c8a9313f46e606"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0xe9, 0x1, "d1e4588c237a78263013cb49ceb1e09d0a46641d73fc3d9a4ea72ef7711f1c0657e9661bada1e83ba57218c81b9de56f247d842250f46cb1f941b50eb677d2a96772e86af0c1e6ef2ee06a60b8f67b0ef83a414237d6573c751d19b462ed1b878c2315c10eb314a9f30d997c12a81a135e87bc07a51d2027abd42d400398c980a9ef0a01ffd172b97b3029fa2346f30ef6dd5e252d982b2618dbb69a55153b91537a69da9fd63f00e5d6ac227ffeb85e75a9adf5bdcfb115b0f9cc1236706982edad970d17bfb67333234b0b0e3a81467c64981edab04c3e48ae7257af440f2ded1b5db762"}]}, @NFTA_SET_ELEM_USERDATA={0x40, 0x6, 0x1, 0x0, "b6aac1a9bab2d330a55b6fe3b9cd33657b76e4f33491b30ca8e8ba8ff6c4d96f9b6ff20eb28ef75ea82fbadd35cb4368338f3540ce530b4e8b2984d9"}]}, {0x45c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x90, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xd51}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_FLAGS={0x8}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_LOOKUP_SET_ID={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0x1c8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x80, 0x1, "3e5942155f3a928dd7b25657a055113243c63e0cc2ee6ca09df36a031eb7e606cc44a9e951e29a7adbd79fff01b4b9101243f0c35d89b5ecd26f8309a65d04a7d88887475cc2ea3193cd553c2cbbbc20b5a5606edc5b50929ed75c14b0b75e3a9b6cedc435f6a234d92bc2c5e46bc1facacddd5dfcaab62c4fd7881d"}, @NFTA_DATA_VALUE={0x75, 0x1, "a0f67edef8ee3218627d6a376d279c1085dc25f5d8e397b22c5b41f3030e4b2bd6b9e93ed653ff6453e5078c762d8b6e362d970729009e29156968dc352643afc8ab855b981393060d967c462fded0be691e8a442b4ab0b8b2ae8a0e8fe406ed69966e11f65c362daa1b32a04737c7a957"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x1b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x98, 0x1, "c4245b339faa21c2d175a39bc863a89543bbd3fb69a3046dd8f82966f85a73b327402fd51adf3ca19d4d8eda72a7a3811f2a327efb6b39927bbaabb3a1838eb280fc61687d376a27d097499985d63a6635c056e44ed184585622f13f2db862c1118a3d62ba066965086f7ae74a8176a8e7aa0be986b0ce29422c2da79691aa0b5d142c1e121b40cd440c60e5cfdc771412cd4ed8"}, @NFTA_DATA_VALUE={0xba, 0x1, "ca13f88f19d2c65095da507d0f1891b6b22ef7c5c65c1076af1929db687698b1902b3af8abfaba93ef09a8222515a775e64eb83ca0d14f7fcd20bf2e20f429e7484ac11ded85bcf72c356ee09765e361b9a5893dcd9f9d8ad7fcb1fd186ebcc296fcb37eaa64b7dd9af5c9d59cf79eb2dacf8ad23c65c657f1b16fcc65dde2861a040aa5bff827e192300f1a5a62a87465172a2d5116e8016bf19bff4bfd9c671b6c376f515aad6f02ba9b43df23707c2b4caa1f6287"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x1c4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xb, 0x1, "6deae281bdeca6"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x79, 0x1, "b8bfa2c624b426abfce6b46d07a9414df20871321d3f0ece1dc8db2645fd9d81900846236ccb1f7844e609708363302d216e5058b863a8cbdb03cf8d8b8008befa397d79e1ce6c3f7f5999711fb53207f5ad50a03ec15663b4a7d4d20b655c705a26d2ec0b28b1996c5f39465fe925c6ca40ab8b4f"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x9a, 0x6, 0x1, 0x0, "ba374bf2391e14f7069586d86d4f88497403897a7d9dad5680d3e58cc767f61316f11666f0614ed8f581a8a511e6a833747483b320e4368208bb810097498da6bfaa121017cd969f126daef185e947e39cdb696e1f54433f80e0f705a0afc423fb6c520c23d538e8649793ccfebe221feae4443ec288fda6fbd83f7cb9a47b548d14f017a95dabf2229c393ff8033a1fc7be9436afc0"}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @byteorder={{0xe}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x4}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x149c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xb0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xac, 0x1, "6d75702e6b5f9b5b5a111771c71e919bd57478944087515bb8728dfeccf2ecf70616501c3e4257c0cf6d598b7115ee86368a5700347f108ebc94e9fb85441d181cffd528c311cdac34eaf57619f307690b83c307bd1209e8090a3d1c2aa844dd447b03ddf936d80b48593db55e67ed7080482538ab63c57599f7d34c8cd2b3b6d1a8ef851b8dfa07972f46fe8f2e4c2724a9448b0d085101146a0609b1472a2144f7a921f7413a7b"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0x96, 0x6, 0x1, 0x0, "03bd83a8926d2a5f096c9d28f4d40df0bdbbf2ac2d387ea3a4f83a3181b401952bd4b60959323867497d2a1d9a8ff41b7cc5a0dbae3ff9200a9bba2b88abf2e755c7b3e7d8411f06ee758be3a08a0731931b45e815095c3e8bd0b2421c00bd775affe1743a25cda7eb19fa257799ff14c2ae25d93aa6a8ea0a089054a81f5c59e1e08a36f335c987391a2c685634e5bda2c2"}, @NFTA_SET_ELEM_KEY={0x1198, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x5e, 0x1, "afff9a2da13483fbb77d632042cd7e35ba5cd3d73287c861b437458d11db9d0898663fee11a921acbb20e62f499c9db505e553ba1a67804fdee9e8e4d6fcb883eca208b5db5730392f46d4e26795a45e97edc13f8c9aabaac840"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPR={0x28, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8}, @NFTA_CT_DIRECTION={0x5}]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_SET_ELEM_DATA={0x154, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xf0, 0x1, "62d326be460654a37dabff8cd53e8fddba797042df061d97d6849540135e04565ea2fc47da753492aa463374a852b0487b0305df3455c96c1e7444601b81d3958d635c0d8eed103e894501f0cc251de0c2f64ecc7f384d10ea7e9bbd937d48b77bd16e9dee6e710e19f64758a05293f9d7ee0d6877a8620bbb312254a4e6e6488a0a942ba1702665c8c7e838d16d4e678131a4938247fe4892b3b83fc1359f2b6c7184c4bfdc47d24c98dd9b3b0d3aa023baa361e6c5894a45f30be5043c5a99dd935f6cb0a95c40339e655e3f9e462fc3e48ba3c7a7e19eb2989ed672480981b1d72db56e19f7b4d223c575"}]}]}, {0xb0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xac, 0x6, 0x1, 0x0, "d03b893d36b7f83aa187ded26430f2833a60e21ac760bb3f128fc8cb0234b5ad6d9714a94808b855b66cf0e366395f64a13a65b4b427ccf4660caca0bb500bde50f7a498d39a7650231cb4390df46ea0cd0bd0b1431c444b2574f5dc069ee3aad2d3e7d359936a94cef161cc572b24228b8d8438567b9c0713e9d48c4533bfaa430d543aa964fb475a67d2667d72937a0e8f740ae1a79547e11af84ba702579ec32f560421bb7e86"}]}, {0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x20ec}}, 0x20008844) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r8, &(0x7f0000001000)={&(0x7f0000000080)={0x2, 0x29, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @loopback}}}], 0x20}, 0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r10, 0x6f, &(0x7f0000001040)}, 0x10) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x302408, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") 1m0.890569654s ago: executing program 5 (id=4327): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x579, &(0x7f0000000680)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0xc, &(0x7f0000000d00)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x3, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffea3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pause() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r7 = syz_clone(0x1940380, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r7) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000000c0)=0x0) rt_sigqueueinfo(r8, 0x31, &(0x7f00000003c0)={0x39, 0x9, 0x3ff}) ptrace$getsig(0x4202, r7, 0x4, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) r10 = socket(0x2, 0x80805, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYRESDEC=r3], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r10) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x8840}, 0x14000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r12}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000000), &(0x7f00000005c0)=r12}, 0x20) 59.981536956s ago: executing program 5 (id=4340): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r0, r1) sendmmsg$inet(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="316f825a3d29f96a2093a917017b4cd30000000000000035ed313e19d6dd", 0x1e}, {&(0x7f0000000640)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d7756bf4fcaff0c23374ec7c4aadbb8b985f14893a91d750e168350685e0f4f079d2d8e79be174ef9355b70719c712c5d15d2e7505a8696b50738ece15ee5", 0xbe}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25c951279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef3", 0xde}, {&(0x7f0000000500)="fff5c0293353db83a683db60266a3867d03f740f4f0a7bafe7be9b2bac0bf1b2019dbde5f640c897ac57789fb8490642b47a96f0d03ec69d1f6e90e86be7fb3ef9e76969438283b0ab8d31b707ddd3b453f5ed67232e172945aecaf6dd89d72d7a429ef6d0dcc5f0d9cc15db", 0x6c}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="d0", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[], 0x240}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='htcp\x00', 0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000001600)="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", 0x102, 0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000), 0x4) 59.401345545s ago: executing program 5 (id=4343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r2, 0x0, 0x20}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x100001f, &(0x7f0000000240)={[{@errors_remount}, {@grpquota}, {@i_version}, {@dioread_nolock}]}, 0x21, 0x457, &(0x7f00000007c0)="$eJzs3M1vG0UbAPBnbSd9274lKSof/YAGCiICkTRpgR44UAQSB5CQ4FCOIUmrULdBTZBoFUFAqBxRJQ7cEEck/gJOcEHACYkr3FGlCuXSwslo7XXiOLZTJ3ad1r+ftPKMd9qZx7tjz+zsJoC+NRIRn0XE/yPij4gYioikvsBI5eXWytL0PytL00mUSm/9nZTL3VxZmq4Wrf67veVMLmK5kj/coN6Fy1fOTxWLs5ey/PjihffHFy5feXbuwtS52XOzFydPnTp5YuKF5yef60icaZtuHvpo/sjB19659sb0mWvv/vJdkoUXdXF0yEirnU92uLJe21eTTgo9bAhtyUdEergGyv1/KPKxdvCG4tVPe9o4oKtKpVJpV/PdyyXgHpZEr1sA9Eb1hz6d/1a3OzT02BFunK5MgNK4b2VbZU8hclmZgbr5bSels60zy/9+nW7RnesQAADr/HC68rpx/JeLB2vKvZStDQ1HxP6axY0DEfFARLnsQxHxcJv11y+SbBz/5K63+V+2JR3/vZitba0f/1VHfzGcz3L7yvEPJGfnirPHI+K+iBiNgV1pfqJFHT++8vsXzfaN1Iz/0i2tvzoWzNpxvVB3gW5manFqOzHXuvFJxKFCo/iT1ZWAJCIORsSho1urY+7pb48027d5/C10YJ2p9E3EU5Xjvxx18Vclrdcnx/8Xxdnj49WzYqNff7v6ZrP6241//1erc7aOrLKlx39Pw/N/Nf7hUr5mvXah/Tqu/vl50znNVs//weTtcnowe+/DqcXFSxMRg8nr2fvpN1bsrq+vXG5yrXwa/+ixxv3//lj7JA5HRHoSPxIRj0bE0aztj0XE4xFxrEX8P7/8xHtbj7+70vhnNjn+Se16/RYS+fM/fb+u0uF24k+P/8lyajR753a+/263gdv9/AAAAOBukCvf+5/kxlbTudzYWOV++QOxJ1ecX1h85uz8BxdnKs8IDMdArnqla6jmeuhENq2v5ifr8iey68Zf5neX82PT88WZXgcPfW5vk/6f+ivf69YBXed5Lehf+j/0L/0f+ldhsNctAHqk0fP/9TdOtvgbAcDdrNH4/+MetAO488z/oX+12/8rkwNTArgX+P2H/qX/Q1/aznP93UxU1x92SnvWJUqlzcoUdkpTu5eI3I5ohkSXEj3+YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//gVfl2w==") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x447}, 0x94) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000cc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80010880}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd0000ffdbdfadd6c773a77a4d3e00ac1414aa080001001e2b43661da3062daf34eff0c3520c3756b06972b26d0f1824786b5e81bd66687607304c6ac998ac4d47b98edac18f019ae85de4866c52ec42dadfc0040b51930162d41bd0594ff4d9a3d8f9ba2ae8316d1204962789349ba320b9e7bb8eef98782c049eb5aa41431e58cd", @ANYRES32, @ANYBLOB="14000c00200100000000000000000000000000000800080002000000"], 0x40}}, 0x28804) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/tcp\x00') sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xe}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd70000000000001000000080701000300000014000490050003000100000005000300800000000800020002000000f55e4ea3abdfe05cfb59fd0ab3c5fd59c2bead292ebf55cc841ce3de656576a4ed415f74752c760dcb67ada4e92177264f57c325e042bae1fee61cd577e7"], 0x38}, 0x1, 0x0, 0x0, 0x48804}, 0x4000000) socket$unix(0x1, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/107, 0x6b) 59.372499715s ago: executing program 48 (id=4343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000400)}, 0x20) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f00000007c0), 0xffffd6c0, r2, 0x0, 0x20}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x100001f, &(0x7f0000000240)={[{@errors_remount}, {@grpquota}, {@i_version}, {@dioread_nolock}]}, 0x21, 0x457, &(0x7f00000007c0)="$eJzs3M1vG0UbAPBnbSd9274lKSof/YAGCiICkTRpgR44UAQSB5CQ4FCOIUmrULdBTZBoFUFAqBxRJQ7cEEck/gJOcEHACYkr3FGlCuXSwslo7XXiOLZTJ3ad1r+ftPKMd9qZx7tjz+zsJoC+NRIRn0XE/yPij4gYioikvsBI5eXWytL0PytL00mUSm/9nZTL3VxZmq4Wrf67veVMLmK5kj/coN6Fy1fOTxWLs5ey/PjihffHFy5feXbuwtS52XOzFydPnTp5YuKF5yef60icaZtuHvpo/sjB19659sb0mWvv/vJdkoUXdXF0yEirnU92uLJe21eTTgo9bAhtyUdEergGyv1/KPKxdvCG4tVPe9o4oKtKpVJpV/PdyyXgHpZEr1sA9Eb1hz6d/1a3OzT02BFunK5MgNK4b2VbZU8hclmZgbr5bSels60zy/9+nW7RnesQAADr/HC68rpx/JeLB2vKvZStDQ1HxP6axY0DEfFARLnsQxHxcJv11y+SbBz/5K63+V+2JR3/vZitba0f/1VHfzGcz3L7yvEPJGfnirPHI+K+iBiNgV1pfqJFHT++8vsXzfaN1Iz/0i2tvzoWzNpxvVB3gW5manFqOzHXuvFJxKFCo/iT1ZWAJCIORsSho1urY+7pb48027d5/C10YJ2p9E3EU5Xjvxx18Vclrdcnx/8Xxdnj49WzYqNff7v6ZrP6241//1erc7aOrLKlx39Pw/N/Nf7hUr5mvXah/Tqu/vl50znNVs//weTtcnowe+/DqcXFSxMRg8nr2fvpN1bsrq+vXG5yrXwa/+ixxv3//lj7JA5HRHoSPxIRj0bE0aztj0XE4xFxrEX8P7/8xHtbj7+70vhnNjn+Se16/RYS+fM/fb+u0uF24k+P/8lyajR753a+/263gdv9/AAAAOBukCvf+5/kxlbTudzYWOV++QOxJ1ecX1h85uz8BxdnKs8IDMdArnqla6jmeuhENq2v5ifr8iey68Zf5neX82PT88WZXgcPfW5vk/6f+ivf69YBXed5Lehf+j/0L/0f+ldhsNctAHqk0fP/9TdOtvgbAcDdrNH4/+MetAO488z/oX+12/8rkwNTArgX+P2H/qX/Q1/aznP93UxU1x92SnvWJUqlzcoUdkpTu5eI3I5ohkSXEj3+YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiQ/wIAAP//gVfl2w==") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x5, &(0x7f0000000340)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x447}, 0x94) sendmsg$GTP_CMD_GETPDP(r7, &(0x7f0000000cc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80010880}, 0xc, &(0x7f0000000c80)={&(0x7f0000000d80)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd0000ffdbdfadd6c773a77a4d3e00ac1414aa080001001e2b43661da3062daf34eff0c3520c3756b06972b26d0f1824786b5e81bd66687607304c6ac998ac4d47b98edac18f019ae85de4866c52ec42dadfc0040b51930162d41bd0594ff4d9a3d8f9ba2ae8316d1204962789349ba320b9e7bb8eef98782c049eb5aa41431e58cd", @ANYRES32, @ANYBLOB="14000c00200100000000000000000000000000000800080002000000"], 0x40}}, 0x28804) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/tcp\x00') sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xe}, {0x0, 0xf}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x40, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd70000000000001000000080701000300000014000490050003000100000005000300800000000800020002000000f55e4ea3abdfe05cfb59fd0ab3c5fd59c2bead292ebf55cc841ce3de656576a4ed415f74752c760dcb67ada4e92177264f57c325e042bae1fee61cd577e7"], 0x38}, 0x1, 0x0, 0x0, 0x48804}, 0x4000000) socket$unix(0x1, 0x2, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000380)=""/107, 0x6b) 41.200969974s ago: executing program 9 (id=4591): clock_settime(0x1ed5d7403, &(0x7f0000000180)) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigaction(0x18, &(0x7f0000000380)={0xfffffffffffffffc, 0x50000005, 0x0, {[0x68]}}, 0x0, 0x8, &(0x7f0000000400)) memfd_create(&(0x7f0000001f40)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xfa\xed\x04\x00\x00\x00\xd4N\x12;\x83-j\xa7\x02\x92\xecA\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4\xe1\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x19\b\x00\x00\x00\x00~\xf3S\x12\"\x00^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x00ZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99Y', 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x3, &(0x7f0000000540)=ANY=[@ANYRESOCT=r2], 0x0, 0x5}, 0x94) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x40000200, 0xfffffffd}}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r4 = fsmount(r3, 0x0, 0x80) fchdir(r4) rt_sigsuspend(&(0x7f0000000100)={[0x8]}, 0x8) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r5, r5, 0x0, 0x1000000201005) sendto$inet(r0, &(0x7f0000000240)="613d8458bb67740db586876edd5ab0f5cabe7ad82d027b23b4208e04d47a2c9a425343232567dd1ab164a4a11fd9dee9ccd7070ec576663d7023341efa931c2a9bf975533885061b93adb4900d270646aff8840bf5924d72611b8080c08fbf83eeac6b093d65bf00151b566a9e80afe57bacca863b58036bbc79dc49ccd4e662d5ba37ac316ffae4691cd6ac2a884d6d64306b", 0x93, 0x40000, &(0x7f0000000300)={0x2, 0x4e20, @private=0xa010101}, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0180000000000000000001000000000000000b"], 0x28}}, 0x40000) mmap$xdp(&(0x7f00008c8000/0x1000)=nil, 0x1000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x8e) socket$l2tp6(0xa, 0x2, 0x73) 39.840887493s ago: executing program 9 (id=4604): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet(0x10, 0x3, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$SG_IO(r0, 0x2285, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 39.656038696s ago: executing program 9 (id=4607): r0 = syz_open_dev$usbfs(0x0, 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 39.425734448s ago: executing program 9 (id=4611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 39.365927909s ago: executing program 9 (id=4613): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0xe14, 0xfffffffffffffffc}, 0x0) setitimer(0x1, &(0x7f0000000580)={{}, {0x0, 0x2710}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x159d0682f53ea167, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r9, 0x3) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2f6d40347053e9959a8e081761f7e000001080045000028006500000f06907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02ffff90780000"], 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x4000) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newtfilter={0x30, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x800) r13 = socket$inet_udp(0x2, 0x2, 0x0) r14 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r14, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x78) setsockopt$IPT_SO_SET_REPLACE(r13, 0x0, 0x40, &(0x7f0000000900)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) 39.091944053s ago: executing program 9 (id=4621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff0000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) sysinfo(&(0x7f0000000200)=""/52) 39.061884404s ago: executing program 49 (id=4621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff0000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) sysinfo(&(0x7f0000000200)=""/52) 35.190631577s ago: executing program 1 (id=4688): mq_open(0x0, 0x42, 0x1f0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) 34.829587942s ago: executing program 1 (id=4690): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus/file0\x00', 0x18000, &(0x7f0000001c00)=ANY=[], 0x8, 0x2f6, &(0x7f0000000a00)="$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") ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x410f80, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000003030101ffff0000000000000a0000000c001e2462d9570200ffffff"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) io_setup(0x7e, &(0x7f0000000080)) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x20}}], 0x2, 0x20004800) 34.279148209s ago: executing program 1 (id=4694): socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(0xffffffffffffffff, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') creat(&(0x7f0000002a80)='./file0\x00', 0x0) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000002a40), 0x100, 0x0) unshare(0x66000080) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x0) 30.848731096s ago: executing program 2 (id=4738): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 30.782870238s ago: executing program 2 (id=4739): mq_open(0x0, 0x42, 0x1f0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) 29.954205808s ago: executing program 2 (id=4746): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 29.839220061s ago: executing program 51 (id=4746): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) 26.292860479s ago: executing program 0 (id=4787): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = semget$private(0x0, 0x20000000102, 0x200) semctl$SETALL(r0, 0x0, 0x11, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e3659902368a, 0x20001, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}) creat(&(0x7f00000002c0)='./file0\x00', 0x60) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='f2fs_update_extent_tree_range\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, &(0x7f0000000800), 0x0}, 0x20) 25.47969548s ago: executing program 0 (id=4792): socket(0x10, 0x803, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsopen(0x0, 0x1) socket$key(0xf, 0x3, 0x2) r3 = epoll_create1(0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000020000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000000000000000200010000000000000000000000000000000000000009e2655bb63d9470cf039f4f30a286c09fafad3533497600fe617619857ad0eb560c5355bd73f400e503add4662b860469c157a6217814ce492d64ff209bd2dcd2a9df408c7a09dde43850c5316b4bc7401e4b97944f7224544f9e3a9451d575d4d52f685b6faeb1178469e4f01e0027562d7343e5dda72e76d268049c153a0a43467e63f5d3d39285e3f"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="6cb76def2c36dab0f366cf47ad785ed2fb5e1fa5fb56d566acdc377060c4ba50a58104620df72c3004bfbc77173110e163f7d8ad60c34cdb064852353438fea809e390e392afbf35311690cd8286a6c49668aee29b7537078dba77963d15c085d7343c1012135d361ac15c082b7ac8db87cc10fe3ffc374c8be18fc53437100a11dddb9981072ec036d513870a5bbf62ce9e39f790f61ef997af390b9f5fc8a699e001c59077c459eb40ee80a3ffeb35737da668ef974592faf129325cd9ad0dc5663950a329804c9f5d261f71165b05dac212cc2afc40f980ddef8773f1045e75de4ec606aef87052e9ac784bb0f5a43f9cac5e44ae1a6dd575ce17a4749dc7cd4d7f76a40676e792e5b31a25703b1f35b48a89ed84582ef8f4ac046695f402c25da1fa6bc732a7016edf093b4c31193130b3bc143702e2b1d23743ca797b24495dc4979b81413701c0597dcd5e3bcc9c2050c18cfe03814d358e0f795e990dc44d2c1b9890514bd5ea94a3f3a1e25a8cdc67133e9176d76dc54c", 0x17b}], 0x1}}], 0x2, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000200, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) ioctl$EVIOCGRAB(r7, 0x40044590, &(0x7f00000001c0)=0x800) read$hiddev(r7, &(0x7f0000000080)=""/102, 0x18) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r8, &(0x7f0000000040)="e2", 0x1068) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd"], 0x0) 23.921775282s ago: executing program 0 (id=4830): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES32=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus/file0\x00', 0x18000, &(0x7f0000001c00)=ANY=[], 0x8, 0x2f6, &(0x7f0000000a00)="$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") ioctl$SG_GET_KEEP_ORPHAN(r0, 0x2288, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x410f80, 0x0) mkdirat(r2, &(0x7f0000000180)='./bus\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000003030101ffff0000000000000a0000000c001e2462d9570200ffffff"], 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) io_setup(0x7e, &(0x7f0000000080)) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1}}, {{&(0x7f00000006c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=ANY=[], 0x20}}], 0x2, 0x20004800) 23.624012955s ago: executing program 0 (id=4836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 23.601734596s ago: executing program 0 (id=4837): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket(0x840000000002, 0x3, 0xff) r4 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000500)=0x0, &(0x7f0000000140)=0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x30, 0x0, @fd_index=0x5, 0x3, 0x0, 0xffffffff, 0x3}) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f00000001c0)) (async) write$UHID_CREATE2(r7, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x24, 0x0, r0, 0x0, &(0x7f0000000540)="446f3fe762d6b6dda9099041a5a3c049d9722d5c7aa328454e4d6df9c2b5af4947b2257fb7870c1cda1f397285f0160c308a7b4777b5377241543c80f70700153bd32dcbee95f49b4cd4e350bea22209f3b82821c872d96c02fe5a772c18cefebdf0ad7e9a9554e8b80d812a1085fb2e6e42829f1a86f6444684f8723f0f8d1e436f8fe9409b6845", 0x88, 0xc095, 0x1}) (async) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c25000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000080)='br_fdb_update\x00', r1}, 0x18) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'macsec0\x00', @local}) (async) creat(&(0x7f0000000200)='./bus\x00', 0x10) (async) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) r10 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) fadvise64(r10, 0x3, 0xfd0f, 0x300) (async) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000280)=ANY=[@ANYRES8=r3, @ANYRES32=r11, @ANYBLOB="000000000000000000007b8af8ff00000000bfa20000000000000702000003000000b703000008000100b704000000000000850000005900000095eaf6b1db5b0790bbe7b4b9e1d339a0615795"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r12, 0xc08c5332, &(0x7f0000000e40)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) 23.109539003s ago: executing program 0 (id=4844): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r1 = socket(0x10, 0x3, 0xfff7fffd) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r3}, 0x18) connect$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000002bfffffffffffffffb38276d844150801ceb28b090ef3531be87c07351ae352b0ea31738923e0ef6eb8ce4c25f9bbdad907da0bfd1f1c140d11f8086156213260f0fcbd820bb34a1f3b5d3025e8e7bd544768566f40083a75c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="bdf9", 0x2, 0xfffffffffffffffe) 23.109287553s ago: executing program 52 (id=4844): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) r1 = socket(0x10, 0x3, 0xfff7fffd) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) sendto$inet6(r1, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r3}, 0x18) connect$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB="0000000000000000000000002bfffffffffffffffb38276d844150801ceb28b090ef3531be87c07351ae352b0ea31738923e0ef6eb8ce4c25f9bbdad907da0bfd1f1c140d11f8086156213260f0fcbd820bb34a1f3b5d3025e8e7bd544768566f40083a75c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) add_key(&(0x7f0000000040)='logon\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="bdf9", 0x2, 0xfffffffffffffffe) 1.944503493s ago: executing program 4 (id=5084): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = semget$private(0x0, 0x20000000102, 0x200) semctl$SETALL(r0, 0x0, 0x11, 0x0) socket$nl_audit(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) openat(0xffffffffffffffff, 0x0, 0x80, 0x17a) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e3659902368a, 0x20001, 0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4}) creat(&(0x7f00000002c0)='./file0\x00', 0x60) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000007c0)='f2fs_update_extent_tree_range\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="12000000010000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, &(0x7f0000000800), 0x0}, 0x20) 1.44996629s ago: executing program 4 (id=5096): timer_create(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x37, 0xfc, 0x8, 0x1, 0x0, 0x7, 0x8a5d0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004000c) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x1, 0x0, 0x82, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x401}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) syz_socket_connect_nvme_tcp() 1.246435133s ago: executing program 7 (id=5101): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x8000000000004}, 0x18) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000029000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1.234692323s ago: executing program 4 (id=5102): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0xa982, 0x0) close(r1) 1.145135414s ago: executing program 4 (id=5104): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) getrandom(0x0, 0x600, 0x1) 1.143503424s ago: executing program 7 (id=5105): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1.055792406s ago: executing program 4 (id=5108): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x6, {0x0, 0x1}, {0x45, 0x2}, @period={0x59, 0x200, 0x4, 0x7, 0x0, {0xffff, 0xf, 0x4, 0x5}, 0x0, 0x0}}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r2, 0x80404518, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='xen_mmu_release_ptpage\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) syz_usb_disconnect(r5) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x40095505, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000002140), 0x8) unshare(0x22020600) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x4884) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="280000004e0000000100ffff010000000100000000000000020000000600000000000000cb0000000700000000000000"], &(0x7f0000000180), 0x1200) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000007000000be0000000100000010130000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r7, &(0x7f0000000540), 0x10000000000002be, 0x0, 0x0) write$nci(r6, &(0x7f0000000000)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x1, 0x3, 0x9, 0x3}, 0x3) 1.054744766s ago: executing program 7 (id=5109): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x454e, 0x4) socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 795.192709ms ago: executing program 7 (id=5114): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 756.546389ms ago: executing program 8 (id=5116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) pipe(0x0) write$UHID_DESTROY(r3, &(0x7f0000000340), 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) r6 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 742.312139ms ago: executing program 7 (id=5117): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x40801, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 671.868191ms ago: executing program 7 (id=5119): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x257, &(0x7f0000000580)={0x0, 0x1fc9, 0x1, 0x0, 0x1d0}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r5, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 572.390342ms ago: executing program 8 (id=5122): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', r3, 0x4000, r0}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000e"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r6}) io_submit(r2, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 553.431922ms ago: executing program 3 (id=5123): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008844, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 542.978752ms ago: executing program 3 (id=5125): mq_open(0x0, 0x42, 0x1f0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a"], 0xc4}}, 0x0) 519.836823ms ago: executing program 3 (id=5127): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0xa982, 0x0) close(r1) 503.126183ms ago: executing program 3 (id=5128): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@random="591a1d9a2bdb", @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x29, 0x0, @empty=0xe000, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0xe000, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) 486.739593ms ago: executing program 3 (id=5129): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) openat(0xffffffffffffffff, 0x0, 0x40801, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, 0x0, 0x0) 441.789254ms ago: executing program 3 (id=5130): socket(0x10, 0x803, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsopen(0x0, 0x1) socket$key(0xf, 0x3, 0x2) r3 = epoll_create1(0x80000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000020000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000000000000000200010000000000000000000000000000000000000009e2655bb63d9470cf039f4f30a286c09fafad3533497600fe617619857ad0eb560c5355bd73f400e503add4662b860469c157a6217814ce492d64ff209bd2dcd2a9df408c7a09dde43850c5316b4bc7401e4b97944f7224544f9e3a9451d575d4d52f685b6faeb1178469e4f01e0027562d7343e5dda72e76d268049c153a0a43467e63f5d3d39285e3f"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000900)=[{{&(0x7f0000000080)={0x2, 0x4, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000ac0)="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", 0x17b}], 0x1}}], 0x2, 0x0) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000200, 0x0, 0x0) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x800) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000c80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd"], 0x0) 418.588424ms ago: executing program 8 (id=5131): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 417.771534ms ago: executing program 8 (id=5132): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf2507"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 400.738785ms ago: executing program 8 (id=5133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000770000000e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) io_getevents(0x0, 0x2, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3"], 0x138) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) pipe(0x0) write$UHID_DESTROY(r3, &(0x7f0000000340), 0x4) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000f80)={0x1f, 0x8001, @none, 0x97, 0x2}, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) r6 = dup(0xffffffffffffffff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 386.164365ms ago: executing program 6 (id=5134): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000e00)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") (fail_nth: 9) 268.943316ms ago: executing program 6 (id=5135): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus/file0\x00', 0x18000, &(0x7f0000001c00)=ANY=[], 0x8, 0x2f6, &(0x7f0000000a00)="$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") r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000043c0)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000580)='p', 0x1}], 0x1}}], 0x1, 0x20004800) 265.547896ms ago: executing program 6 (id=5136): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008844, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 219.144047ms ago: executing program 6 (id=5137): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 203.445337ms ago: executing program 6 (id=5138): mq_open(0x0, 0x42, 0x1f0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000007000000008"], 0xc4}}, 0x0) 17.79446ms ago: executing program 4 (id=5139): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 7.01293ms ago: executing program 6 (id=5140): timer_create(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000e00)={0x2, 0x80, 0x37, 0xfc, 0x8, 0x1, 0x0, 0x7, 0x8a5d0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8014, &(0x7f0000000000)=ANY=[], 0x3, 0x7d8, &(0x7f0000000e80)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004000c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x400) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x1, 0x0, 0x82, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffc, 0xffffffff, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x401}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6002000800fe2c00fe8000000000000000000000000000bbff02000000000000000000000000000132"], 0x0) 0s ago: executing program 8 (id=5141): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040), 0xff, 0x240, &(0x7f00000002c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfc, 0x0, 0xfe, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf2507"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r5, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) kernel console output (not intermixed with test programs): 00001c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 323.836113][T23179] RBP: 00007f8d1bae7090 R08: 0000200000000580 R09: 0000000000000000 [ 323.836126][T23179] R10: 0000000000004089 R11: 0000000000000246 R12: 0000000000000002 [ 323.836138][T23179] R13: 0000000000000000 R14: 00007f8d1d6a5fa0 R15: 00007ffccbd340a8 [ 323.836157][T23179] [ 323.893388][T22580] veth0_vlan: entered promiscuous mode [ 323.931745][T23190] loop3: detected capacity change from 0 to 128 [ 323.944381][T23191] loop0: detected capacity change from 0 to 1024 [ 323.951745][T22580] veth1_vlan: entered promiscuous mode [ 323.956665][T23190] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 323.968310][T22580] veth0_macvtap: entered promiscuous mode [ 323.970313][T23191] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4787: Failed to acquire dquot type 0 [ 323.975111][T22580] veth1_macvtap: entered promiscuous mode [ 324.003450][T23190] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.014396][T22580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.043465][T23191] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, [ 324.107014][T22580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.112822][T23191] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 324.112989][T23191] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.4787: corrupted inode contents [ 324.125934][T22580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.132949][T23191] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #13: comm syz.0.4787: mark_inode_dirty error [ 324.134868][T22580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.146377][T23191] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.4787: corrupted inode contents [ 324.155886][T22580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.167218][T23191] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.4787: mark_inode_dirty error [ 324.175923][T22580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.186672][T23191] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.4787: corrupted inode contents [ 324.201671][T23196] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4788'. [ 324.206876][T23191] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 324.255535][T23191] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.4787: corrupted inode contents [ 324.269134][T23191] EXT4-fs error (device loop0): ext4_truncate:4597: inode #13: comm syz.0.4787: mark_inode_dirty error [ 324.281102][T23191] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 324.291432][T23191] EXT4-fs (loop0): 1 truncate cleaned up [ 324.298016][T23191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.326982][T23199] loop4: detected capacity change from 0 to 512 [ 324.334025][T23191] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 324.334204][T23199] EXT4-fs: Invalid want_extra_isize 1 [ 324.353471][T23191] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 324.364757][T23191] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 324.365175][T20889] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 324.391541][T23206] loop3: detected capacity change from 0 to 1024 [ 324.402380][T23206] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4789: Failed to acquire dquot type 0 [ 324.416900][T23206] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 324.432202][T23206] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4789: corrupted inode contents [ 324.446927][T23206] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #13: comm syz.3.4789: mark_inode_dirty error [ 324.458801][T23206] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4789: corrupted inode contents [ 324.480842][T23206] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.4789: mark_inode_dirty error [ 324.487796][T23212] loop4: detected capacity change from 0 to 1024 [ 324.492801][T23206] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4789: corrupted inode contents [ 324.511776][T23206] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 324.513822][T23212] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4791: Failed to acquire dquot type 0 [ 324.532240][T23206] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4789: corrupted inode contents [ 324.532690][T23212] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 324.559890][T23212] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4791: corrupted inode contents [ 324.561701][T23206] EXT4-fs error (device loop3): ext4_truncate:4597: inode #13: comm syz.3.4789: mark_inode_dirty error [ 324.572262][T23212] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.4791: mark_inode_dirty error [ 324.585088][T23206] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 324.594221][T23212] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4791: corrupted inode contents [ 324.603670][T23206] EXT4-fs (loop3): 1 truncate cleaned up [ 324.616277][T23212] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.4791: mark_inode_dirty error [ 324.621960][T23206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.633267][T23212] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4791: corrupted inode contents [ 324.656432][T23212] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 324.665255][T23212] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4791: corrupted inode contents [ 324.677547][T23212] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.4791: mark_inode_dirty error [ 324.677805][T23206] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 324.689904][T23212] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 324.706558][T23212] EXT4-fs (loop4): 1 truncate cleaned up [ 324.714501][T23206] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 324.721412][T23212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.726786][T23206] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4789: Failed to acquire dquot type 0 [ 324.744659][T18645] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.748791][T23206] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 324.757873][T23212] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 324.777398][T23212] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 324.789447][T23212] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4791: Failed to acquire dquot type 0 [ 324.805746][T23212] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 324.834135][T22580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.862205][T20889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.903859][T23231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4796'. [ 324.913008][T23231] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4796'. [ 324.941697][T23237] loop4: detected capacity change from 0 to 128 [ 324.944638][T23238] hub 9-0:1.0: USB hub found [ 324.951059][T23237] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 324.953245][T23238] hub 9-0:1.0: 8 ports detected [ 324.981335][T23237] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 324.999553][T23244] loop8: detected capacity change from 0 to 764 [ 325.029854][T23251] netlink: 'syz.7.4802': attribute type 1 has an invalid length. [ 325.040967][T23255] netdevsim netdevsim8: Direct firmware load for ./file0 failed with error -2 [ 325.055455][T23257] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4804'. [ 325.100480][T23265] loop7: detected capacity change from 0 to 1024 [ 325.120684][T23265] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4807: Failed to acquire dquot type 0 [ 325.139881][T22580] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 325.149491][T23265] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 325.164946][T23265] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.4807: corrupted inode contents [ 325.180319][T23265] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #13: comm syz.7.4807: mark_inode_dirty error [ 325.196959][T23265] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.4807: corrupted inode contents [ 325.209283][T23265] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.4807: mark_inode_dirty error [ 325.220756][T23265] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.4807: corrupted inode contents [ 325.233459][T23265] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 325.246589][T23265] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.4807: corrupted inode contents [ 325.258746][T23265] EXT4-fs error (device loop7): ext4_truncate:4597: inode #13: comm syz.7.4807: mark_inode_dirty error [ 325.271878][T23265] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 325.282001][T23265] EXT4-fs (loop7): 1 truncate cleaned up [ 325.289507][T23265] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 325.305667][T23265] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 325.315543][T23265] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 325.325451][T23265] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 325.364821][T23290] hub 9-0:1.0: USB hub found [ 325.369515][T23290] hub 9-0:1.0: 8 ports detected [ 325.384452][T21466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.406096][T23298] loop7: detected capacity change from 0 to 764 [ 325.415414][T23296] lo speed is unknown, defaulting to 1000 [ 325.431843][T23278] team0 (unregistering): Port device team_slave_0 removed [ 325.441303][T23278] team0 (unregistering): Port device team_slave_1 removed [ 325.474640][T23354] FAULT_INJECTION: forcing a failure. [ 325.474640][T23354] name failslab, interval 1, probability 0, space 0, times 0 [ 325.487406][T23354] CPU: 1 UID: 0 PID: 23354 Comm: syz.7.4819 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 325.487433][T23354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 325.487445][T23354] Call Trace: [ 325.487451][T23354] [ 325.487459][T23354] __dump_stack+0x1d/0x30 [ 325.487487][T23354] dump_stack_lvl+0xe8/0x140 [ 325.487507][T23354] dump_stack+0x15/0x1b [ 325.487524][T23354] should_fail_ex+0x265/0x280 [ 325.487555][T23354] should_failslab+0x8c/0xb0 [ 325.487577][T23354] __kmalloc_noprof+0xa5/0x3e0 [ 325.487625][T23354] ? tcf_idr_create+0x41/0x4a0 [ 325.487650][T23354] tcf_idr_create+0x41/0x4a0 [ 325.487710][T23354] tcf_idr_create_from_flags+0x60/0x80 [ 325.487735][T23354] tunnel_key_init+0x44b/0xe20 [ 325.487770][T23354] ? __nla_validate_parse+0x1652/0x1d00 [ 325.487814][T23354] tcf_action_init_1+0x367/0x4a0 [ 325.487846][T23354] tcf_action_init+0x267/0x6d0 [ 325.487936][T23354] ? enqueue_task_fair+0x891/0x980 [ 325.488012][T23354] tc_ctl_action+0x291/0x830 [ 325.488054][T23354] ? __pfx_tc_ctl_action+0x10/0x10 [ 325.488108][T23354] rtnetlink_rcv_msg+0x657/0x6d0 [ 325.488134][T23354] netlink_rcv_skb+0x120/0x220 [ 325.488166][T23354] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 325.488260][T23354] rtnetlink_rcv+0x1c/0x30 [ 325.488280][T23354] netlink_unicast+0x5a5/0x680 [ 325.488384][T23354] netlink_sendmsg+0x58b/0x6b0 [ 325.488405][T23354] ? __pfx_netlink_sendmsg+0x10/0x10 [ 325.488425][T23354] __sock_sendmsg+0x145/0x180 [ 325.488504][T23354] ____sys_sendmsg+0x31e/0x4e0 [ 325.488540][T23354] ___sys_sendmsg+0x17b/0x1d0 [ 325.488585][T23354] __x64_sys_sendmsg+0xd4/0x160 [ 325.488685][T23354] x64_sys_call+0x2999/0x2fb0 [ 325.488703][T23354] do_syscall_64+0xd2/0x200 [ 325.488718][T23354] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 325.488740][T23354] ? clear_bhb_loop+0x40/0x90 [ 325.488808][T23354] ? clear_bhb_loop+0x40/0x90 [ 325.488826][T23354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.488843][T23354] RIP: 0033:0x7f9ad32fe929 [ 325.488856][T23354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.488935][T23354] RSP: 002b:00007f9ad1967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 325.488952][T23354] RAX: ffffffffffffffda RBX: 00007f9ad3525fa0 RCX: 00007f9ad32fe929 [ 325.488962][T23354] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 325.488973][T23354] RBP: 00007f9ad1967090 R08: 0000000000000000 R09: 0000000000000000 [ 325.488983][T23354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.489056][T23354] R13: 0000000000000000 R14: 00007f9ad3525fa0 R15: 00007ffcfc412538 [ 325.489071][T23354] [ 325.764742][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 325.772511][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 325.780364][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.788110][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.795865][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.803655][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.811439][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.819126][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.827134][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.834804][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.842513][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.850185][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.858005][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.865682][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.873372][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.881015][ T6537] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 325.893283][ T6537] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 326.052634][T23387] loop7: detected capacity change from 0 to 128 [ 326.059469][T23387] EXT4-fs: Ignoring removed nobh option [ 326.067484][T23387] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 326.079690][T23387] ext4 filesystem being mounted at /21/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 326.106383][T21466] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 326.124174][T23393] loop7: detected capacity change from 0 to 1024 [ 326.132389][T23393] __quota_error: 362 callbacks suppressed [ 326.132404][T23393] Quota error (device loop7): do_check_range: Getting block 64 out of range 1-5 [ 326.147326][T23393] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 326.156789][T23393] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.4828: Failed to acquire dquot type 0 [ 326.168698][T23393] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 326.183491][T23393] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.4828: corrupted inode contents [ 326.195485][T23393] EXT4-fs error (device loop7): ext4_dirty_inode:6459: inode #13: comm syz.7.4828: mark_inode_dirty error [ 326.206898][T23393] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.4828: corrupted inode contents [ 326.218918][T23393] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.4828: mark_inode_dirty error [ 326.230371][T23393] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.4828: corrupted inode contents [ 326.242443][T23393] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 326.251177][T23393] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #13: comm syz.7.4828: corrupted inode contents [ 326.263138][T23393] EXT4-fs error (device loop7): ext4_truncate:4597: inode #13: comm syz.7.4828: mark_inode_dirty error [ 326.282485][T23393] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 326.295800][T23393] EXT4-fs (loop7): 1 truncate cleaned up [ 326.306167][T23399] loop0: detected capacity change from 0 to 128 [ 326.308723][T23393] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.315071][ T29] audit: type=1326 audit(1752522552.615:17040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23398 comm="syz.0.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1d47e929 code=0x7ffc0000 [ 326.348632][ T29] audit: type=1326 audit(1752522552.635:17041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23398 comm="syz.0.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1d47e929 code=0x7ffc0000 [ 326.349057][T23393] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 326.372246][ T29] audit: type=1326 audit(1752522552.635:17042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23398 comm="syz.0.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d1d47e929 code=0x7ffc0000 [ 326.372322][ T29] audit: type=1326 audit(1752522552.635:17043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23398 comm="syz.0.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1d47e929 code=0x7ffc0000 [ 326.428009][ T29] audit: type=1326 audit(1752522552.635:17044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23398 comm="syz.0.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8d1d47e929 code=0x7ffc0000 [ 326.451646][ T29] audit: type=1326 audit(1752522552.635:17045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23398 comm="syz.0.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1d47e929 code=0x7ffc0000 [ 326.475516][ T29] audit: type=1326 audit(1752522552.635:17046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23398 comm="syz.0.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f8d1d47e929 code=0x7ffc0000 [ 326.499179][ T29] audit: type=1326 audit(1752522552.635:17047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23398 comm="syz.0.4830" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1d47e929 code=0x7ffc0000 [ 326.523278][T23405] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 326.533656][T23405] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 326.583609][T21466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.659434][T23424] FAULT_INJECTION: forcing a failure. [ 326.659434][T23424] name failslab, interval 1, probability 0, space 0, times 0 [ 326.672280][T23424] CPU: 0 UID: 0 PID: 23424 Comm: syz.7.4839 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 326.672379][T23424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.672390][T23424] Call Trace: [ 326.672395][T23424] [ 326.672401][T23424] __dump_stack+0x1d/0x30 [ 326.672423][T23424] dump_stack_lvl+0xe8/0x140 [ 326.672443][T23424] dump_stack+0x15/0x1b [ 326.672461][T23424] should_fail_ex+0x265/0x280 [ 326.672551][T23424] should_failslab+0x8c/0xb0 [ 326.672573][T23424] __kmalloc_noprof+0xa5/0x3e0 [ 326.672637][T23424] ? tracepoint_probe_unregister+0x168/0x650 [ 326.672669][T23424] ? __pfx___bpf_trace_kfree+0x10/0x10 [ 326.672694][T23424] tracepoint_probe_unregister+0x168/0x650 [ 326.672791][T23424] ? __pfx_bpf_link_release+0x10/0x10 [ 326.672823][T23424] bpf_probe_unregister+0x37/0x50 [ 326.672845][T23424] bpf_raw_tp_link_release+0x27/0x50 [ 326.672884][T23424] bpf_link_free+0xab/0x340 [ 326.672911][T23424] ? __pfx_bpf_link_release+0x10/0x10 [ 326.672936][T23424] bpf_link_release+0x45/0x60 [ 326.672960][T23424] __fput+0x29b/0x650 [ 326.673019][T23424] ____fput+0x1c/0x30 [ 326.673042][T23424] task_work_run+0x131/0x1a0 [ 326.673066][T23424] exit_to_user_mode_loop+0xe4/0x100 [ 326.673133][T23424] do_syscall_64+0x1d6/0x200 [ 326.673148][T23424] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 326.673170][T23424] ? clear_bhb_loop+0x40/0x90 [ 326.673190][T23424] ? clear_bhb_loop+0x40/0x90 [ 326.673290][T23424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.673313][T23424] RIP: 0033:0x7f9ad32fe929 [ 326.673328][T23424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.673403][T23424] RSP: 002b:00007f9ad1967038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 326.673422][T23424] RAX: 0000000000000000 RBX: 00007f9ad3525fa0 RCX: 00007f9ad32fe929 [ 326.673433][T23424] RDX: 0100000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 326.673446][T23424] RBP: 00007f9ad1967090 R08: 0000000000000000 R09: 0000000000000000 [ 326.673459][T23424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.673472][T23424] R13: 0000000000000000 R14: 00007f9ad3525fa0 R15: 00007ffcfc412538 [ 326.673492][T23424] [ 327.029814][T23437] loop8: detected capacity change from 0 to 8192 [ 327.037557][T23437] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 327.073401][T17114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.125095][T17114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.165289][T17114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.213430][T23441] lo speed is unknown, defaulting to 1000 [ 327.225565][T17114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.306770][T23441] chnl_net:caif_netlink_parms(): no params data found [ 327.339922][T17114] bridge_slave_1: left allmulticast mode [ 327.346266][T17114] bridge_slave_1: left promiscuous mode [ 327.351986][T17114] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.362152][T17114] bridge_slave_0: left allmulticast mode [ 327.367885][T17114] bridge_slave_0: left promiscuous mode [ 327.373653][T17114] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.455502][T17114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.465666][T17114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.475349][T17114] bond0 (unregistering): Released all slaves [ 327.510847][T23441] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.517929][T23441] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.525219][T23441] bridge_slave_0: entered allmulticast mode [ 327.531828][T23441] bridge_slave_0: entered promiscuous mode [ 327.538532][T23441] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.545691][T23441] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.552993][T23441] bridge_slave_1: entered allmulticast mode [ 327.559572][T23441] bridge_slave_1: entered promiscuous mode [ 327.571498][T17114] tipc: Left network mode [ 327.585065][T17114] hsr_slave_0: left promiscuous mode [ 327.590922][T17114] hsr_slave_1: left promiscuous mode [ 327.597877][T17114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.605323][T17114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.615023][T17114] veth1_macvtap: left promiscuous mode [ 327.620501][T17114] veth0_macvtap: left promiscuous mode [ 327.627286][T17114] veth1_vlan: left promiscuous mode [ 327.632528][T17114] veth0_vlan: left promiscuous mode [ 327.672504][T23639] 9pnet_fd: Insufficient options for proto=fd [ 327.780507][T23441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.808394][T23441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.839934][T23642] loop4: detected capacity change from 0 to 1024 [ 327.852675][T23441] team0: Port device team_slave_0 added [ 327.859387][T23441] team0: Port device team_slave_1 added [ 327.884418][T23642] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4847: Failed to acquire dquot type 0 [ 327.898548][T23441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.905661][T23441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.914363][T23642] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, [ 327.931638][T23441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.931608][T23642] inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 327.968836][T23441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.975803][T23441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.985490][T23642] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4847: corrupted inode contents [ 328.001954][T23441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.015802][T23642] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.4847: mark_inode_dirty error [ 328.036520][T23642] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4847: corrupted inode contents [ 328.048975][T23642] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.4847: mark_inode_dirty error [ 328.049204][T23639] __nla_validate_parse: 11 callbacks suppressed [ 328.049218][T23639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4846'. [ 328.068508][T23642] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4847: corrupted inode contents [ 328.085669][T23712] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4849'. [ 328.087923][T23642] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 328.108064][T23441] hsr_slave_0: entered promiscuous mode [ 328.114595][T23441] hsr_slave_1: entered promiscuous mode [ 328.115143][T23642] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4847: corrupted inode contents [ 328.120513][T23441] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.141412][T23441] Cannot create hsr debugfs directory [ 328.147977][T23642] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.4847: mark_inode_dirty error [ 328.159952][T23642] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 328.169922][T23642] EXT4-fs (loop4): 1 truncate cleaned up [ 328.181512][T23642] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.220626][T23642] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 328.261480][T23642] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 328.287300][T23642] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 328.358678][T22580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.380899][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x4 [ 328.388712][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x2 [ 328.397706][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.405414][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.413142][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.420823][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.428546][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.436289][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.443972][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.451710][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.459530][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.467212][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.475000][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.482705][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.490350][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.498054][ T6536] hid-generic 0000:3000000:0000.0013: unknown main item tag 0x0 [ 328.506506][ T6536] hid-generic 0000:3000000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 328.540328][T23840] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4859'. [ 328.565163][T23838] loop8: detected capacity change from 0 to 8192 [ 328.574383][T23838] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 328.636999][T23441] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 328.646416][T23441] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 328.655305][T23441] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 328.664097][T23441] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 328.701834][T23877] FAULT_INJECTION: forcing a failure. [ 328.701834][T23877] name failslab, interval 1, probability 0, space 0, times 0 [ 328.707490][T23441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.714629][T23877] CPU: 1 UID: 0 PID: 23877 Comm: syz.8.4865 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 328.714698][T23877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 328.714711][T23877] Call Trace: [ 328.714716][T23877] [ 328.714730][T23877] __dump_stack+0x1d/0x30 [ 328.714751][T23877] dump_stack_lvl+0xe8/0x140 [ 328.714784][T23877] dump_stack+0x15/0x1b [ 328.714801][T23877] should_fail_ex+0x265/0x280 [ 328.714830][T23877] should_failslab+0x8c/0xb0 [ 328.714852][T23877] kmem_cache_alloc_noprof+0x50/0x310 [ 328.714877][T23877] ? audit_log_start+0x365/0x6c0 [ 328.714944][T23877] audit_log_start+0x365/0x6c0 [ 328.714975][T23877] audit_seccomp+0x48/0x100 [ 328.715000][T23877] ? __seccomp_filter+0x68c/0x10d0 [ 328.715101][T23877] __seccomp_filter+0x69d/0x10d0 [ 328.715203][T23877] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 328.715236][T23877] ? vfs_write+0x75e/0x8e0 [ 328.715265][T23877] ? __rcu_read_unlock+0x4f/0x70 [ 328.715307][T23877] ? __fget_files+0x184/0x1c0 [ 328.715328][T23877] __secure_computing+0x82/0x150 [ 328.715349][T23877] syscall_trace_enter+0xcf/0x1e0 [ 328.715373][T23877] do_syscall_64+0xac/0x200 [ 328.715522][T23877] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 328.715609][T23877] ? clear_bhb_loop+0x40/0x90 [ 328.715629][T23877] ? clear_bhb_loop+0x40/0x90 [ 328.715651][T23877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.715672][T23877] RIP: 0033:0x7fd4aa69e929 [ 328.715688][T23877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.715710][T23877] RSP: 002b:00007fd4a8d07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 328.715728][T23877] RAX: ffffffffffffffda RBX: 00007fd4aa8c5fa0 RCX: 00007fd4aa69e929 [ 328.715741][T23877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 328.715754][T23877] RBP: 00007fd4a8d07090 R08: 0000000000000000 R09: 0000000000000000 [ 328.715766][T23877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.715779][T23877] R13: 0000000000000000 R14: 00007fd4aa8c5fa0 R15: 00007fffed1ce5a8 [ 328.715806][T23877] [ 328.937942][T23441] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.954938][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.962056][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.981139][T23882] loop3: detected capacity change from 0 to 1024 [ 328.990907][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.997994][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.013752][T23882] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4866: Failed to acquire dquot type 0 [ 329.030149][T23882] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 329.032671][T23441] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.054906][T23441] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.066199][T23882] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4866: corrupted inode contents [ 329.082540][T23882] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #13: comm syz.3.4866: mark_inode_dirty error [ 329.103738][T23882] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4866: corrupted inode contents [ 329.117245][T23441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.134133][T23882] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.4866: mark_inode_dirty error [ 329.145717][T23882] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4866: corrupted inode contents [ 329.159902][T23882] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 329.168884][T23882] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4866: corrupted inode contents [ 329.183766][T23882] EXT4-fs error (device loop3): ext4_truncate:4597: inode #13: comm syz.3.4866: mark_inode_dirty error [ 329.197660][T23882] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 329.207385][T23882] EXT4-fs (loop3): 1 truncate cleaned up [ 329.214618][T23882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.246477][T23882] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 329.261409][T23898] hub 9-0:1.0: USB hub found [ 329.267733][T23898] hub 9-0:1.0: 8 ports detected [ 329.275056][T23882] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 329.289814][T23882] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4866: Failed to acquire dquot type 0 [ 329.313403][T23882] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 329.327159][T23907] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4868'. [ 329.367918][T20889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.377697][T23441] veth0_vlan: entered promiscuous mode [ 329.388140][T23441] veth1_vlan: entered promiscuous mode [ 329.415393][T23441] veth0_macvtap: entered promiscuous mode [ 329.430512][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x4 [ 329.438237][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x2 [ 329.450647][T23441] veth1_macvtap: entered promiscuous mode [ 329.477547][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.485301][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.493016][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.500663][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.508481][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.516251][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.518828][T23441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.523932][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.538769][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.546555][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.554341][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.561997][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.569683][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.577379][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.579003][T23441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.585220][ T3380] hid-generic 0000:3000000:0000.0014: unknown main item tag 0x0 [ 329.608780][T23914] loop3: detected capacity change from 0 to 8192 [ 329.619755][T23914] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 329.630993][ T3380] hid-generic 0000:3000000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 329.643896][T23441] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.652660][T23441] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.661514][T23441] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.670358][T23441] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.771362][T23952] loop8: detected capacity change from 0 to 1024 [ 329.780444][T23952] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4880: Failed to acquire dquot type 0 [ 329.792406][T23952] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 329.809111][T23952] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4880: corrupted inode contents [ 329.821242][T23952] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #13: comm syz.8.4880: mark_inode_dirty error [ 329.826240][T23958] FAULT_INJECTION: forcing a failure. [ 329.826240][T23958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.835122][T23952] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4880: corrupted inode contents [ 329.846216][T23958] CPU: 0 UID: 0 PID: 23958 Comm: syz.3.4881 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 329.846244][T23958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 329.846257][T23958] Call Trace: [ 329.846262][T23958] [ 329.846269][T23958] __dump_stack+0x1d/0x30 [ 329.846323][T23958] dump_stack_lvl+0xe8/0x140 [ 329.846405][T23958] dump_stack+0x15/0x1b [ 329.846421][T23958] should_fail_ex+0x265/0x280 [ 329.846496][T23958] should_fail+0xb/0x20 [ 329.846597][T23958] should_fail_usercopy+0x1a/0x20 [ 329.846627][T23958] _copy_from_iter+0xcf/0xe40 [ 329.846657][T23958] ? __build_skb_around+0x1a0/0x200 [ 329.846687][T23958] ? __alloc_skb+0x223/0x320 [ 329.846726][T23958] netlink_sendmsg+0x471/0x6b0 [ 329.846747][T23958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.846766][T23958] __sock_sendmsg+0x145/0x180 [ 329.846790][T23958] ____sys_sendmsg+0x31e/0x4e0 [ 329.846880][T23958] ___sys_sendmsg+0x17b/0x1d0 [ 329.846923][T23958] __x64_sys_sendmsg+0xd4/0x160 [ 329.847012][T23958] x64_sys_call+0x2999/0x2fb0 [ 329.847033][T23958] do_syscall_64+0xd2/0x200 [ 329.847050][T23958] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 329.847152][T23958] ? clear_bhb_loop+0x40/0x90 [ 329.847173][T23958] ? clear_bhb_loop+0x40/0x90 [ 329.847260][T23958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.847281][T23958] RIP: 0033:0x7ff40f03e929 [ 329.847296][T23958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.847408][T23958] RSP: 002b:00007ff40d6a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.847427][T23958] RAX: ffffffffffffffda RBX: 00007ff40f265fa0 RCX: 00007ff40f03e929 [ 329.847468][T23958] RDX: 0000000004000c00 RSI: 0000200000000180 RDI: 0000000000000004 [ 329.847481][T23958] RBP: 00007ff40d6a7090 R08: 0000000000000000 R09: 0000000000000000 [ 329.847494][T23958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.847532][T23958] R13: 0000000000000000 R14: 00007ff40f265fa0 R15: 00007fff9697a518 [ 329.847552][T23958] [ 329.885466][T23961] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4882'. [ 329.889623][T23952] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.4880: mark_inode_dirty error [ 330.085318][T23952] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4880: corrupted inode contents [ 330.086671][T23948] team0 (unregistering): Port device team_slave_0 removed [ 330.104269][T23952] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 330.113245][T23952] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4880: corrupted inode contents [ 330.114526][T23948] team0 (unregistering): Port device team_slave_1 removed [ 330.126781][T23952] EXT4-fs error (device loop8): ext4_truncate:4597: inode #13: comm syz.8.4880: mark_inode_dirty error [ 330.143792][T23952] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 330.153248][T23952] EXT4-fs (loop8): 1 truncate cleaned up [ 330.159328][T23952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.178028][T23952] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 330.187426][T23952] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 330.197112][T23952] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4880: Failed to acquire dquot type 0 [ 330.209033][T23952] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 330.280075][T21996] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.318501][T24003] loop8: detected capacity change from 0 to 8192 [ 330.326399][T24003] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 330.359277][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x4 [ 330.367234][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x2 [ 330.374899][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.382583][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.390229][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.397934][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.405630][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.413321][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.421126][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.428933][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.436629][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.444301][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.451943][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.459615][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.467298][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.475014][ T3399] hid-generic 0000:3000000:0000.0015: unknown main item tag 0x0 [ 330.483297][ T3399] hid-generic 0000:3000000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 330.529960][T24018] loop8: detected capacity change from 0 to 8192 [ 330.618160][T24032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4889'. [ 330.627207][T24032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4889'. [ 330.716657][T24040] FAULT_INJECTION: forcing a failure. [ 330.716657][T24040] name failslab, interval 1, probability 0, space 0, times 0 [ 330.729347][T24040] CPU: 1 UID: 0 PID: 24040 Comm: syz.4.4893 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 330.729374][T24040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.729387][T24040] Call Trace: [ 330.729393][T24040] [ 330.729400][T24040] __dump_stack+0x1d/0x30 [ 330.729458][T24040] dump_stack_lvl+0xe8/0x140 [ 330.729475][T24040] dump_stack+0x15/0x1b [ 330.729539][T24040] should_fail_ex+0x265/0x280 [ 330.729605][T24040] should_failslab+0x8c/0xb0 [ 330.729628][T24040] kmem_cache_alloc_noprof+0x50/0x310 [ 330.729694][T24040] ? audit_log_start+0x365/0x6c0 [ 330.729720][T24040] audit_log_start+0x365/0x6c0 [ 330.729791][T24040] audit_seccomp+0x48/0x100 [ 330.729858][T24040] ? __seccomp_filter+0x68c/0x10d0 [ 330.729884][T24040] __seccomp_filter+0x69d/0x10d0 [ 330.729904][T24040] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 330.729933][T24040] ? vfs_write+0x75e/0x8e0 [ 330.729966][T24040] ? __rcu_read_unlock+0x4f/0x70 [ 330.729984][T24040] ? __fget_files+0x184/0x1c0 [ 330.730002][T24040] __secure_computing+0x82/0x150 [ 330.730096][T24040] syscall_trace_enter+0xcf/0x1e0 [ 330.730119][T24040] do_syscall_64+0xac/0x200 [ 330.730136][T24040] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 330.730158][T24040] ? clear_bhb_loop+0x40/0x90 [ 330.730226][T24040] ? clear_bhb_loop+0x40/0x90 [ 330.730244][T24040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.730262][T24040] RIP: 0033:0x7f5eeb5ce929 [ 330.730275][T24040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.730345][T24040] RSP: 002b:00007f5ee9c37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 330.730364][T24040] RAX: ffffffffffffffda RBX: 00007f5eeb7f5fa0 RCX: 00007f5eeb5ce929 [ 330.730377][T24040] RDX: 0000000000000000 RSI: 00000000009dc657 RDI: 000000000000001d [ 330.730388][T24040] RBP: 00007f5ee9c37090 R08: 0000000000000000 R09: 0000000000000000 [ 330.730399][T24040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.730410][T24040] R13: 0000000000000000 R14: 00007f5eeb7f5fa0 R15: 00007ffd8fbf2a38 [ 330.730476][T24040] [ 331.026160][T24047] loop3: detected capacity change from 0 to 8192 [ 331.046012][T24047] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 331.086099][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x4 [ 331.093889][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x2 [ 331.108669][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.116366][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.124076][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.131718][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.139405][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.147105][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.154774][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.162546][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.170400][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.178095][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.186146][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.193944][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.201758][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.209485][ T3399] hid-generic 0000:3000000:0000.0016: unknown main item tag 0x0 [ 331.220579][ T3399] hid-generic 0000:3000000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 331.461240][T24068] loop3: detected capacity change from 0 to 1024 [ 331.502432][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 331.502447][ T29] audit: type=1400 audit(1752522557.765:17236): avc: denied { write } for pid=24054 comm="syz.3.4897" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 331.709052][ T29] audit: type=1400 audit(1752522558.015:17237): avc: denied { bind } for pid=24072 comm="syz.7.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.728762][ T29] audit: type=1400 audit(1752522558.015:17238): avc: denied { setopt } for pid=24072 comm="syz.7.4899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.769154][T24079] hub 9-0:1.0: USB hub found [ 331.774583][T24079] hub 9-0:1.0: 8 ports detected [ 331.780964][T24080] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4901'. [ 331.789960][T24080] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4901'. [ 331.819570][T24087] loop7: detected capacity change from 0 to 128 [ 331.829888][T24090] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4905'. [ 331.895965][T24101] FAULT_INJECTION: forcing a failure. [ 331.895965][T24101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.909117][T24101] CPU: 0 UID: 0 PID: 24101 Comm: syz.7.4909 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 331.909225][T24101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 331.909237][T24101] Call Trace: [ 331.909242][T24101] [ 331.909248][T24101] __dump_stack+0x1d/0x30 [ 331.909270][T24101] dump_stack_lvl+0xe8/0x140 [ 331.909289][T24101] dump_stack+0x15/0x1b [ 331.909317][T24101] should_fail_ex+0x265/0x280 [ 331.909342][T24101] should_fail+0xb/0x20 [ 331.909428][T24101] should_fail_usercopy+0x1a/0x20 [ 331.909455][T24101] _copy_from_user+0x1c/0xb0 [ 331.909474][T24101] ___sys_sendmsg+0xc1/0x1d0 [ 331.909594][T24101] __x64_sys_sendmsg+0xd4/0x160 [ 331.909639][T24101] x64_sys_call+0x2999/0x2fb0 [ 331.909663][T24101] do_syscall_64+0xd2/0x200 [ 331.909736][T24101] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 331.909768][T24101] ? clear_bhb_loop+0x40/0x90 [ 331.909788][T24101] ? clear_bhb_loop+0x40/0x90 [ 331.909859][T24101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.909881][T24101] RIP: 0033:0x7f9ad32fe929 [ 331.909895][T24101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.909914][T24101] RSP: 002b:00007f9ad1967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 331.909934][T24101] RAX: ffffffffffffffda RBX: 00007f9ad3525fa0 RCX: 00007f9ad32fe929 [ 331.909948][T24101] RDX: 0000000020000800 RSI: 0000200000000180 RDI: 0000000000000004 [ 331.909960][T24101] RBP: 00007f9ad1967090 R08: 0000000000000000 R09: 0000000000000000 [ 331.910005][T24101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.910016][T24101] R13: 0000000000000000 R14: 00007f9ad3525fa0 R15: 00007ffcfc412538 [ 331.910034][T24101] [ 332.118388][T24103] loop4: detected capacity change from 0 to 512 [ 332.124954][T24103] EXT4-fs: Ignoring removed oldalloc option [ 332.142540][T24103] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 332.152404][ T29] audit: type=1326 audit(1752522558.455:17239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24096 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aa69e929 code=0x7ffc0000 [ 332.155124][T24103] EXT4-fs (loop4): orphan cleanup on readonly fs [ 332.176037][ T29] audit: type=1326 audit(1752522558.455:17240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24096 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aa69e929 code=0x7ffc0000 [ 332.187595][ T29] audit: type=1326 audit(1752522558.465:17241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24096 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4aa69e929 code=0x7ffc0000 [ 332.206402][T24103] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5 [ 332.229697][ T29] audit: type=1326 audit(1752522558.465:17242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24096 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aa69e929 code=0x7ffc0000 [ 332.239028][T24103] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 332.239046][T24103] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4908: Failed to acquire dquot type 1 [ 332.262693][ T29] audit: type=1326 audit(1752522558.465:17243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24096 comm="syz.8.4907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aa69e929 code=0x7ffc0000 [ 332.309055][T24103] EXT4-fs (loop4): 1 truncate cleaned up [ 332.315301][T24103] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 332.379506][T24121] hub 9-0:1.0: USB hub found [ 332.385496][T24121] hub 9-0:1.0: 8 ports detected [ 332.476195][T24132] loop7: detected capacity change from 0 to 512 [ 332.505832][T24132] EXT4-fs (loop7): 1 orphan inode deleted [ 332.512179][T24132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.524852][T24132] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.536533][T17114] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:30: Failed to release dquot type 1 [ 332.549155][T24132] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 332.558775][T24132] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.4918: deleted inode referenced: 16 [ 332.604881][T24145] loop6: detected capacity change from 0 to 128 [ 332.627460][T24149] loop3: detected capacity change from 0 to 1024 [ 332.710474][T22580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.766659][T24155] hub 4-0:1.0: USB hub found [ 332.771497][T24155] hub 4-0:1.0: 8 ports detected [ 333.209441][T24175] __nla_validate_parse: 6 callbacks suppressed [ 333.209457][T24175] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4927'. [ 333.224814][T24175] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4927'. [ 333.252508][T24177] hub 9-0:1.0: USB hub found [ 333.257221][T24177] hub 9-0:1.0: 8 ports detected [ 333.316210][T21466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.374899][T24187] netlink: 96 bytes leftover after parsing attributes in process `syz.8.4931'. [ 333.379839][T24190] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4932'. [ 333.393324][T24191] loop7: detected capacity change from 0 to 128 [ 333.406874][T24191] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.432688][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x4 [ 333.440357][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x2 [ 333.455698][T24191] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 333.468010][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.475763][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.483534][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.491190][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.498857][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.506661][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.514328][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.522027][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.529685][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.537477][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.545142][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.552854][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.560495][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.568247][ T3399] hid-generic 0000:3000000:0000.0017: unknown main item tag 0x0 [ 333.588388][ T3399] hid-generic 0000:3000000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 333.634582][T24213] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4933'. [ 333.655930][T21466] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.678912][T24208] loop3: detected capacity change from 0 to 512 [ 333.692860][T24208] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 333.711672][T24218] loop7: detected capacity change from 0 to 512 [ 333.724135][T24221] netlink: 'syz.8.4938': attribute type 3 has an invalid length. [ 333.733062][T24208] EXT4-fs (loop3): 1 truncate cleaned up [ 333.739186][T24208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.763161][T24218] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 333.781569][T24218] EXT4-fs (loop7): orphan cleanup on readonly fs [ 333.798346][T24218] EXT4-fs error (device loop7): ext4_do_update_inode:5568: inode #16: comm syz.7.4937: corrupted inode contents [ 333.823725][T24233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4939'. [ 333.828231][T24218] EXT4-fs (loop7): Remounting filesystem read-only [ 333.832704][T24233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4939'. [ 333.850600][T24218] EXT4-fs (loop7): 1 truncate cleaned up [ 333.856483][T17141] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 333.867080][T17141] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 333.896195][T17141] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 333.907413][T24235] hub 9-0:1.0: USB hub found [ 333.913045][T24232] FAULT_INJECTION: forcing a failure. [ 333.913045][T24232] name failslab, interval 1, probability 0, space 0, times 0 [ 333.922449][T24235] hub 9-0:1.0: 8 ports detected [ 333.925775][T24232] CPU: 0 UID: 0 PID: 24232 Comm: syz.8.4940 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 333.925802][T24232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.925867][T24232] Call Trace: [ 333.925874][T24232] [ 333.925881][T24232] __dump_stack+0x1d/0x30 [ 333.925902][T24232] dump_stack_lvl+0xe8/0x140 [ 333.925972][T24232] dump_stack+0x15/0x1b [ 333.925988][T24232] should_fail_ex+0x265/0x280 [ 333.926017][T24232] ? nf_conncount_init+0x9e/0x1e0 [ 333.926081][T24232] should_failslab+0x8c/0xb0 [ 333.926103][T24232] __kmalloc_cache_noprof+0x4c/0x320 [ 333.926130][T24232] ? nf_ct_netns_do_get+0x366/0x380 [ 333.926237][T24232] nf_conncount_init+0x9e/0x1e0 [ 333.926329][T24232] connlimit_mt_check+0x8a/0x150 [ 333.926415][T24232] xt_check_match+0x2aa/0x4f0 [ 333.926444][T24232] ? strnlen+0x28/0x50 [ 333.926462][T24232] ? strcmp+0x22/0x50 [ 333.926479][T24232] ? xt_find_match+0x1d1/0x210 [ 333.926532][T24232] translate_table+0xa9c/0xf90 [ 333.926569][T24232] do_ipt_set_ctl+0x66f/0x820 [ 333.926641][T24232] nf_setsockopt+0x196/0x1b0 [ 333.926662][T24232] ip_setsockopt+0x102/0x110 [ 333.926689][T24232] udp_setsockopt+0x99/0xb0 [ 333.926715][T24232] sock_common_setsockopt+0x69/0x80 [ 333.926758][T24232] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 333.926780][T24232] __sys_setsockopt+0x184/0x200 [ 333.926828][T24232] __x64_sys_setsockopt+0x64/0x80 [ 333.926858][T24232] x64_sys_call+0x2bd5/0x2fb0 [ 333.926879][T24232] do_syscall_64+0xd2/0x200 [ 333.926977][T24232] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 333.927066][T24232] ? clear_bhb_loop+0x40/0x90 [ 333.927088][T24232] ? clear_bhb_loop+0x40/0x90 [ 333.927109][T24232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.927131][T24232] RIP: 0033:0x7fd4aa69e929 [ 333.927190][T24232] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.927208][T24232] RSP: 002b:00007fd4a8d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 333.927227][T24232] RAX: ffffffffffffffda RBX: 00007fd4aa8c5fa0 RCX: 00007fd4aa69e929 [ 333.927239][T24232] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000006 [ 333.927252][T24232] RBP: 00007fd4a8d07090 R08: 0000000000000570 R09: 0000000000000000 [ 333.927264][T24232] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000002 [ 333.927276][T24232] R13: 0000000000000000 R14: 00007fd4aa8c5fa0 R15: 00007fffed1ce5a8 [ 333.927321][T24232] [ 333.963066][T20889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.980396][T24218] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 334.032167][T24241] loop8: detected capacity change from 0 to 1024 [ 334.107001][T24250] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4947'. [ 334.126908][T24241] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4945: Failed to acquire dquot type 0 [ 334.169023][T24255] loop6: detected capacity change from 0 to 1024 [ 334.172741][T24241] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, [ 334.175099][T21466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.183250][T24241] inode 13: [ 334.204936][T24255] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4949: Failed to acquire dquot type 0 [ 334.210860][T24241] block 144: [ 334.222895][T24255] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, [ 334.228447][T24241] freeing already freed block (bit 9); block bitmap corrupt. [ 334.235900][T24255] inode 13: [ 334.245163][T24241] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4945: corrupted inode contents [ 334.248032][T24255] block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 334.295918][T24255] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.4949: corrupted inode contents [ 334.301280][T24241] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #13: comm syz.8.4945: mark_inode_dirty error [ 334.315193][T24255] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #13: comm syz.6.4949: mark_inode_dirty error [ 334.324281][T24241] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4945: corrupted inode contents [ 334.348104][T24241] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #13: comm syz.8.4945: mark_inode_dirty error [ 334.349040][T24255] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.4949: corrupted inode contents [ 334.359679][T24241] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4945: corrupted inode contents [ 335.222302][T24269] netlink: 852 bytes leftover after parsing attributes in process `syz.7.4948'. [ 335.231363][T24269] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4948'. [ 335.337300][T24241] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 335.346150][T24255] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.4949: mark_inode_dirty error [ 335.346318][T24255] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.4949: corrupted inode contents [ 335.346444][T24255] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 335.379817][T24241] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #13: comm syz.8.4945: corrupted inode contents [ 335.379947][T24255] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.4949: corrupted inode contents [ 335.414034][T24241] EXT4-fs error (device loop8): ext4_truncate:4597: inode #13: comm syz.8.4945: mark_inode_dirty error [ 335.716448][T24272] loop4: detected capacity change from 0 to 512 [ 335.723134][T24272] EXT4-fs: Ignoring removed oldalloc option [ 335.962918][T24269] loop7: detected capacity change from 0 to 512 [ 335.969742][T24269] EXT4-fs: Ignoring removed oldalloc option [ 336.381245][T24241] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 336.390427][T24255] EXT4-fs error (device loop6): ext4_truncate:4597: inode #13: comm syz.6.4949: mark_inode_dirty error [ 336.403299][T24241] EXT4-fs (loop8): 1 truncate cleaned up [ 336.409361][T24241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.422301][T24255] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 336.562187][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 336.562271][ T29] audit: type=1400 audit(1752522562.865:17360): avc: denied { create } for pid=24278 comm="syz.3.4952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 336.612165][T24272] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 336.620938][T24269] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.381237][T24255] EXT4-fs (loop6): 1 truncate cleaned up [ 337.387495][T24255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.408984][T24241] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 337.442634][T24272] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 337.442709][T24272] EXT4-fs: failed to create workqueue [ 337.457551][T24272] EXT4-fs (loop4): mount failed [ 337.462761][T24269] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 337.462785][T24269] EXT4-fs: failed to create workqueue [ 337.477623][T24269] EXT4-fs (loop7): mount failed [ 337.594956][T24241] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 337.607920][T24241] Quota error (device loop8): do_check_range: Getting block 64 out of range 1-5 [ 337.617100][T24241] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 337.626513][T24241] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.4945: Failed to acquire dquot type 0 [ 337.905046][T24241] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 337.905106][T24255] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 337.931128][T24255] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 337.951945][T24255] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 337.969690][T24291] netlink: 'syz.4.4954': attribute type 13 has an invalid length. [ 337.980677][T23441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.993315][T21996] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.015431][T24302] hub 9-0:1.0: USB hub found [ 338.020137][T24302] hub 9-0:1.0: 8 ports detected [ 338.297459][T24291] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.306227][T24291] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.512896][T24291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.538263][T24291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.746227][T24291] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.755560][T24291] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.764498][T24291] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.773429][T24291] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.815459][T24328] loop6: detected capacity change from 0 to 128 [ 338.828467][T24328] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 338.831055][ T29] audit: type=1400 audit(1752522565.125:17361): avc: denied { mount } for pid=24323 comm="syz.4.4962" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 338.836330][T24328] FAT-fs (loop6): Filesystem has been set read-only [ 338.866269][T24328] syz.6.4964: attempt to access beyond end of device [ 338.866269][T24328] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 338.880005][T24328] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 338.887910][T24328] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 338.890074][ T29] audit: type=1400 audit(1752522565.165:17362): avc: denied { write } for pid=24323 comm="syz.4.4962" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 338.916616][ T29] audit: type=1400 audit(1752522565.165:17363): avc: denied { open } for pid=24323 comm="syz.4.4962" path="/26/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 338.940045][T24328] syz.6.4964: attempt to access beyond end of device [ 338.940045][T24328] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 338.941050][ T29] audit: type=1400 audit(1752522565.225:17364): avc: denied { unmount } for pid=22580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 338.953574][T24328] syz.6.4964: attempt to access beyond end of device [ 338.953574][T24328] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 338.976683][T24333] loop8: detected capacity change from 0 to 764 [ 338.987181][T24328] syz.6.4964: attempt to access beyond end of device [ 338.987181][T24328] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 339.009162][T24328] syz.6.4964: attempt to access beyond end of device [ 339.009162][T24328] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 339.024003][T24326] rock: directory entry would overflow storage [ 339.024193][T24328] syz.6.4964: attempt to access beyond end of device [ 339.024193][T24328] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 339.030177][T24326] rock: sig=0x5850, size=36, remaining=7 [ 339.045767][T24328] syz.6.4964: attempt to access beyond end of device [ 339.045767][T24328] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 339.065048][T24328] syz.6.4964: attempt to access beyond end of device [ 339.065048][T24328] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 339.084261][T24331] loop3: detected capacity change from 0 to 1024 [ 339.085261][T24328] syz.6.4964: attempt to access beyond end of device [ 339.085261][T24328] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 339.107595][T24328] syz.6.4964: attempt to access beyond end of device [ 339.107595][T24328] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 339.140717][T24339] loop4: detected capacity change from 0 to 764 [ 339.151137][T24339] rock: directory entry would overflow storage [ 339.157426][T24339] rock: sig=0x5850, size=36, remaining=7 [ 339.162909][T24351] loop7: detected capacity change from 0 to 128 [ 339.171049][T24344] loop3: detected capacity change from 0 to 1024 [ 339.185054][T24349] hub 9-0:1.0: USB hub found [ 339.187811][T24351] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 339.195401][T24349] hub 9-0:1.0: 8 ports detected [ 339.197505][T24351] FAT-fs (loop7): Filesystem has been set read-only [ 339.227606][T24344] Quota error (device loop3): do_check_range: Getting block 64 out of range 1-5 [ 339.236705][T24344] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 339.246114][T24344] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4967: Failed to acquire dquot type 0 [ 339.263845][T24351] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 339.271760][T24351] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 339.280163][ T29] audit: type=1400 audit(1752522565.565:17365): avc: denied { mount } for pid=24362 comm="syz.8.4971" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 339.329673][T24344] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 339.352182][T24344] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4967: corrupted inode contents [ 339.479539][T24344] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #13: comm syz.3.4967: mark_inode_dirty error [ 339.504836][T24344] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4967: corrupted inode contents [ 339.522627][T24370] __nla_validate_parse: 5 callbacks suppressed [ 339.522641][T24370] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4974'. [ 339.573843][T24344] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.4967: mark_inode_dirty error [ 339.647290][T24344] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4967: corrupted inode contents [ 339.672804][T24344] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 339.687457][T24344] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #13: comm syz.3.4967: corrupted inode contents [ 339.694220][T24379] netlink: 408 bytes leftover after parsing attributes in process `+}[@'. [ 339.699812][T24344] EXT4-fs error (device loop3): ext4_truncate:4597: inode #13: comm syz.3.4967: mark_inode_dirty error [ 339.722038][T24379] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 339.722191][T24344] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 339.730521][T24379] tipc: Enabling of bearer rejected, failed to enable media [ 339.742752][T24344] EXT4-fs (loop3): 1 truncate cleaned up [ 339.755151][T24344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.806010][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x4 [ 339.813706][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x2 [ 339.828382][T24344] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 339.837853][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.845628][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.853368][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.861004][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.868710][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.876421][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.884071][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.891721][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.899438][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.907122][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.914929][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.922640][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.930368][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.938123][ T6537] hid-generic 0000:3000000:0000.0018: unknown main item tag 0x0 [ 339.947528][T24386] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 339.959263][ T6537] hid-generic 0000:3000000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 339.964431][T24386] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 340.055047][T24405] loop4: detected capacity change from 0 to 764 [ 340.062552][T20889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.082601][T24405] rock: directory entry would overflow storage [ 340.088759][T24405] rock: sig=0x5850, size=36, remaining=7 [ 340.104515][T24417] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4985'. [ 340.104542][T24418] hub 9-0:1.0: USB hub found [ 340.104584][T24418] hub 9-0:1.0: 8 ports detected [ 340.174873][T24432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4989'. [ 340.183899][T24432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4989'. [ 340.261778][T24437] FAULT_INJECTION: forcing a failure. [ 340.261778][T24437] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 340.274933][T24437] CPU: 0 UID: 0 PID: 24437 Comm: syz.8.4991 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 340.274959][T24437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.274992][T24437] Call Trace: [ 340.274998][T24437] [ 340.275003][T24437] __dump_stack+0x1d/0x30 [ 340.275022][T24437] dump_stack_lvl+0xe8/0x140 [ 340.275041][T24437] dump_stack+0x15/0x1b [ 340.275059][T24437] should_fail_ex+0x265/0x280 [ 340.275155][T24437] should_fail+0xb/0x20 [ 340.275182][T24437] should_fail_usercopy+0x1a/0x20 [ 340.275244][T24437] _copy_from_user+0x1c/0xb0 [ 340.275261][T24437] get_user_ifreq+0x53/0x110 [ 340.275279][T24437] inet_ioctl+0x2c6/0x3a0 [ 340.275328][T24437] packet_ioctl+0x236/0x280 [ 340.275352][T24437] sock_do_ioctl+0x73/0x220 [ 340.275375][T24437] sock_ioctl+0x41b/0x610 [ 340.275441][T24437] ? __pfx_sock_ioctl+0x10/0x10 [ 340.275459][T24437] __se_sys_ioctl+0xcb/0x140 [ 340.275489][T24437] __x64_sys_ioctl+0x43/0x50 [ 340.275516][T24437] x64_sys_call+0x19a8/0x2fb0 [ 340.275596][T24437] do_syscall_64+0xd2/0x200 [ 340.275611][T24437] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 340.275633][T24437] ? clear_bhb_loop+0x40/0x90 [ 340.275651][T24437] ? clear_bhb_loop+0x40/0x90 [ 340.275674][T24437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.275768][T24437] RIP: 0033:0x7fd4aa69e929 [ 340.275784][T24437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.275802][T24437] RSP: 002b:00007fd4a8d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 340.275821][T24437] RAX: ffffffffffffffda RBX: 00007fd4aa8c5fa0 RCX: 00007fd4aa69e929 [ 340.275832][T24437] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 000000000000000a [ 340.275842][T24437] RBP: 00007fd4a8d07090 R08: 0000000000000000 R09: 0000000000000000 [ 340.275859][T24437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.275870][T24437] R13: 0000000000000000 R14: 00007fd4aa8c5fa0 R15: 00007fffed1ce5a8 [ 340.275886][T24437] [ 340.544784][T24448] loop7: detected capacity change from 0 to 1024 [ 340.653342][T24462] loop3: detected capacity change from 0 to 128 [ 340.666628][T24468] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4995'. [ 340.699090][T24470] loop8: detected capacity change from 0 to 512 [ 340.709085][T24470] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 340.728366][T24473] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4997'. [ 340.744674][T24470] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 340.766155][T24470] EXT4-fs (loop8): orphan cleanup on readonly fs [ 340.776830][T24476] loop4: detected capacity change from 0 to 764 [ 340.794072][T24470] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4996: bg 0: block 361: padding at end of block bitmap is not set [ 340.814932][T24470] EXT4-fs (loop8): Remounting filesystem read-only [ 340.821685][T24478] loop3: detected capacity change from 0 to 4096 [ 340.830889][T24476] rock: directory entry would overflow storage [ 340.837112][T24476] rock: sig=0x5850, size=36, remaining=7 [ 340.844337][T24470] EXT4-fs (loop8): 1 truncate cleaned up [ 340.876464][T24470] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.4996: dx entry: limit 0 != root limit 125 [ 340.888334][T24470] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.4996: Corrupt directory, running e2fsck is recommended [ 340.980611][T24492] loop8: detected capacity change from 0 to 1024 [ 341.025670][T24499] netlink: 852 bytes leftover after parsing attributes in process `syz.4.5000'. [ 341.034847][T24499] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5000'. [ 341.374664][T24502] loop4: detected capacity change from 0 to 512 [ 341.382203][T24502] EXT4-fs: Ignoring removed oldalloc option [ 341.937621][T24506] loop8: detected capacity change from 0 to 128 [ 341.953451][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 341.953421][T24506] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 341.953465][ T29] audit: type=1400 audit(1752522568.255:17419): avc: denied { mount } for pid=24505 comm="syz.8.5003" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 342.186923][T24503] loop3: detected capacity change from 0 to 512 [ 342.193604][T24503] EXT4-fs: Ignoring removed oldalloc option [ 342.929997][ T29] audit: type=1400 audit(1752522568.315:17420): avc: denied { add_name } for pid=24505 comm="syz.8.5003" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 342.941745][T24502] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 342.951126][ T29] audit: type=1400 audit(1752522568.315:17421): avc: denied { create } for pid=24505 comm="syz.8.5003" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 342.979840][ T29] audit: type=1400 audit(1752522569.225:17422): avc: denied { open } for pid=24505 comm="syz.8.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 342.999224][ T29] audit: type=1400 audit(1752522569.225:17423): avc: denied { kernel } for pid=24505 comm="syz.8.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 343.211726][T24503] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 343.976139][ T29] audit: type=1400 audit(1752522569.496:17424): avc: denied { read open } for pid=24505 comm="syz.8.5003" path="/56/mnt/file1" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 343.999670][ T29] audit: type=1400 audit(1752522569.526:17425): avc: denied { write } for pid=24505 comm="syz.8.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 344.020415][ T29] audit: type=1400 audit(1752522569.526:17426): avc: denied { read } for pid=24505 comm="syz.8.5003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 344.022035][T24503] EXT4-fs (loop3): orphan cleanup on readonly fs [ 344.246600][T24502] EXT4-fs (loop4): orphan cleanup on readonly fs [ 344.253894][T24503] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 344.263377][T24503] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 344.272783][T24503] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5001: Failed to acquire dquot type 1 [ 344.284153][T24502] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5000: Failed to acquire dquot type 1 [ 344.296836][T24503] EXT4-fs (loop3): 1 truncate cleaned up [ 344.302587][T24502] EXT4-fs (loop4): 1 truncate cleaned up [ 344.415657][T24522] loop7: detected capacity change from 0 to 128 [ 344.480642][T24533] loop6: detected capacity change from 0 to 764 [ 344.493323][T24533] rock: directory entry would overflow storage [ 344.499505][T24533] rock: sig=0x5850, size=36, remaining=7 [ 344.539341][T24547] loop8: detected capacity change from 0 to 128 [ 344.591998][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x4 [ 344.599766][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x2 [ 344.621068][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.628904][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.636570][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.644224][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.651935][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.659587][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.667345][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.675285][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.683086][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.690787][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.698546][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.706230][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.713981][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.720068][T24568] hub 9-0:1.0: USB hub found [ 344.721682][ T6536] hid-generic 0000:3000000:0000.0019: unknown main item tag 0x0 [ 344.735043][T24568] hub 9-0:1.0: 8 ports detected [ 344.779494][T24571] loop7: detected capacity change from 0 to 1024 [ 344.818005][T24580] netlink: 'syz.8.5022': attribute type 1 has an invalid length. [ 344.859183][T24584] loop8: detected capacity change from 0 to 128 [ 344.868903][T24582] __nla_validate_parse: 5 callbacks suppressed [ 344.868917][T24582] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5023'. [ 344.884976][ T6536] hid-generic 0000:3000000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 344.897032][T24584] EXT4-fs mount: 10 callbacks suppressed [ 344.897047][T24584] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 344.917924][T24588] FAULT_INJECTION: forcing a failure. [ 344.917924][T24588] name failslab, interval 1, probability 0, space 0, times 0 [ 344.930654][T24588] CPU: 1 UID: 0 PID: 24588 Comm: syz.4.5025 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 344.930683][T24588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 344.930693][T24588] Call Trace: [ 344.930699][T24588] [ 344.930706][T24588] __dump_stack+0x1d/0x30 [ 344.930835][T24588] dump_stack_lvl+0xe8/0x140 [ 344.930852][T24588] dump_stack+0x15/0x1b [ 344.930866][T24588] should_fail_ex+0x265/0x280 [ 344.930894][T24588] ? percpu_ref_init+0x9c/0x250 [ 344.930955][T24588] should_failslab+0x8c/0xb0 [ 344.930978][T24588] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 344.931078][T24588] __kmalloc_cache_noprof+0x4c/0x320 [ 344.931168][T24588] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 344.931196][T24588] percpu_ref_init+0x9c/0x250 [ 344.931227][T24588] io_ring_ctx_alloc+0x1aa/0x6a0 [ 344.931256][T24588] io_uring_create+0x10f/0x610 [ 344.931332][T24588] __se_sys_io_uring_setup+0x1f7/0x210 [ 344.931366][T24588] __x64_sys_io_uring_setup+0x31/0x40 [ 344.931415][T24588] x64_sys_call+0x184b/0x2fb0 [ 344.931513][T24588] do_syscall_64+0xd2/0x200 [ 344.931531][T24588] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 344.931557][T24588] ? clear_bhb_loop+0x40/0x90 [ 344.931616][T24588] ? clear_bhb_loop+0x40/0x90 [ 344.931638][T24588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.931657][T24588] RIP: 0033:0x7f5eeb5ce929 [ 344.931747][T24588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.931767][T24588] RSP: 002b:00007f5ee9c36fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 344.931786][T24588] RAX: ffffffffffffffda RBX: 00007f5eeb7f5fa0 RCX: 00007f5eeb5ce929 [ 344.931799][T24588] RDX: 0000200000000300 RSI: 0000200000000380 RDI: 000000000000010d [ 344.931810][T24588] RBP: 0000200000000380 R08: 0000000000000000 R09: 0000200000000300 [ 344.931821][T24588] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 344.931832][T24588] R13: 0000200000000340 R14: 000000000000010d R15: 0000200000000300 [ 344.931895][T24588] [ 345.093818][T24584] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 345.150282][T24598] netlink: 'syz.3.5027': attribute type 29 has an invalid length. [ 345.227449][T24608] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5024'. [ 345.262681][T21996] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.357339][T24620] hub 9-0:1.0: USB hub found [ 345.362160][T24620] hub 9-0:1.0: 8 ports detected [ 345.385642][T24624] netlink: 'syz.8.5032': attribute type 4 has an invalid length. [ 345.396139][T24624] netlink: 'syz.8.5032': attribute type 4 has an invalid length. [ 345.409315][T24624] FAULT_INJECTION: forcing a failure. [ 345.409315][T24624] name failslab, interval 1, probability 0, space 0, times 0 [ 345.422096][T24624] CPU: 1 UID: 0 PID: 24624 Comm: syz.8.5032 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 345.422121][T24624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.422133][T24624] Call Trace: [ 345.422140][T24624] [ 345.422148][T24624] __dump_stack+0x1d/0x30 [ 345.422171][T24624] dump_stack_lvl+0xe8/0x140 [ 345.422235][T24624] dump_stack+0x15/0x1b [ 345.422328][T24624] should_fail_ex+0x265/0x280 [ 345.422366][T24624] should_failslab+0x8c/0xb0 [ 345.422393][T24624] kmem_cache_alloc_node_noprof+0x57/0x320 [ 345.422491][T24624] ? __alloc_skb+0x101/0x320 [ 345.422524][T24624] __alloc_skb+0x101/0x320 [ 345.422553][T24624] inet_ifmcaddr_notify+0x64/0x120 [ 345.422579][T24624] ____ip_mc_inc_group+0x4b5/0x5c0 [ 345.422599][T24624] __ip_mc_join_group+0x240/0x2b0 [ 345.422623][T24624] ip_mc_join_group+0x1f/0x30 [ 345.422662][T24624] ip_mcast_join_leave+0x132/0x180 [ 345.422722][T24624] do_ip_setsockopt+0x18e0/0x2240 [ 345.422748][T24624] ip_setsockopt+0x58/0x110 [ 345.422772][T24624] udp_setsockopt+0x99/0xb0 [ 345.422825][T24624] sock_common_setsockopt+0x69/0x80 [ 345.422849][T24624] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 345.422872][T24624] __sys_setsockopt+0x184/0x200 [ 345.422899][T24624] __x64_sys_setsockopt+0x64/0x80 [ 345.423015][T24624] x64_sys_call+0x2bd5/0x2fb0 [ 345.423037][T24624] do_syscall_64+0xd2/0x200 [ 345.423074][T24624] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 345.423122][T24624] ? clear_bhb_loop+0x40/0x90 [ 345.423146][T24624] ? clear_bhb_loop+0x40/0x90 [ 345.423170][T24624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.423192][T24624] RIP: 0033:0x7fd4aa69e929 [ 345.423227][T24624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.423242][T24624] RSP: 002b:00007fd4a8d07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 345.423258][T24624] RAX: ffffffffffffffda RBX: 00007fd4aa8c5fa0 RCX: 00007fd4aa69e929 [ 345.423306][T24624] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000003 [ 345.423317][T24624] RBP: 00007fd4a8d07090 R08: 0000000000000088 R09: 0000000000000000 [ 345.423378][T24624] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000001 [ 345.423389][T24624] R13: 0000000000000000 R14: 00007fd4aa8c5fa0 R15: 00007fffed1ce5a8 [ 345.423406][T24624] [ 345.672515][T24628] FAULT_INJECTION: forcing a failure. [ 345.672515][T24628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 345.685799][T24628] CPU: 0 UID: 0 PID: 24628 Comm: syz.8.5034 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 345.685826][T24628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.685837][T24628] Call Trace: [ 345.685843][T24628] [ 345.685850][T24628] __dump_stack+0x1d/0x30 [ 345.685868][T24628] dump_stack_lvl+0xe8/0x140 [ 345.685886][T24628] dump_stack+0x15/0x1b [ 345.685963][T24628] should_fail_ex+0x265/0x280 [ 345.685991][T24628] should_fail_alloc_page+0xf2/0x100 [ 345.686018][T24628] __alloc_frozen_pages_noprof+0xff/0x360 [ 345.686098][T24628] alloc_pages_mpol+0xb3/0x250 [ 345.686130][T24628] vma_alloc_folio_noprof+0x1aa/0x300 [ 345.686170][T24628] handle_mm_fault+0xec2/0x2be0 [ 345.686189][T24628] ? mas_walk+0xf2/0x120 [ 345.686285][T24628] do_user_addr_fault+0x636/0x1090 [ 345.686318][T24628] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 345.686345][T24628] exc_page_fault+0x62/0xa0 [ 345.686374][T24628] asm_exc_page_fault+0x26/0x30 [ 345.686421][T24628] RIP: 0033:0x7fd4aa560ca3 [ 345.686434][T24628] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 345.686536][T24628] RSP: 002b:00007fd4a8d064a0 EFLAGS: 00010202 [ 345.686553][T24628] RAX: 0000000000003000 RBX: 00007fd4a8d06540 RCX: 00007fd4a08e7000 [ 345.686567][T24628] RDX: 00007fd4a8d066e0 RSI: 0000000000000001 RDI: 00007fd4a8d065e0 [ 345.686608][T24628] RBP: 00000000000000d9 R08: 0000000000000006 R09: 0000000000000021 [ 345.686671][T24628] R10: 0000000000000024 R11: 00007fd4a8d06540 R12: 0000000000000001 [ 345.686682][T24628] R13: 00007fd4aa73c3a0 R14: 0000000000000002 R15: 00007fd4a8d065e0 [ 345.686697][T24628] [ 345.686708][T24628] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 345.865297][T24628] loop8: detected capacity change from 0 to 512 [ 345.897965][T24628] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 345.915962][T24628] EXT4-fs (loop8): orphan cleanup on readonly fs [ 345.924816][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 345.930552][T24628] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.5034: corrupted inode contents [ 345.932589][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 345.946427][T24628] EXT4-fs (loop8): Remounting filesystem read-only [ 345.958701][T24628] EXT4-fs (loop8): 1 truncate cleaned up [ 345.960792][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 345.965040][T17141] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 345.972042][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 345.972066][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 345.982581][T17141] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 345.990254][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 345.999755][T17141] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 346.008390][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 346.018624][T24628] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.026062][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 346.053816][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 346.061502][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 346.069182][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 346.076855][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 346.084557][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 346.092271][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 346.099892][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 346.107529][ T23] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 346.116426][T21996] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.118086][ T23] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 346.152852][T24661] loop3: detected capacity change from 0 to 128 [ 346.160988][T24661] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 346.173255][T24661] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 346.178719][T24665] loop8: detected capacity change from 0 to 764 [ 346.192569][T24665] rock: directory entry would overflow storage [ 346.198750][T24665] rock: sig=0x5850, size=36, remaining=7 [ 346.257423][T24671] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5041'. [ 346.281111][T20889] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 346.375478][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x4 [ 346.383277][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x2 [ 346.392445][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.400104][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.407919][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.415614][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.423373][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.431091][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.438812][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.446508][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.454290][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.461950][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.469726][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.477362][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.485013][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.492710][ T23] hid-generic 0000:3000000:0000.001B: unknown main item tag 0x0 [ 346.500886][ T23] hid-generic 0000:3000000:0000.001B: hidraw0: HID v0.00 Device [sy] on syz0 [ 346.523611][T24704] loop4: detected capacity change from 0 to 128 [ 346.533446][T24704] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 346.541267][T24704] FAT-fs (loop4): Filesystem has been set read-only [ 346.548354][T24704] bio_check_eod: 24904 callbacks suppressed [ 346.548362][T24704] syz.4.5052: attempt to access beyond end of device [ 346.548362][T24704] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 346.567917][T24704] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 346.575739][T24704] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 346.583778][T24704] syz.4.5052: attempt to access beyond end of device [ 346.583778][T24704] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.597197][T24704] syz.4.5052: attempt to access beyond end of device [ 346.597197][T24704] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.610463][T24704] syz.4.5052: attempt to access beyond end of device [ 346.610463][T24704] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.623918][T24704] syz.4.5052: attempt to access beyond end of device [ 346.623918][T24704] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.638786][T24704] syz.4.5052: attempt to access beyond end of device [ 346.638786][T24704] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.653375][T24704] syz.4.5052: attempt to access beyond end of device [ 346.653375][T24704] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.658069][T24707] loop7: detected capacity change from 0 to 764 [ 346.666741][T24704] syz.4.5052: attempt to access beyond end of device [ 346.666741][T24704] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.687357][T24704] syz.4.5052: attempt to access beyond end of device [ 346.687357][T24704] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.700878][T24707] rock: directory entry would overflow storage [ 346.701389][T24704] syz.4.5052: attempt to access beyond end of device [ 346.701389][T24704] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 346.707352][T24707] rock: sig=0x5850, size=36, remaining=7 [ 347.070947][T24721] loop8: detected capacity change from 0 to 128 [ 347.080009][T24721] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 347.093629][T24721] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 347.161673][T24724] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5056'. [ 347.203022][T21996] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 347.240198][T24730] hub 9-0:1.0: USB hub found [ 347.246185][T24730] hub 9-0:1.0: 8 ports detected [ 347.288200][T24736] loop8: detected capacity change from 0 to 128 [ 347.298220][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 347.298233][ T29] audit: type=1400 audit(1752522573.606:17498): avc: denied { write } for pid=24737 comm="syz.6.5061" path="socket:[64625]" dev="sockfs" ino=64625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.334043][ T29] audit: type=1400 audit(1752522573.636:17499): avc: denied { create } for pid=24742 comm="syz.8.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 347.373353][ T29] audit: type=1400 audit(1752522573.636:17500): avc: denied { write } for pid=24742 comm="syz.8.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 347.393867][ T29] audit: type=1400 audit(1752522573.636:17501): avc: denied { nlmsg_write } for pid=24742 comm="syz.8.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 347.416758][ T29] audit: type=1400 audit(1752522573.686:17502): avc: denied { ioctl } for pid=24742 comm="syz.8.5062" path="socket:[63725]" dev="sockfs" ino=63725 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 347.442732][ T29] audit: type=1400 audit(1752522573.686:17503): avc: denied { setopt } for pid=24742 comm="syz.8.5062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 347.469513][T24749] SELinux: Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped). [ 347.469689][ T29] audit: type=1326 audit(1752522573.776:17504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aa69e929 code=0x7ffc0000 [ 347.502919][ T29] audit: type=1326 audit(1752522573.776:17505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aa69e929 code=0x7ffc0000 [ 347.526596][ T29] audit: type=1326 audit(1752522573.776:17506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd4aa69e929 code=0x7ffc0000 [ 347.532541][T24755] loop6: detected capacity change from 0 to 764 [ 347.550150][ T29] audit: type=1326 audit(1752522573.776:17507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24744 comm="syz.8.5064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4aa69e929 code=0x7ffc0000 [ 347.586849][T24754] FAULT_INJECTION: forcing a failure. [ 347.586849][T24754] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.599939][T24754] CPU: 1 UID: 0 PID: 24754 Comm: syz.4.5063 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 347.599969][T24754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 347.599982][T24754] Call Trace: [ 347.599987][T24754] [ 347.600101][T24754] __dump_stack+0x1d/0x30 [ 347.600198][T24754] dump_stack_lvl+0xe8/0x140 [ 347.600217][T24754] dump_stack+0x15/0x1b [ 347.600306][T24754] should_fail_ex+0x265/0x280 [ 347.600335][T24754] should_fail+0xb/0x20 [ 347.600360][T24754] should_fail_usercopy+0x1a/0x20 [ 347.600391][T24754] _copy_to_user+0x20/0xa0 [ 347.600464][T24754] simple_read_from_buffer+0xb5/0x130 [ 347.600500][T24754] proc_fail_nth_read+0x100/0x140 [ 347.600532][T24754] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 347.600646][T24754] vfs_read+0x19d/0x6f0 [ 347.600674][T24754] ? _raw_spin_unlock_bh+0x36/0x40 [ 347.600759][T24754] ? __rcu_read_unlock+0x4f/0x70 [ 347.600808][T24754] ? __fget_files+0x184/0x1c0 [ 347.600828][T24754] ksys_read+0xda/0x1a0 [ 347.600900][T24754] __x64_sys_read+0x40/0x50 [ 347.600930][T24754] x64_sys_call+0x2d77/0x2fb0 [ 347.600950][T24754] do_syscall_64+0xd2/0x200 [ 347.601040][T24754] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 347.601104][T24754] ? clear_bhb_loop+0x40/0x90 [ 347.601161][T24754] ? clear_bhb_loop+0x40/0x90 [ 347.601233][T24754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.601255][T24754] RIP: 0033:0x7f5eeb5cd33c [ 347.601332][T24754] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 347.601350][T24754] RSP: 002b:00007f5ee9c37030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.601370][T24754] RAX: ffffffffffffffda RBX: 00007f5eeb7f5fa0 RCX: 00007f5eeb5cd33c [ 347.601383][T24754] RDX: 000000000000000f RSI: 00007f5ee9c370a0 RDI: 0000000000000004 [ 347.601395][T24754] RBP: 00007f5ee9c37090 R08: 0000000000000000 R09: 0000000000000000 [ 347.601407][T24754] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.601419][T24754] R13: 0000000000000000 R14: 00007f5eeb7f5fa0 R15: 00007ffd8fbf2a38 [ 347.601514][T24754] [ 347.808702][T24751] rock: directory entry would overflow storage [ 347.814886][T24751] rock: sig=0x5850, size=36, remaining=7 [ 347.880171][T24773] hub 9-0:1.0: USB hub found [ 347.893351][T24774] netlink: 408 bytes leftover after parsing attributes in process `+}[@'. [ 347.894687][T24773] hub 9-0:1.0: 8 ports detected [ 347.914865][T24774] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 347.923317][T24774] tipc: Enabling of bearer rejected, failed to enable media [ 347.947635][T24781] loop6: detected capacity change from 0 to 1024 [ 347.962409][T24784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5074'. [ 347.974362][T24781] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5073: Failed to acquire dquot type 0 [ 347.988024][T24781] EXT4-fs error (device loop6): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 348.004204][T24781] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.5073: corrupted inode contents [ 348.017765][T24781] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #13: comm syz.6.5073: mark_inode_dirty error [ 348.030712][T24781] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.5073: corrupted inode contents [ 348.044071][T24781] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.5073: mark_inode_dirty error [ 348.055628][T24781] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.5073: corrupted inode contents [ 348.070238][T24781] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 348.078987][T24781] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #13: comm syz.6.5073: corrupted inode contents [ 348.092610][T24781] EXT4-fs error (device loop6): ext4_truncate:4597: inode #13: comm syz.6.5073: mark_inode_dirty error [ 348.105887][T24797] loop3: detected capacity change from 0 to 764 [ 348.122862][T24781] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 348.141992][T24781] EXT4-fs (loop6): 1 truncate cleaned up [ 348.152003][T24781] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.181923][T24781] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 348.192721][T24808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5082'. [ 348.201762][T24808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5082'. [ 348.213259][T24781] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 348.233972][T24781] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.5073: Failed to acquire dquot type 0 [ 348.250064][T24781] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 348.269927][T24813] loop4: detected capacity change from 0 to 1024 [ 348.278929][T24813] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5084: Failed to acquire dquot type 0 [ 348.290652][T24813] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 348.305630][T24813] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5084: corrupted inode contents [ 348.319266][T24813] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.5084: mark_inode_dirty error [ 348.340994][T24813] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5084: corrupted inode contents [ 348.358441][T24813] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.5084: mark_inode_dirty error [ 348.358924][T23441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.370023][T24813] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5084: corrupted inode contents [ 348.394261][T24813] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 348.403978][T24813] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5084: corrupted inode contents [ 348.423091][T24813] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.5084: mark_inode_dirty error [ 348.430579][T24817] loop3: detected capacity change from 0 to 1024 [ 348.451639][T24813] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 348.467680][T24827] loop8: detected capacity change from 0 to 128 [ 348.468338][T24813] EXT4-fs (loop4): 1 truncate cleaned up [ 348.481618][T24829] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5088'. [ 348.483715][T24813] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.505418][T24817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.524160][T24838] loop8: detected capacity change from 0 to 1024 [ 348.537907][T24837] loop6: detected capacity change from 0 to 164 [ 348.545647][T24837] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 348.562996][T24838] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.577025][T24838] EXT4-fs error (device loop8): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.8.5090: bad entry in directory: inode out of bounds - offset=12, inode=1282, rec_len=12, size=1024 fake=1 [ 348.597223][T24838] EXT4-fs error (device loop8) in ext4_delete_entry:2739: Corrupt filesystem [ 348.606190][T24838] EXT4-fs warning (device loop8): ext4_rename_delete:3726: inode #2: comm syz.8.5090: Deleting old file: nlink 4, error=-117 [ 348.632072][T24813] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 348.633703][T20889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.649468][T24844] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 348.665099][T21996] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.666458][T24844] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 348.691675][T24852] loop3: detected capacity change from 0 to 128 [ 348.699963][T24852] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 348.715400][T24848] loop6: detected capacity change from 0 to 1024 [ 348.725757][T24852] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 348.743038][T24848] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 348.755478][T24848] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 348.766925][T22580] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.779290][T24848] 9pnet_fd: Insufficient options for proto=fd [ 348.794887][T23441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.814593][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x4 [ 348.822323][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x2 [ 348.830656][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.838355][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.846027][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.853748][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.861415][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.869062][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.876754][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.884414][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.892139][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.899768][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.907453][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.915152][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.922826][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.930441][ T6536] hid-generic 0000:3000000:0000.001C: unknown main item tag 0x0 [ 348.938735][ T6536] hid-generic 0000:3000000:0000.001C: hidraw0: HID v0.00 Device [sy] on syz0 [ 348.984921][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 348.992441][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 348.999861][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.009615][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.017061][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.024502][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.024649][T20889] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 349.031890][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.031971][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.055679][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.058954][T24895] loop8: detected capacity change from 0 to 128 [ 349.063076][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.076853][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.084266][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.091749][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.099488][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.128616][T24908] loop3: detected capacity change from 0 to 1024 [ 349.136437][T24903] hub 9-0:1.0: USB hub found [ 349.141416][T24903] hub 9-0:1.0: 8 ports detected [ 349.154797][T24914] loop8: detected capacity change from 0 to 1024 [ 349.162038][T24914] EXT4-fs: Ignoring removed nobh option [ 349.167706][T24914] EXT4-fs: Ignoring removed bh option [ 349.174824][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.182423][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.184884][T24908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.189798][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.208773][T24908] pim6reg: entered allmulticast mode [ 349.209133][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.215103][T24907] pim6reg: left allmulticast mode [ 349.221815][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.234319][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.241796][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.249236][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.256648][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.264156][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.271637][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.279080][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.286508][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.293918][ T3399] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 349.303952][T24914] EXT4-fs warning (device loop8): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 349.330906][ T3399] hid-generic 0000:0000:0000.001D: hidraw0: HID v8.00 Device [syz1] on syz0 [ 349.342241][T24914] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 349.358869][T24914] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 349.361066][T20889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.404192][T24936] loop6: detected capacity change from 0 to 1024 [ 349.436103][T24936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.449494][T24936] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.463108][T24936] 9pnet_fd: Insufficient options for proto=fd [ 349.478247][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x4 [ 349.485925][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x2 [ 349.496477][T23441] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.505844][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.513580][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.521264][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.528930][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.536673][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.544396][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.552083][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.559802][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.567638][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.575293][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.582945][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.590672][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.598348][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.606077][ T10] hid-generic 0000:3000000:0000.001E: unknown main item tag 0x0 [ 349.614215][ T10] hid-generic 0000:3000000:0000.001E: hidraw0: HID v0.00 Device [sy] on syz0 [ 349.636814][T24973] loop6: detected capacity change from 0 to 128 [ 349.822568][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x4 [ 349.830461][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x2 [ 349.838955][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 349.846700][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 349.854468][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 349.862221][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 349.869894][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 349.870220][T25011] FAULT_INJECTION: forcing a failure. [ 349.870220][T25011] name failslab, interval 1, probability 0, space 0, times 0 [ 349.877617][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 349.877642][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 349.890215][T25011] CPU: 1 UID: 0 PID: 25011 Comm: syz.6.5134 Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 349.890238][T25011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.890247][T25011] Call Trace: [ 349.890254][T25011] [ 349.890260][T25011] __dump_stack+0x1d/0x30 [ 349.890280][T25011] dump_stack_lvl+0xe8/0x140 [ 349.890298][T25011] dump_stack+0x15/0x1b [ 349.890313][T25011] should_fail_ex+0x265/0x280 [ 349.890341][T25011] should_failslab+0x8c/0xb0 [ 349.890362][T25011] kmem_cache_alloc_noprof+0x50/0x310 [ 349.890386][T25011] ? mas_alloc_nodes+0x265/0x520 [ 349.890404][T25011] mas_alloc_nodes+0x265/0x520 [ 349.890423][T25011] mas_preallocate+0x33e/0x520 [ 349.890456][T25011] mmap_region+0xb7e/0x1580 [ 349.890498][T25011] do_mmap+0x9b3/0xbe0 [ 349.890528][T25011] vm_mmap_pgoff+0x17a/0x2e0 [ 349.890555][T25011] ksys_mmap_pgoff+0xc2/0x310 [ 349.890581][T25011] ? __x64_sys_mmap+0x49/0x70 [ 349.890601][T25011] x64_sys_call+0x1602/0x2fb0 [ 349.890628][T25011] do_syscall_64+0xd2/0x200 [ 349.890644][T25011] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 349.890668][T25011] ? clear_bhb_loop+0x40/0x90 [ 349.890687][T25011] ? clear_bhb_loop+0x40/0x90 [ 349.890707][T25011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.890727][T25011] RIP: 0033:0x7f4c468ee963 [ 349.890741][T25011] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 349.890759][T25011] RSP: 002b:00007f4c44f56e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 349.890776][T25011] RAX: ffffffffffffffda RBX: 00000000000006fe RCX: 00007f4c468ee963 [ 349.890788][T25011] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 349.890800][T25011] RBP: 0000200000000a42 R08: 00000000ffffffff R09: 0000000000000000 [ 349.890811][T25011] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 349.890823][T25011] R13: 00007f4c44f56ef0 R14: 00007f4c44f56eb0 R15: 0000200000000080 [ 349.890840][T25011] [ 349.927691][T25013] loop6: detected capacity change from 0 to 128 [ 349.929700][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 349.954144][T25018] __nla_validate_parse: 7 callbacks suppressed [ 349.954158][T25018] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5136'. [ 349.955211][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 349.960374][T25018] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5136'. [ 349.965313][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 349.965338][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 350.164351][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 350.172076][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 350.179729][ T6536] hid-generic 0000:3000000:0000.001F: unknown main item tag 0x0 [ 350.187640][ T6536] hid-generic 0000:3000000:0000.001F: hidraw0: HID v0.00 Device [sy] on syz0 [ 350.217441][T25032] loop6: detected capacity change from 0 to 764 [ 350.227082][T25034] loop8: detected capacity change from 0 to 128 [ 350.229935][T25030] hub 9-0:1.0: USB hub found [ 350.238931][T25034] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.239187][T25030] hub 9-0:1.0: 8 ports detected [ 350.258652][T25034] ext4 filesystem being mounted at /95/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 350.279197][T23441] ================================================================== [ 350.287274][T23441] BUG: KCSAN: data-race in pollwake / pollwake [ 350.293400][T23441] [ 350.295699][T23441] write to 0xffffc9000136f9e0 of 4 bytes by task 22580 on cpu 1: [ 350.303391][T23441] pollwake+0xb6/0x100 [ 350.307439][T23441] __wake_up_sync_key+0x52/0x80 [ 350.312265][T23441] anon_pipe_write+0x8ba/0xaa0 [ 350.317003][T23441] vfs_write+0x49d/0x8e0 [ 350.321227][T23441] ksys_write+0xda/0x1a0 [ 350.325456][T23441] __x64_sys_write+0x40/0x50 [ 350.330033][T23441] x64_sys_call+0x2cdd/0x2fb0 [ 350.334696][T23441] do_syscall_64+0xd2/0x200 [ 350.339184][T23441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.345056][T23441] [ 350.347358][T23441] write to 0xffffc9000136f9e0 of 4 bytes by task 23441 on cpu 0: [ 350.355048][T23441] pollwake+0xb6/0x100 [ 350.359092][T23441] __wake_up_sync_key+0x52/0x80 [ 350.363922][T23441] anon_pipe_write+0x8ba/0xaa0 [ 350.368668][T23441] vfs_write+0x49d/0x8e0 [ 350.372895][T23441] ksys_write+0xda/0x1a0 [ 350.377119][T23441] __x64_sys_write+0x40/0x50 [ 350.381689][T23441] x64_sys_call+0x2cdd/0x2fb0 [ 350.386343][T23441] do_syscall_64+0xd2/0x200 [ 350.390824][T23441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.396701][T23441] [ 350.399002][T23441] value changed: 0x00000000 -> 0x00000001 [ 350.404689][T23441] [ 350.406987][T23441] Reported by Kernel Concurrency Sanitizer on: [ 350.413114][T23441] CPU: 0 UID: 0 PID: 23441 Comm: syz-executor Not tainted 6.16.0-rc6-syzkaller #0 PREEMPT(voluntary) [ 350.424027][T23441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.434062][T23441] ================================================================== [ 350.515096][T25046] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5141'. [ 350.569961][T21996] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.