last executing test programs: 6m44.392278025s ago: executing program 32 (id=820): perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x80000001, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400b5000000000400000000", @ANYRES32=0x0, @ANYBLOB="00000000001400001c00128009000100626f6e64000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m28.864933239s ago: executing program 33 (id=1019): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) bind$unix(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32613) 6m25.311031733s ago: executing program 34 (id=1057): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e0, 0x200, 0x200, 0x300, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x8000, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x1e, 0xfffffffffffffd1e, 0x0, 0x0, 0x3, 0x89, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x41cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000280)={0x213, @tick=0x3f, 0x3, {0x6, 0x8}, 0xf, 0x1, 0x80}) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005040000fd2900008400002005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000ef0000da00000000000018110006a75e47351962761c47bf2186b0938e5c86490a7e4c261565a189ec51569359c1c0eb2b7a088801ef4aadd2d7fd395aae004e26e7d7b0ecdf2baf865e6cdf56f2027cc209d60ce47a057be5109578fa620f809fc515d9f5d13226c6c5d936ae62abafad424f32532226658b6b3cb1682430082ece40dc982b4f9bfb8945", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000840)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0xc, &(0x7f0000000a40)=ANY=[@ANYRES8=r1, @ANYBLOB="376edf390695b37c45e8c4e3ae7b558675d5462a17ab4379b3fa9b5905a69c03835d64b5d667e354f56901459cfbbe89d4c6ce42f1b0eedc187f52c969eef3d615a4d983b5425a47515492977e47e071fd9b0600f218477543cd551178bc211747f0605695181a0fb9edd258c759586c3c0ac009cb94ce842d24e5eb71231f573f0fb2cc36941ba186c5274850c20e322fa629692a209d7a136c05e6af9eb0cdc604f395b6845a869b08953acab38e9394b1ef9954418467472e7142bf5a1bc773bc9aa3bc18de", @ANYRES64=r4, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="09000000fe3f1400e27f00000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000b546461281731e10b93e4101c6d99b2bbcde42e9e6be69ab0b80debca570623347b1affae17eb26f579350ea00f54527c5cd487778d0a0c7a08284bef4565f2824e5f54cf3625747e9c4b32fc8fe0d5a7da85bd071423d1f545c1706c7b2217a8dff68ed4f52745445e9abdf71be394185327325090bcb7a313e547e7de6068585c7612605c551e2927996065ea581b03be9f7f885c90de3a89bea03500ba4af918acec3b2386eecef2a97f64cc0a2ddab715e03df5692a8d3207294518002da5f073978849e9ebd4dcff75010c706f5e2b1196a75b1698e070cf346ab997506c50d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) fcntl$setlease(r7, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x1, 0x8, 0x8, 0x20005, 0x2e, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r8 = syz_open_dev$hiddev(&(0x7f00000004c0), 0x3fe000000000000, 0x4a00) ioctl$HIDIOCSREPORT(r8, 0x400c4808, &(0x7f0000000800)={0x1, 0x200, 0x6}) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000440)={r4, &(0x7f0000000180), 0x0}, 0x20) socket$key(0xf, 0x3, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 6m24.147258971s ago: executing program 35 (id=1073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) r4 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001640)="657573a2aaa76a045d877c1f6455a4bb7edaedaf2406cf034c55272afe4a39f80fec79674992739b3f1d46ab6fc6b89bc95d81d84d8c293613c9f90375e9112c7b5f65f27e0e214389e9034316b5f9b75aaba5bc0d8f2290bd36c6624c127b3433e77de62a43eb8eeecd139da8a083185e6bef3c0866b648a4f6432a60e58c664a7a3dcb4a1776e6fdb08687841d75cdf12f0d7578930caa6a450381441bd9023d757be41434aaa87208e070bae470b8ebe5b100c3d6ed01dbff6a6e13320627043926cb30d2233291a5d9a15bfb760df9fabaa9f450747ff1cf93258dfbd2132d00516d8edfcb6b6352eb385866585cb371846f31532e653ccf7bc842c81206c8e80530a748501b2da5fedb1bcd0e53d09826aeb25c7ed8f3e1b219649baf3fc9ccb0da4aa1bdefca77ca97aa0c50d0485413936b83a20158cc3795456df09a917751c6e9555988b80b26f36bc8294fa37aca1b0c570e93588c9c25f4d72f01ba4bb874685628f0b64d71eaa9d17b489826ada40cede73bad175b9e956942b581fb7c52added185ce2f24422c0bf33ff32bb0e9e50b697f3257eb76134076bcf59767d12dc2cfa9c6e4544b55adc09a330a873c3a5ac8e28dda7fe398be13b3949ddaa7e25fc9652b783a95db047a3477a64dee6c4eadccbb48e9a525539c51603f8fdf1a8af0b9968ea399b7d787ead48a43bb8f83ced7de9dbe9d29a04438103179d2cc91cc15a5f3b5c589594d5232f8e956776547946bd38ea993b2cd1b1290ba255ef4a1a97055ad51cff35b804ef472a9f60bfedf3af92fc51e9b9e5580d4b12ac5fae4d8a4b9761b1c72a7282fe1cbc90767ec3266aef7ccf306ba8fc5161c74c3765b6b1ad5ab007b9892aedca8fadc7b37597546de787034e2c98a34118ef63680882759f4c3cb654e050b1303d3c9ded614e54fc833992b3d376e9f581d2ef7064ff268359a022b0df7d0679a54746150528ce08d47a05dd0e1f481b0f0b27f25e8b7b0a17827841cd7711e84dae20d98a76e5c6ea29b7a676bc4afb5729705e235ab7d41cf6dc39a208e806db5077326345bff9910e8b591d9c45f506f57f0392c41dfbe0e788299582f1dc2323da8ba93a7141061c8f78f81518c59c41a289b98d83a4575e9a509c0c615cd39ae76d2749378047a3b4ca1078880a0620088c17661322632882c77f751c60443e27df36020a72081b8e32f796f103412721158831ad7658a1299015a8a28ebc4cfd1414f4f4dcdef109c2bd75b7a8d83447e382724ec1076237c85b311df47a4fa7ad981e0f3918a093855e9968364c9bd1f385fccf076bc9e61558ddbe969742a860599a87e045b8fd95b0eb11b1f0fbdcb8a4008da5277f071d819791a2f54fc9f676196cf0b3f0e91c6d1586d9bd687c1df1e759e80b0cea66ea75eef5f9e57a36f61670268b8e2ad39561525e73fe2c942d0fb3f53e46695762c0dcee78ca9b2b81cba1c5fa2a736954dedcdf869149c7220be1f4ea53ccd72c3f8f7d9483068d668542023ea9a3d415a2006a5ac5439668c0a211c9d3212d38cdc13c35bf184579955fff0c35b2870af088340d60f744a0806135ce50a123182ab68fa8a89d858eceeed660f1ec5671d6d1be21022c372eabfa4fb1ebe03f7ab2650ec3679507d17611d1cd694be1adb33e591716af45eb1269969aca77be07d18784e2dd1240b6ac67be842afa51ce452f106de37a1e271b37e2904d6276c09eb5915fc8af524ff86e652c2acd33b634d8ba9268b7c278ebb8a92d7a45d97d2e45b4064b55ed5c56d3ed11adc0c", 0xfdef}], 0x1}, 0x48800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r5 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) 5m1.829657018s ago: executing program 36 (id=2439): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) (fail_nth: 6) 2m59.815517345s ago: executing program 7 (id=5022): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001b40)={&(0x7f0000001980)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000003000000010000000200000f3900000005c87d303a496d1a6f0000000200000002000000010000004d3655100000000000000f01000000b5005f00"], 0x0, 0x4f, 0x0, 0x1, 0x5}, 0x18) fcntl$notify(r0, 0x402, 0x3) 2m59.768615546s ago: executing program 7 (id=5023): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000009c0)="010000000037a788a11d18000000000000006923c63a4541062101b60a2156566de77062", 0x24, r2) 2m59.767626056s ago: executing program 7 (id=5025): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syslog(0x2, &(0x7f0000000000)=""/49, 0x31) 2m59.750064766s ago: executing program 7 (id=5026): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket(0x1d, 0x2, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_pgetevents(0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x0) dup(r0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000100), 0x4) r5 = syz_open_dev$evdev(&(0x7f0000000080), 0xa2, 0x40000) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f00000000c0)=""/39) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1f", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 2m59.592314839s ago: executing program 7 (id=5029): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xfff2}, {0x7, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x2000}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) socket$inet(0x2, 0x2, 0x0) gettid() timer_create(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x60010002, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000440)={0x2, 0x0, 0x85a, 0x9a8}) 2m58.834922181s ago: executing program 7 (id=5042): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = open(&(0x7f0000000180)='./file2\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 2m58.834774301s ago: executing program 37 (id=5042): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f28bd421850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r2 = open(&(0x7f0000000180)='./file2\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 2m33.292241306s ago: executing program 9 (id=5476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x2, 0x1200) 2m33.228035527s ago: executing program 9 (id=5477): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000500)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3, 0x18, 0x0) lgetxattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 2m33.225594247s ago: executing program 9 (id=5478): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r2, 0x0, 0x2, 0x2}}, 0x20) 2m33.200690037s ago: executing program 9 (id=5480): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket(0x1d, 0x2, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_pgetevents(0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x0) dup(r0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000200), 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000100), 0x4) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1f", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 2m33.05958854s ago: executing program 9 (id=5487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) faccessat2(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x2, 0x1200) 2m32.636059287s ago: executing program 9 (id=5499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a090000000000000000000200000009000200"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 2m32.635883296s ago: executing program 38 (id=5499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a090000000000000000000200000009000200"], 0x64}, 0x1, 0x0, 0x0, 0x20000804}, 0x4004000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x34, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) 2m29.029896543s ago: executing program 3 (id=5556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRES8=0x0, @ANYRES16=r2], &(0x7f0000000340)='GPL\x00', 0x7d, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ppp(0xffffffffffffff9c, 0x0, 0x6a6e81, 0x0) connect$unix(r6, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r8, 0x0, 0x5}, 0x18) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffd, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@noblock_validity}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r9}, &(0x7f0000000000), &(0x7f0000000280)='%-010d \x00'}, 0x20) 2m27.200005953s ago: executing program 3 (id=5583): r0 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000000c0)={0x6, 0x80000000, 0x5, 0x4e7, 0x3, "756bccc30b9b34cbcd47f2823e20e4db2476e4", 0x2, 0x4}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x800, 0x0, 0x2, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000001340)='./file0\x00', 0x2804812, &(0x7f0000001100)={[{@dmode={'dmode', 0x3d, 0xb1}}, {@utf8}, {@mode={'mode', 0x3d, 0x5d8}}, {@nojoliet}, {@dmode={'dmode', 0x3d, 0x4}}, {}, {@showassoc}, {@nocompress}, {@cruft}, {@nocompress}, {@overriderock}, {@check_relaxed}, {@cruft}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@map_off}]}, 0x3, 0xa4d, &(0x7f0000001380)="$eJzs3c1vHOd9B/DvLEmJoV1JcVTXFRxxJVcK47AUSdVSBR9SiVxJTPlSkBRgoYcojahCEFu3cQs4RoEoQNFTjBZo0UN7M3rqyUAuTQ+FL0V7a049FCj8LwQ9qScGM7skl+Qul2IoklY+H2J35+U3z/PMyzMPd3d2nvDFsnZ6y9jaWvXY5/i9fz6EEnOM3Zr+/JNPPy4fP3yaE+nLO8W/JINJ6kl/kjeSganpxYW5Hgk9SR4k+SwpkpxM83VPHqT467y6Of5Zin8s8+3qxF5Tppc1fqkd9fEHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHUTE1PT4+UZzIzPy99+pNSX2HqenFhSJrazvnrC/T9JOq1+/iJz3zTYry0Tc4uN7V9xtnN2e/nqR+MW82x96sOiTPYD565fUz736lv7a+fLfS/EJO7j3ZD77/0ZPvrK6ufK/j3KI4wFIdM81j5E5jfmZpYWbu5p1GfWZpoX7j2rXxK3dvL9Vvz8w2lu4vLTfm6lOLjZvLC4v1kamv1ydu3Lhab4zdX7g3f2d6bLaxPvH6b06Oj1+rf2vs9xo3F5cW5q98a2xp6u7M7OzM/J0qppxdxlwvD8TfnVmuLzduztXrjx6vrlzdVrK+bDt+y6CJXutTBk32Cpocn5ycmJicnPhhq/fsjQnX3rnxzvXx8f7xplfTGsiOiBd00HK8fKn7bj74kzjsU63Z/iezmcl87uW91Dv+TWU6i1nIXJf5Levt/6UrjV2zTav9z+Dgeivf3zb/XPl0Medbo4Nd2v8uZTm8vw/y/XyUJ/lOVrOalXzvyEt0uH930sh8ZrKUhcxkLjerKfXWlHpu5FquZTzfzt0MZyn9uZ2ZzKaRpdzPUpbTqI6oqSymkZtZzkIWU89IpvL11DORG7mRq6mnkbHcz0LuZT53Mp2bVSqP8rja7ld3KeNG0MRegiZ3CdrRmHdr/zdsX6Sx/Z8TXkK1XffyCziLw/6stdr/E71DR6YOo0AAAADAgfv1/8yps6/9x/8mRb5afS9/e2a2MX7UxQIAAAAOUHW53pvly0A59NUU3v8DAADAy6aofmNXJBnKcHNo/ZdQPgQAAACAl0T1/f/5FMObE7z/BwAAgJdM73vs94woRtdv/1t/2Hx92IpojhVDt2dmG2NTC7PvTuRydZeB6pcGO1LrS4qB6ucHb+dCM+rCUPN1aDPFMs/BMmpi7N2JvJ2LrRUZeat8eWukQ+RkM/JrzcivtUf2ZUvk1TISAF52F3dpj/fa/r+d0WbE6Lmqye8/t6UN7qta1nEtKwAcFxt97Px/q0uzDu3/+ea9Ac53a/9/a5f3/2XEa3k03LykYCzfzftZzcOMpnXFwXCnVNd7I2hehjDa49OAodYlCz+9Xsvojs8DBjfWtT12JZMZ7fiJQFu6xXoZrjbj+l7UXgCAw3Vx13Z4vf2vPiTv2v6P7v7+v63NdUkhABwHGz3YP+/A8N6Dj3odAYCttNIAAAAAAAAAAAAAAAAAAAAAAAAAAABw8PZ0A///upysrq4k++0soMPAT//9X3+la8yPXkkGn6eEuw/UcjBlPv4DfUmOKvdv5rmXKvfxcdl0L9NA8bSqsL9QOkd8YgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQFElfp+m15GSS8SRXDr9UL87Toy7AQanvb7HiWZ7lw5w66OIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyya93/v5bm6yvNSemvJZeSPEjy+0ddxucx2GP+s0Mqx/HzR9Vz2/3/a8lA1or0Z21tbS0pBqamFxfmykOhOFnO//yTTz8uH12T/MH6wM5eFcoEyhy2dC7RyqFtysDWpb5cLTU0vfLBkz97/0/q07eqA/PW8u3Z6bk7i7+zGfh68eNmFwjt3SCsl/cvLv3b37RNPtHK/Mfp77Yi2/O9XeU7vTPfX+u0dJd89+Dx6spkmdNy473lP//jWvus13IheWskGdma0x+Wjy45Xdi+Pbcqflb8VXEqf58H1f4vt0axVpS76HS1/l969Hh1Zey7768+3CjTDx5/2JbAmQwnebi1lvUo03B1PunolSrXgTLX8SqofDrbI71dtaU4sbldt6zDl6tDZui51qHefR0qPbZ7q0RXt5dorawkf/unX8nlXff0yQ4pXu6RY0fFz4r/Ke7mv/OXbf1/1Mr9fykda2eHJKrItiOlfd6W6lW7tLnmk+0zvr09za61khfgR/mD/PbG/q9V5//2ejPZpd5snI++2TaxS71Zr1pd6sXJrTV1R71o6VUvdtbUfzq9o0XZmmvObmuRWmefbsu0ynm2GdWlnL+abyT9557rjPKNHmeUXsvvt/7/QzGS/8tT/f8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADHX5H0dZpeSy4lOZPkdDleT9a2xzzdR361oWI/xTww+ynzF0/RdUWLZ3mWD3PqsEsEAAAAAAAAwItxa/rzTz79uHxU38f35TdqrTn1pD/JmeLvBqamFxfmeiQ0kDxY/0p/sHNIl8l5UD69ujn+WTn2Ro/8jvbyAQD4Qvt5AAAA//8a0m/O") bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 2m26.71671747s ago: executing program 3 (id=5586): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0xfffffffffffffffc, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r2, 0x0, 0x2, 0x2}}, 0x20) 2m26.641729102s ago: executing program 3 (id=5588): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket(0x1d, 0x2, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_pgetevents(0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0xa2, 0x40000) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1f", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 2m26.298765387s ago: executing program 3 (id=5597): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x88}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0x3}, 0x18) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @loopback, 0xa77}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) fcntl$lock(r7, 0x5, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x100000000}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB], 0x68}}, 0x4048080) preadv(r8, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001440)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa888080001001800128008000100767469000c7392000280080005f5ffffffff0800", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) 2m25.720139866s ago: executing program 3 (id=5605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 2m25.719938106s ago: executing program 39 (id=5605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) 2m22.683879175s ago: executing program 5 (id=5677): unshare(0x22020400) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r2) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='/dev/vcs#\x00', r2) epoll_create1(0x0) 2m21.678563061s ago: executing program 5 (id=5698): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000850000000f00000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) inotify_init() r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a00000003000000080000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000001966c09a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c00028005000100000000e00000d78dec1dffb75a15277d260108000200e00000010c000280050001000000000008000740000000000400068000"/115], 0x68}}, 0x0) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400), 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x12, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @cb_func={0x18, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x41100, 0x30, '\x00', 0x0, @fallback=0x19, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r11}, 0x18) utimes(0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r12, 0x6, 0x14, &(0x7f0000000280)=0x2, 0x4) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040010}, 0x400c800) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r12, &(0x7f00000000c0)="a6", 0xffffffffffffff90, 0x40854, 0x0, 0xfffffd08) recvmsg(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/243, 0xf3}], 0x10}, 0x142) 2m21.491947753s ago: executing program 5 (id=5699): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x9, 0x4) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="090000000000feffffff0a00000008000300", @ANYRES32=0x0, @ANYBLOB="14005080050009000200000005000200100000000a0006000802110000010000"], 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000000000400c00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000002c0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodiscard}, {@acl}, {@noinit_itable}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES64=r0, @ANYBLOB="00000000000000000000000000000000000000007536bc0027f1d91c959dbbb5a5907e82dc9d11555dad16795cb97002e44030af5a6d93fda685b9d290b5b552a3d5ce543e0faaba88ef47f122f5f8b6aa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="421c00000000000024001280090001007866726d000000001400028008800200020000000800010004000000140003007866726d3000"/64], 0x58}}, 0x4048010) pwritev2(r3, 0x0, 0x0, 0x1200, 0x30, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4362, 0x15c) getsockopt$llc_int(r6, 0x10c, 0x9, &(0x7f0000000080), &(0x7f0000000140)=0x4) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r8 = getpid() r9 = syz_pidfd_open(r8, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(r9, 0x24020000) close_range(r7, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10, 0x0, 0x4}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) 2m21.07000088s ago: executing program 5 (id=5705): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket(0x1d, 0x2, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_open_dev$evdev(&(0x7f0000000080), 0xa2, 0x40000) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1f", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 2m20.546221178s ago: executing program 5 (id=5717): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syslog(0x2, &(0x7f0000000000)=""/49, 0x31) 2m19.479842665s ago: executing program 5 (id=5725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000010000000000000030000009500000000000000"], 0x0, 0xfffffffe, 0x1f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0xe4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$can_raw(0x1d, 0x3, 0x1) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r1, &(0x7f0000000380)={0x2000200c}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x2, &(0x7f0000000080)=0x800, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r13) sendmsg$NLBL_MGMT_C_ADDDEF(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYRES16=r14, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x24004854) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m19.477267705s ago: executing program 40 (id=5725): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x437, 0x4, 0x0, {0x0, 0x0, 0x0, r6, 0x50483}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x13}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r4, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x4, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000010000000000000030000009500000000000000"], 0x0, 0xfffffffe, 0x1f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0xe4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = socket$can_raw(0x1d, 0x3, 0x1) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r1, &(0x7f0000000380)={0x2000200c}) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x2, &(0x7f0000000080)=0x800, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000005c0), r13) sendmsg$NLBL_MGMT_C_ADDDEF(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYRES16=r14, @ANYBLOB="01002ab97000ffdbdf25040000000800020005000000080007007f0000e0070008"], 0x2c}, 0x1, 0x0, 0x0, 0x40810}, 0x24004854) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2m14.352351636s ago: executing program 1 (id=5799): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)={0x34, 0x12, 0x1, 0x70bd26, 0x25dfdbfe, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0xce, 0x0, 0x0, @u64}]}, @nested={0x14, 0x2e, 0x0, 0x1, [@typed={0xd, 0x106, 0x0, 0x0, @str='/dev/kvm\x00'}]}]}, 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000040)=0x100000001, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = io_uring_setup(0x7cac, &(0x7f00000000c0)={0x0, 0x753a, 0x8, 0x2, 0x1fd}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m14.300023968s ago: executing program 1 (id=5802): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd") r0 = open(0x0, 0x1c5142, 0x0) sendfile(r0, r0, 0x0, 0x800000009) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x20}}, 0x0) 2m14.1455798s ago: executing program 1 (id=5811): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000340), &(0x7f0000000580)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000005200010000000000000000001c"], 0x18}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES64=r2], 0x6c}}, 0x0) 2m14.043696041s ago: executing program 1 (id=5815): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000040000000000000000000000850000004100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000180000850000008200000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x0) r4 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r4, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="ce82c4fa994fa3f91a51a0fb03d1", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1aI\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8:\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x81\x00\x00\x00\x00\x00\x00\x00nC\xec', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x7, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4000, 0x0, 0x0, 0xfffffffe, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe, 0x1000, 0x80007, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x1, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0xffff8000, 0x0, 0xffffffff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x4, 0x6, 0x9, 0x0, 0x1, 0x0, 0x0, 0x40000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x7, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x6, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0xe6]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x5f}, {0xff, 0x2, 0x0, 0x0, 0x19, 0x40000000}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m13.942828683s ago: executing program 1 (id=5817): unshare(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) io_setup(0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0xffffffffffffffde, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mm_page_alloc\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x50010, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x2a, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r4, 0x0) socketpair(0x1, 0x20000000000001, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01f71800000000000000240000002400000002000000000000000000000400000003000000000000000000000000000000000000000d020000000000000600"/94], 0xffffffffffffffff, 0x3e, 0xb1, 0xa}, 0x1b) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "b686fb", 0x24, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[@hopopts={0x2c, 0x0, '\x00', [@generic={0x7, 0x3, "7da88f"}]}], {{0x4e21, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x8, 0x0, 0xe23c}}}}}}}, 0x0) r6 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) syz_emit_ethernet(0x14, &(0x7f0000000100)={@local, @random="b6e7dd03a148", @val={@void, {0x8100, 0x3, 0x1, 0x3}}, {@generic={0x88ca, "7ad0"}}}, 0x0) 2m11.664022609s ago: executing program 1 (id=5862): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = socket(0x1d, 0x2, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_open_dev$evdev(&(0x7f0000000080), 0xa2, 0x40000) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1f", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 2m11.65523242s ago: executing program 41 (id=5862): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = socket(0x1d, 0x2, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) syz_open_dev$evdev(&(0x7f0000000080), 0xa2, 0x40000) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1f", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 4.42444989s ago: executing program 0 (id=9107): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) (fail_nth: 11) 4.174333693s ago: executing program 0 (id=9118): socket$key(0xf, 0x3, 0x2) (async) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) (async) r0 = getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) pidfd_send_signal(0xffffffffffffffff, 0x22, 0x0, 0x0) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) (async) read(0xffffffffffffffff, &(0x7f0000032440)=""/102364, 0x18fdc) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r4 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x101d0) (async) sendmsg$kcm(r4, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) (async) close(0x3) socket$kcm(0x29, 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000060000000700000000100000", @ANYRES32, @ANYBLOB="0000000200000000000000000000000000000000da4d08f2f850882eca3e0536ef118a6191ca9b86e0c4d9e8c9803aaa517ecda14209b5bd6d3a1e8b7313b480df1097ffabe23712c0086519edf2ed7b97936377c2497fb413e267d39cbfafae6c0d17cab0ef506998c9fd947762a5f60d5fc919ddeabd8c751fb5a57170fa4d8b3f07056048e7a1d6650413181640d62c1ca9147b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) 3.995571376s ago: executing program 0 (id=9114): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4a79a644ae8bc70) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff058500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_clone(0x4000ff00, 0x0, 0x0, 0x0, 0x0, 0x0) 3.041578642s ago: executing program 0 (id=9126): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1c5) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlink(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) 2.831871715s ago: executing program 2 (id=9134): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) (fail_nth: 6) 2.748063787s ago: executing program 2 (id=9136): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4a79a644ae8bc70) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff058500000004000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_clone(0x4000ff00, 0x0, 0x0, 0x0, 0x0, 0x0) 2.426351181s ago: executing program 4 (id=9138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = fsopen(&(0x7f0000000200)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$eJzs3T1oO2UcB/DvXRL/tg1SdRHEFxARLZS6CS51UShIKSKCChURF6UVaotb6+TioLNKJ5ciblZH6VJcFMGpaoe6CFocLA46RJJrpbYRX1Jz4n0+cLm75J77Pcfd97kQOBKgsaaTzCdpJZlJ0klSnN/gzmqaPl3dnthfTnq9x34oBttV65WzdlNJtpI8kGSvLPJCO9nYferop4NH7nl9vXP3u7tPToz1IE8dHx0+evLO4msfLNy/8dkX3y0WmU/3d8d19Yoh77WL5KZ/o9h/RNGuuwf8FUuvvP9lP/c3J7lrkP9OylQn74216/Y6ue/tP2r75vef3zrOvgJXr9fr9O+BWz2gccok3RTlbJJquSxnZ6vv8F+1JssXV9dennl+dX3lubpHKuCqdJPDhz+69uHUhfx/26ryD/xPVT9KHT6+tPN1f+GkVXeHgLG4rZr17/8zz2zeG/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmH5pJ/aC75h+aSf2iu8/kHAJqld63uJ5CButQ9/gAAAAAAAAAAAAAAAAAAAJdtT+wvn03jqvnJW8nxQ0naw+q3Bv9HnFw/eJ38sehv9puiajaSp+8YcQcjeq/mp69v+Kbe+p/eXm/9zZVk69Ukc+325euvOL3+/rkb/+TzzrMjFvibigvrDz4x3voX/bJTb/2Fg+Tj/vgzN2z8KXPLYD58/On2z9+I9V/6ecQdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDa/BgAA//8YZW08") (fail_nth: 4) 2.308101634s ago: executing program 4 (id=9139): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 2.004880068s ago: executing program 8 (id=9141): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) (fail_nth: 1) 1.811791681s ago: executing program 2 (id=9144): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@fallback, 0xffffffffffffffff, 0x31, 0x30}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) 1.621586404s ago: executing program 6 (id=9145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xba0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000dfc800000000002000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa0000000000"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.621213804s ago: executing program 2 (id=9146): unshare(0x22020400) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffff}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r2) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='/dev/vcs#\x00', r2) epoll_create1(0x0) 1.610570495s ago: executing program 8 (id=9147): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0x9}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000700)={'sit0\x00', r6, 0x8000, 0x8, 0xe2, 0x80000000, {{0x39, 0x4, 0x3, 0x34, 0xe4, 0x64, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x2c, 0xe2, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x61b2e04d}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010101, 0x200}, {@multicast1, 0x9}]}, @ssrr={0x89, 0x2b, 0x47, [@rand_addr=0x64010102, @local, @broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}]}, @generic={0x470cff5fb2bc4698, 0xb, "9a54f6c0e2cf2c712f"}, @rr={0x7, 0x7, 0x70, [@local]}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0x2a, 0x3, 0x4, [{@local, 0x4}, {@rand_addr=0x64010100}, {@private=0xa010102, 0x5}, {@broadcast, 0x4}, {@empty}, {@rand_addr=0x64010102, 0x9}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0xa9, 0x3, 0x8, [{@loopback, 0x76e}, {@broadcast, 0x1}, {@multicast2, 0x8}]}]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.610118574s ago: executing program 4 (id=9148): r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x25, 0x0, 0x0, 0x0, 0x1}, @initr0, @exit, @alu={0x7, 0x0, 0xa, 0x3}]}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x60, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="0b90aa618daec374dc8b9186258605955d8e09429894f9de22370883d4e2bfc1"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@minixdf}, {@grpquota}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) 1.594605844s ago: executing program 0 (id=9149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r2 = mq_open(&(0x7f0000000680)='eth0\x00', 0x42, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) msync(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r5, 0xee00, 0xffffffffffffffff) ppoll(0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) mq_notify(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x4000094) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r7 = msgget$private(0x0, 0x3d4) msgrcv(r7, 0x0, 0x0, 0xffffffffffffffff, 0x2000) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) 1.549283986s ago: executing program 6 (id=9150): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10) sendmmsg$inet_sctp(r1, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000414}], 0x1, 0x10) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000000)={0x1, 0x0, 0x100000000, 0x3}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r3, 0x1, 0x30}, 0xc) 1.520387816s ago: executing program 8 (id=9151): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) r0 = io_uring_setup(0x2, &(0x7f0000000040)={0x0, 0x13e1, 0x200, 0x1, 0x3c}) r1 = syz_io_uring_setup(0x1593, &(0x7f0000001900)={0x0, 0x72d7, 0x1000, 0x3, 0x350, 0x0, r0}, &(0x7f0000000a80), &(0x7f0000002c00)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sys_enter\x00', r2}, 0x10) getrlimit(0x0, &(0x7f00000002c0)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000cc0)={[{@noinit_itable}, {@resuid}, {@sysvgroups}, {@resuid}, {@init_itable}]}, 0xbc, 0x575, &(0x7f0000000180)="$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") io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1a, 0x20000009, 0x0) syz_io_uring_setup(0x1179, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0x5, &(0x7f0000001f80)=ANY=[], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="890000000e25f8f91b9d78490efe6b772e534e2184e1b04feb1de68489475ca3d4baf2e3249f68c46e1d0176b584595fc210944e02cbd64da515e6d3c9596477a1eab7f6ae39168197161912773b388925dd7f2c7649581c661939776d3bc29c36b9b85263650747b63e773650bda9d6b657258c7b7bb4c12f771d6961e03aac33168a2d8feb1c3809f7835f7e5c952759e07b2562deb19a37bbbf2deeaf74b0fc0bf700", @ANYRES16, @ANYBLOB="010027bd7000fddbdf250500000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000780)=r5, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000150000000000000000000018110000a44a3d35f66d6b580d672bf9d9f64c0e4ecce6967141688b8a9d0e237e96f5fc37709976384b3301071b8e08f866cd685dcc2f00"/84, @ANYRES32=r7, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)=ANY=[@ANYRESHEX=r11, @ANYRES32=r9, @ANYRESOCT=r11, @ANYRESDEC=r7, @ANYRES64=0x0], 0xd8}, 0x1, 0x0, 0x0, 0x4008005}, 0x8d4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x10, 0x0, 0x7ffc0002}]}) futimesat(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r12, 0x0, 0x1000}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 1.442434917s ago: executing program 8 (id=9152): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x1, 0x4) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0xce27, 0x81, @dev={0xfe, 0x80, '\x00', 0x23}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000140)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x6, @private1, 0xd1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, 0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x6}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000004c0)={r2, 0x5, 0x3ca}, 0x8) 713.229649ms ago: executing program 2 (id=9153): prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='wg1\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffff6dbdf25017c0000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 666.819249ms ago: executing program 2 (id=9154): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x4a79a644ae8bc70) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) syz_clone(0x4000ff00, 0x0, 0x0, 0x0, 0x0, 0x0) 624.04861ms ago: executing program 0 (id=9155): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = fsopen(&(0x7f0000000200)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") 623.53375ms ago: executing program 6 (id=9156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 537.499222ms ago: executing program 6 (id=9157): r0 = io_uring_setup(0x5e23, &(0x7f0000000800)={0x0, 0x191c, 0x1000, 0x3, 0x36b}) syz_io_uring_setup(0x3859, &(0x7f0000000880)={0x0, 0xb2a8, 0x400, 0x2, 0x2d3, 0x0, r0}, &(0x7f0000000940), &(0x7f0000000a00)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) syz_open_dev$tty20(0xc, 0x4, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x100010, 0xffffffffffffffff, 0x8000000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x72, 0x11cfa, 0x0, 0x8000007, 0x3, 0x0, 0x1, 0x0, 0x6}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) close(r2) 523.279862ms ago: executing program 4 (id=9158): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={0x0}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) (async) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {}, {0x8, 0x11, 0x6e4e}}, ["", "", "", "", "", "", ""]}, 0x24}}, 0x54014) socket$isdn(0x22, 0x3, 0x24) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000300), 0x6, 0x40) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002e00)={0x6, 0x0, "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"}) (async) close_range(r5, r4, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) (async) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x200}, 0x8) (async, rerun: 64) sendto$inet6(r7, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) shutdown(r7, 0x1) (async) sendmmsg(r5, &(0x7f0000002dc0)=[{{&(0x7f0000000240)=@in={0x2, 0x4e21, @broadcast}, 0x80, &(0x7f0000001840)=[{&(0x7f00000003c0)="b43ec626d7a21f1c06ec2657101de1bf810050caea3d11c5c9e5d22dfefe86b6164687aceffda1aadf44e328829151a8807dfe2f6c61721c3722813edf18f17aa19b24770cfcfd54e6d7047985b0f25506a23e759e37c8922191c9042f121bacb779137c92a6491369a9c6fa47609de6c48ceedcd2b1d690d8ed5e0b736ad1b30e595677b4e0a112b7639893278f2bd3f3101743902d9887f5a127a299257e19a2bc7b95", 0xa4}, {&(0x7f0000000480)="fcba914e29ede84e3643013a6648cef28403f552d4d7ac0ba29079d20fb0c1803bf6c3ca080ad84ecd15a32bc0bfd49e4b930a41924220665897c67af48fe7808e33235fea635a81c156fd1ab6e8376bddb3e4a4add6dcec9d0d8019bf74858973ed26cb0237f719585138d23c8cb45f8a3f393f575686a08e85f71db2af14bad596baed768d21c15ae8b3dce43cb8bd9fe1fa6012cb23be97af7ea9750ce49ffd1a4f5d152f619198794fb5eee9d8e6af30b79231d736667dd0bd08d52126281619d2cb4c758921cc1c9385931b2cd11383894b9d3f8b68cdab6507abe69afec7629b9880", 0xe5}, {&(0x7f0000000580)="37ce0e0087d89f2c56dbf6f98362d587d1bdab1f98079f1cd8f88e9a5ee4207572d6987008c15b8f1e285722cb84f68162eba9c894ed9d6d02340fe5fc83d48233dd7148f0f96cf406374ca3fa359e7e0b36211f7b75220aa64e34cc3cacb19d945f61bb7e5f4f422da9301a5a497daa47a55997c8c08b28864e90274f4b1b9259", 0x81}, {&(0x7f0000000300)}, {&(0x7f0000000640)="c8745c9534e4fa542bbe2eeaf5815520a27fc9e158f71d53304819807628cb776e15a1d79a8efabd32dc43f04540c20a4b381e8445e224951352f6f0c24704d0074157c018820f440646d640768d9009f4ec9c570fa34fb9f5e77d2088f21333ecf1fbebffc94bfc403712a4407490bcd6b15866b1ce2e9034e94ba995730d59b635e9e4d9789998d823d2f2860d83d6f3132ee0707f34542a8e74fc20bdcfd0313d69c192ca7000cd2c", 0xaa}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="cfa5ab96055b74ffd84b092e5692ffec8faa845692ce1108640cc50c42146f24d0a3245c57e4fa360b0f5c4cdcf5bfc0175e9d6af0178c5121e577af1558aa777825d458b1589b2d5b361d0fe41d2dbeb1b139485a185070db4b53c33ad6b5535b26", 0x62}, {&(0x7f0000001780)="0994222b12f6258607bdd0bf523c8b213f83d81944dadced34935ababfc0dde75868eac44942d381bc6a330496c503097e2d4034df5cd90f919a1ab45e2a056f0f0bfbfed2e37a51fc4d8d359a058dcaeea3d520a20797eeebac8ccec1032a70965ee5dd7ae419215fed66cb3c3bf481ed0682325a0851184d5c37dabf8f3a78941e817f5e16a891223eada0adcbf834323d4df77fca9af7042760bf6bbe3c3e267138f338913ee128df7978884c23ab51f95e3e302ff1", 0xb7}], 0x8, &(0x7f00000018c0)=[{0x58, 0x10d, 0x8, "27167eaf7e40d727871f9bc9eb92a3f636b350aa6e33694deca69cd0421faf78d87ac9a562c5183b0548378222590e4b5a49f04f4152746b044f3d6387317e1882"}, {0xf8, 0x10d, 0xff, "564858be5bd9990531249b5526adcc19e39063623f99b0e5d7f95d5a67ea6cdb80706a9b4d51df58a0cc7f13dd74e0b31e411cb27836d018611c195e6d0b96e697d9da66897550c0dddfb7e5518e6e1ea571238d89417c92e03d55a89a6f9e963c734ab7b76ff9862f0234a489073b9928296a5232f7ad8ae03c334f4451a70739da78d744a2df6e7088b191a6dee186f0972fee28fb050d6b6bda9cedc9d89a65ca0912ccefcf5372b6d0ff274ca3c6e5b56def0e95aae3bfc6b48c38fcb6d6a93867ae4e8545769091800d2e681a01a03c5b82fa102766f6294e97662a4cc23c5adc"}, {0x78, 0x108, 0x7, "bd365a6d633da1ec49dcdfecd7cbfdd26045c793f78a5a961986a9256f1f63bf48a2a6f3b39534b41a99b064ce8f8c6db2feeefe5b3f79bbe910290aab520fb30218c7129e804eb87a0f9109d915d92b2ee4bcfe710457892d8a2b3f188ad06702"}, {0x1010, 0x115, 0x3, "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"}, {0x18, 0x10f, 0x0, "808f3f"}, {0xc8, 0x6, 0xf, "dbf5004c3c2f355209d19af45f4d08c7ca7330fb21c8233a302ee3aa48567e1a95fc1c3380f2a15880f3a02b2cee1b15bb8a398d13a6767c8f026f86f05d1f16daceebfe3e57ff558f6642bd123cb64bdf3af3c9fea71cb3df0bc34c7a6600ebfb7c2bdf3ce093265be147d80b2bb73758a0138877e2d0ceaed26176a1842f9d7c448d61269189b2df730d567a0de4b4cc9f67651330436ea25a509e07e4abe1fcbed2fa8bf0fd3098ffd27c2eb9569b801c"}, {0xb8, 0x3a, 0x8, "3867a6cfd15f24463f1fab04a7bce0ce3d4b08ad2537484f579a6874291d6b2f4831109260d28cf24a12a0dfb9e1f3bf0ac87aa0b3bc7a2d94c2b32fcba7b32bea5010fbe698bee0840d7bf871a10b292390edd2a6f9b1754289862fb12b6b83a2d69f9eedfad1c6c72b5c839680381104e1eb3dd2ffd5f03b1b808d907c9fc287717ccb5ae91a019a1414fc22457f224dd652a04ebd716dd26131b92f01ac5ad3fbf2a8c669"}, {0xd8, 0x84, 0x0, "c1324fd4dbf7d7bccf25ac4cd5cd7968d56f3938573d899b0b2081a9e86d7d7c28b30be0bb9d5819adab1f8997d41e6ba1e0fbc836c49496776b393296d308345a47ee8f0dbb3df1a1aefb07d7a7bbedf11960a01d4b9cbe4acb6cf87d7246f7b6c3000026cb165b1c9976ab718e98c151abfe1379273793ffb99d0e11ac5750301688dcb0e5089622f4c24883be106aa5d0f688ec6afbe6491083f83d40b8f1d7d5b3161e3a6a7d964fd48092cb518a232905854cb7f18711ba307c5e09a536248e"}, {0x10, 0x118, 0x3}, {0x98, 0x0, 0x355, "2d7d2d63f5cbe5cd9923804bea28c28af32988b0188659a03d882e954e0aad9c08b43b8acaf60ba7dcc3bd1bf765a53eb1555cbc09c4b0183f4ce4d1f82a57af717d2d4075f9a656f085f5c290cb9c42819c10ab57f46dda47c9e6afa79b9671ac01aeefd99130a8572cdb02298d933e931f193e5a1f829a5b33e90c399a7ad235d457e91f"}], 0x14f0}}], 0x1, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) (async, rerun: 64) syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 442.251493ms ago: executing program 6 (id=9159): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r10 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001a00), 0x802, 0x0) setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f0000000080), 0x4) writev(r10, &(0x7f0000000740)=[{&(0x7f0000001bc0)="9f", 0x1}], 0x1) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x9, 0xdbc, 0x80, 0x7, 0x10001, 0x401, 0xffffffff}, 0x1c) setsockopt$PNPIPE_ENCAP(r11, 0x113, 0x1, 0x0, 0x0) 388.035184ms ago: executing program 4 (id=9160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xba0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000dfc800000000002000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ac14"], 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 344.669565ms ago: executing program 4 (id=9161): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x1c5) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) unlink(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x800, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x133d, 0x0, 0x8, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x1, {0x6, 0x6d4}, 0xf0}, 0x1) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000040)=0x3) 306.348185ms ago: executing program 8 (id=9162): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x9, 0x9}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000700)={'sit0\x00', r6, 0x8000, 0x8, 0xe2, 0x80000000, {{0x39, 0x4, 0x3, 0x34, 0xe4, 0x64, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @rand_addr=0x64010102, {[@timestamp_addr={0x44, 0x2c, 0xe2, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0x24}, 0x61b2e04d}, {@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@rand_addr=0x64010101, 0x200}, {@multicast1, 0x9}]}, @ssrr={0x89, 0x2b, 0x47, [@rand_addr=0x64010102, @local, @broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x33}, @dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x34}]}, @generic={0x470cff5fb2bc4698, 0xb, "9a54f6c0e2cf2c712f"}, @rr={0x7, 0x7, 0x70, [@local]}, @noop, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x44, 0x2a, 0x3, 0x4, [{@local, 0x4}, {@rand_addr=0x64010100}, {@private=0xa010102, 0x5}, {@broadcast, 0x4}, {@empty}, {@rand_addr=0x64010102, 0x9}, {@private=0xa010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0xa9, 0x3, 0x8, [{@loopback, 0x76e}, {@broadcast, 0x1}, {@multicast2, 0x8}]}]}}}}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r9}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0100cd7881a9b45dea5e54"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x13, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0x7f, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 45.411789ms ago: executing program 8 (id=9163): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085ff0000d4000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) (async) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 0s ago: executing program 6 (id=9164): unshare(0x22020400) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffff}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4002}, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, r2) request_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000140)='/dev/vcs#\x00', r2) epoll_create1(0x0) kernel console output (not intermixed with test programs): .0.7322'. [ 449.867506][T25531] loop8: detected capacity change from 0 to 2048 [ 449.874287][T25531] ext3: Unknown parameter 'obj_role' [ 450.027510][T25555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.038498][T25555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.104377][T25563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7335'. [ 450.119361][T25563] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7335'. [ 450.252352][T25588] Process accounting paused [ 450.757482][T25638] loop8: detected capacity change from 0 to 256 [ 450.771604][T25638] FAT-fs (loop8): Directory bread(block 64) failed [ 450.778723][T25638] FAT-fs (loop8): Directory bread(block 65) failed [ 450.787306][T25638] FAT-fs (loop8): Directory bread(block 66) failed [ 450.798833][T25638] FAT-fs (loop8): Directory bread(block 67) failed [ 450.807234][T25638] FAT-fs (loop8): Directory bread(block 68) failed [ 450.814231][T25638] FAT-fs (loop8): Directory bread(block 69) failed [ 450.821161][T25638] FAT-fs (loop8): Directory bread(block 70) failed [ 450.831637][T25638] FAT-fs (loop8): Directory bread(block 71) failed [ 450.838953][T25638] FAT-fs (loop8): Directory bread(block 72) failed [ 450.845907][T25638] FAT-fs (loop8): Directory bread(block 73) failed [ 450.870556][T25638] bio_check_eod: 103430 callbacks suppressed [ 450.870577][T25638] syz.8.7365: attempt to access beyond end of device [ 450.870577][T25638] loop8: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 450.911538][T25638] syz.8.7365: attempt to access beyond end of device [ 450.911538][T25638] loop8: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 450.961996][T25661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.994571][T25661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.759386][T25779] __nla_validate_parse: 9 callbacks suppressed [ 451.759406][T25779] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7424'. [ 451.762791][T25786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.783714][T25786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.784467][T25779] netlink: 92 bytes leftover after parsing attributes in process `syz.8.7424'. [ 452.489370][T25846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.498124][T25846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.577688][T13184] usb 17-1: enqueue for inactive port 0 [ 452.586691][T13184] usb 17-1: enqueue for inactive port 0 [ 452.664869][T25858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7455'. [ 452.674000][T13184] vhci_hcd: vhci_device speed not set [ 452.937678][T25893] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7469'. [ 453.506499][ T29] audit: type=1326 audit(1754331261.067:38796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25972 comm="syz.4.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76feefe9a9 code=0x7ffc0000 [ 453.530480][ T29] audit: type=1326 audit(1754331261.067:38797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25972 comm="syz.4.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76feefe9a9 code=0x7ffc0000 [ 453.558615][ T29] audit: type=1326 audit(1754331261.067:38798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25972 comm="syz.4.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f76feefe9a9 code=0x7ffc0000 [ 453.582715][ T29] audit: type=1326 audit(1754331261.067:38799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25972 comm="syz.4.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76feefe9a9 code=0x7ffc0000 [ 453.606448][ T29] audit: type=1326 audit(1754331261.067:38800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25972 comm="syz.4.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76feefe9a9 code=0x7ffc0000 [ 453.612302][T25975] loop8: detected capacity change from 0 to 128 [ 453.630233][ T29] audit: type=1326 audit(1754331261.067:38801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25972 comm="syz.4.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f76feefe9a9 code=0x7ffc0000 [ 453.630269][ T29] audit: type=1326 audit(1754331261.067:38802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25972 comm="syz.4.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76feefe9a9 code=0x7ffc0000 [ 453.630296][ T29] audit: type=1326 audit(1754331261.076:38803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25972 comm="syz.4.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76feefe9a9 code=0x7ffc0000 [ 453.630394][ T29] audit: type=1326 audit(1754331261.076:38804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25972 comm="syz.4.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76feefe9a9 code=0x7ffc0000 [ 453.693980][T25975] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 453.708285][ T29] audit: type=1326 audit(1754331261.076:38805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25972 comm="syz.4.7505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76feefe9a9 code=0x7ffc0000 [ 453.764829][T25975] FAT-fs (loop8): Filesystem has been set read-only [ 453.773003][T25975] syz.8.7506: attempt to access beyond end of device [ 453.773003][T25975] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 453.787012][T25975] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 453.794977][T25975] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 453.803418][T25982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.804882][T25975] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 453.814439][T25982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.824472][T25975] syz.8.7506: attempt to access beyond end of device [ 453.824472][T25975] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 453.857779][T25984] syz.8.7506: attempt to access beyond end of device [ 453.857779][T25984] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 453.871117][T25984] buffer_io_error: 102782 callbacks suppressed [ 453.871130][T25984] Buffer I/O error on dev loop8, logical block 2065, async page read [ 453.887935][T25975] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 453.895981][T25975] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 453.911897][T25984] syz.8.7506: attempt to access beyond end of device [ 453.911897][T25984] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 453.925510][T25984] Buffer I/O error on dev loop8, logical block 2066, async page read [ 453.939607][T25984] syz.8.7506: attempt to access beyond end of device [ 453.939607][T25984] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 453.953042][T25984] Buffer I/O error on dev loop8, logical block 2067, async page read [ 453.964892][T25984] syz.8.7506: attempt to access beyond end of device [ 453.964892][T25984] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 453.978246][T25984] Buffer I/O error on dev loop8, logical block 2068, async page read [ 453.988519][T25984] syz.8.7506: attempt to access beyond end of device [ 453.988519][T25984] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 454.001906][T25984] Buffer I/O error on dev loop8, logical block 2069, async page read [ 454.011678][T25984] syz.8.7506: attempt to access beyond end of device [ 454.011678][T25984] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 454.018188][T26004] tipc: Started in network mode [ 454.025056][T25984] Buffer I/O error on dev loop8, logical block 2070, async page read [ 454.026841][T25984] Buffer I/O error on dev loop8, logical block 2071, async page read [ 454.030009][T26004] tipc: Node identity ac14140f, cluster identity 4711 [ 454.038137][T25984] Buffer I/O error on dev loop8, logical block 2072, async page read [ 454.053831][T26004] tipc: New replicast peer: 255.255.42.105 [ 454.065267][T25984] Buffer I/O error on dev loop8, logical block 2065, async page read [ 454.067215][T26004] tipc: Enabled bearer , priority 10 [ 454.075333][T25984] Buffer I/O error on dev loop8, logical block 2066, async page read [ 454.105078][T26004] $Hÿ: renamed from bond0 (while UP) [ 454.114623][T26004] $Hÿ: entered promiscuous mode [ 454.225046][T26016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7523'. [ 454.319861][T26034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.328894][T26034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.446903][T26036] loop8: detected capacity change from 0 to 128 [ 454.940369][T26056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7540'. [ 455.235191][T26070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7543'. [ 455.412917][ T2953] usb usb18-port1: attempt power cycle [ 455.428298][T12535] tipc: Node number set to 2886997007 [ 455.470110][T26085] loop8: detected capacity change from 0 to 256 [ 455.483683][T26085] FAT-fs (loop8): Directory bread(block 64) failed [ 455.490514][T26085] FAT-fs (loop8): Directory bread(block 65) failed [ 455.497210][T26085] FAT-fs (loop8): Directory bread(block 66) failed [ 455.503993][T26085] FAT-fs (loop8): Directory bread(block 67) failed [ 455.510854][T26085] FAT-fs (loop8): Directory bread(block 68) failed [ 455.517492][T26085] FAT-fs (loop8): Directory bread(block 69) failed [ 455.524166][T26085] FAT-fs (loop8): Directory bread(block 70) failed [ 455.530792][T26085] FAT-fs (loop8): Directory bread(block 71) failed [ 455.537400][T26085] FAT-fs (loop8): Directory bread(block 72) failed [ 455.544163][T26085] FAT-fs (loop8): Directory bread(block 73) failed [ 455.560061][T26085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.568626][T26085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.184156][T26100] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7557'. [ 456.358026][T26132] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7570'. [ 456.581647][T26173] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7587'. [ 457.186259][T26277] __nla_validate_parse: 2 callbacks suppressed [ 457.186318][T26277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7631'. [ 457.358743][ T2953] usb usb18-port1: unable to enumerate USB device [ 457.878880][T26376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7673'. [ 458.159408][T26419] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7693'. [ 458.173775][T26419] netlink: 92 bytes leftover after parsing attributes in process `syz.8.7693'. [ 458.405581][T26456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7707'. [ 458.419494][T26456] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7707'. [ 459.385700][T26569] loop8: detected capacity change from 0 to 128 [ 459.397790][T26569] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 459.405909][T26569] FAT-fs (loop8): Filesystem has been set read-only [ 459.414403][T26569] bio_check_eod: 21804 callbacks suppressed [ 459.414482][T26569] syz.8.7754: attempt to access beyond end of device [ 459.414482][T26569] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 459.436038][T26569] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 459.444060][T26569] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 459.452899][T26569] syz.8.7754: attempt to access beyond end of device [ 459.452899][T26569] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 459.470287][T26572] syz.8.7754: attempt to access beyond end of device [ 459.470287][T26572] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 459.483660][T26572] buffer_io_error: 21798 callbacks suppressed [ 459.483673][T26572] Buffer I/O error on dev loop8, logical block 2065, async page read [ 459.501960][T26572] syz.8.7754: attempt to access beyond end of device [ 459.501960][T26572] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 459.515417][T26572] Buffer I/O error on dev loop8, logical block 2066, async page read [ 459.525230][T26572] syz.8.7754: attempt to access beyond end of device [ 459.525230][T26572] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 459.538547][T26572] Buffer I/O error on dev loop8, logical block 2067, async page read [ 459.548446][T26572] syz.8.7754: attempt to access beyond end of device [ 459.548446][T26572] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 459.561917][T26572] Buffer I/O error on dev loop8, logical block 2068, async page read [ 459.570454][T26572] syz.8.7754: attempt to access beyond end of device [ 459.570454][T26572] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 459.583783][T26572] Buffer I/O error on dev loop8, logical block 2069, async page read [ 459.594991][T26572] syz.8.7754: attempt to access beyond end of device [ 459.594991][T26572] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 459.608310][T26572] Buffer I/O error on dev loop8, logical block 2070, async page read [ 459.625190][T26572] syz.8.7754: attempt to access beyond end of device [ 459.625190][T26572] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 459.638618][T26572] Buffer I/O error on dev loop8, logical block 2071, async page read [ 459.648825][T26572] syz.8.7754: attempt to access beyond end of device [ 459.648825][T26572] loop8: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 459.662176][T26572] Buffer I/O error on dev loop8, logical block 2072, async page read [ 459.670436][T26569] Buffer I/O error on dev loop8, logical block 2065, async page read [ 459.678903][T26569] Buffer I/O error on dev loop8, logical block 2066, async page read [ 459.979186][T26615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.988132][T26615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.682279][T26710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.691689][T26710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.504573][T26821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.513412][T26821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.832706][T26972] sctp: [Deprecated]: syz.8.7937 (pid 26972) Use of int in max_burst socket option. [ 462.832706][T26972] Use struct sctp_assoc_value instead [ 462.998720][T27000] sctp: [Deprecated]: syz.0.7953 (pid 27000) Use of int in max_burst socket option. [ 462.998720][T27000] Use struct sctp_assoc_value instead [ 463.271152][T27044] sctp: [Deprecated]: syz.0.7970 (pid 27044) Use of int in max_burst socket option. [ 463.271152][T27044] Use struct sctp_assoc_value instead [ 464.229345][T27175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.238212][T27175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.054413][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 466.054427][ T29] audit: type=1326 audit(1754331272.806:38826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.6.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 466.106244][ T29] audit: type=1326 audit(1754331272.806:38827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.6.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 466.130236][ T29] audit: type=1326 audit(1754331272.806:38828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.6.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 466.154000][ T29] audit: type=1326 audit(1754331272.806:38829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.6.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 466.177626][ T29] audit: type=1326 audit(1754331272.806:38830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.6.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 466.201454][ T29] audit: type=1326 audit(1754331272.806:38831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.6.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 466.225251][ T29] audit: type=1326 audit(1754331272.834:38832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.6.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 466.249068][ T29] audit: type=1326 audit(1754331272.834:38833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.6.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 466.272892][ T29] audit: type=1326 audit(1754331272.844:38834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.6.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 466.296805][ T29] audit: type=1326 audit(1754331272.844:38835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27428 comm="syz.6.8138" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 466.787423][T27485] loop8: detected capacity change from 0 to 512 [ 466.802115][T27485] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.815431][T27485] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.829499][T27485] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.8160: corrupted xattr block 33: e_value out of bounds [ 466.846733][T27485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 466.860276][T27485] EXT4-fs error (device loop8): ext4_xattr_block_get:593: inode #15: comm syz.8.8160: corrupted xattr block 33: e_value out of bounds [ 466.890341][T27485] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 466.939103][T21368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 468.075010][T27565] lo speed is unknown, defaulting to 1000 [ 468.132960][T17372] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.142910][T17372] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.183211][T17372] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.193091][T17372] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.234476][T27565] chnl_net:caif_netlink_parms(): no params data found [ 468.271134][T17372] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.281347][T17372] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.305274][T27565] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.312643][T27565] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.322120][T27565] bridge_slave_0: entered allmulticast mode [ 468.334057][T27565] bridge_slave_0: entered promiscuous mode [ 468.351578][T17372] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.361620][T17372] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.420007][T27565] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.427201][T27565] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.437024][T27565] bridge_slave_1: entered allmulticast mode [ 468.443871][T27565] bridge_slave_1: entered promiscuous mode [ 468.494149][T27565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.504420][T17372] bond5: left promiscuous mode [ 468.509593][T17372] bridge0: port 1(bond5) entered disabled state [ 468.639105][T17372] $Hÿ (unregistering): Released all slaves [ 468.659296][T17372] bond1 (unregistering): Released all slaves [ 468.685326][T17372] bond2 (unregistering): Released all slaves [ 468.695550][T17372] bond3 (unregistering): Released all slaves [ 468.708837][T17372] bond4 (unregistering): Released all slaves [ 468.728934][T17372] bond5 (unregistering): Released all slaves [ 468.771405][T27565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.822752][T17372] tipc: Disabling bearer [ 468.828101][T17372] tipc: Left network mode [ 468.857560][T27565] team0: Port device team_slave_0 added [ 468.870853][T27565] team0: Port device team_slave_1 added [ 468.887257][T17372] hsr_slave_1: left promiscuous mode [ 468.896944][T17372] team0: left allmulticast mode [ 468.902337][T17372] team0: left promiscuous mode [ 468.910411][T17372] veth1_macvtap: left promiscuous mode [ 468.916372][T17372] veth1_vlan: left promiscuous mode [ 468.922006][T17372] veth0_vlan: left promiscuous mode [ 469.013049][T17372] pimreg (unregistering): left allmulticast mode [ 469.116122][T27565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.125083][T27565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.151639][T27565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.170130][T27565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.177188][T27565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.203311][T27565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.235436][T27565] hsr_slave_0: entered promiscuous mode [ 469.246868][T27565] hsr_slave_1: entered promiscuous mode [ 469.253027][T27565] debugfs: 'hsr0' already exists in 'hsr' [ 469.259001][T27565] Cannot create hsr debugfs directory [ 469.357429][T17372] IPVS: stop unused estimator thread 0... [ 469.561102][T27565] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 469.570297][T27565] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 469.579704][T27565] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 469.588745][T27565] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 469.624226][T27565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.637708][T27565] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.648043][T17420] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.655188][T17420] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.666170][T17379] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.673333][T17379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.745716][T27565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.863334][T27565] veth0_vlan: entered promiscuous mode [ 469.874056][T27565] veth1_vlan: entered promiscuous mode [ 469.912042][T27565] veth0_macvtap: entered promiscuous mode [ 469.929822][T27565] veth1_macvtap: entered promiscuous mode [ 469.948614][T27565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.961318][T27565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.973210][T27565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.982341][T27565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.991434][T27565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.000634][T27565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.095622][T27892] loop8: detected capacity change from 0 to 512 [ 472.120521][T27892] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.134909][T27892] ext4 filesystem being mounted at /424/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.158762][T21368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.224817][T27911] loop8: detected capacity change from 0 to 128 [ 472.234436][T27911] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 472.242392][T27911] FAT-fs (loop8): Filesystem has been set read-only [ 472.249212][T27911] bio_check_eod: 40752 callbacks suppressed [ 472.249230][T27911] syz.8.8328: attempt to access beyond end of device [ 472.249230][T27911] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 472.269374][T27911] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 472.277465][T27911] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 472.286123][T27911] syz.8.8328: attempt to access beyond end of device [ 472.286123][T27911] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 472.304203][T27911] syz.8.8328: attempt to access beyond end of device [ 472.304203][T27911] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 472.320818][T27915] syz.8.8328: attempt to access beyond end of device [ 472.320818][T27915] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 472.334347][T27915] buffer_io_error: 40750 callbacks suppressed [ 472.334436][T27915] Buffer I/O error on dev loop8, logical block 2065, async page read [ 472.349071][T27915] syz.8.8328: attempt to access beyond end of device [ 472.349071][T27915] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 472.362627][T27915] Buffer I/O error on dev loop8, logical block 2066, async page read [ 472.373375][T27915] syz.8.8328: attempt to access beyond end of device [ 472.373375][T27915] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 472.386797][T27915] Buffer I/O error on dev loop8, logical block 2067, async page read [ 472.396829][T27915] syz.8.8328: attempt to access beyond end of device [ 472.396829][T27915] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 472.410274][T27915] Buffer I/O error on dev loop8, logical block 2068, async page read [ 472.420042][T27915] syz.8.8328: attempt to access beyond end of device [ 472.420042][T27915] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 472.433394][T27915] Buffer I/O error on dev loop8, logical block 2069, async page read [ 472.445077][T27915] syz.8.8328: attempt to access beyond end of device [ 472.445077][T27915] loop8: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 472.458469][T27915] Buffer I/O error on dev loop8, logical block 2070, async page read [ 472.468435][T27915] syz.8.8328: attempt to access beyond end of device [ 472.468435][T27915] loop8: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 472.481757][T27915] Buffer I/O error on dev loop8, logical block 2071, async page read [ 472.492057][T27915] Buffer I/O error on dev loop8, logical block 2072, async page read [ 472.500336][T27915] Buffer I/O error on dev loop8, logical block 2065, async page read [ 472.508764][T27915] Buffer I/O error on dev loop8, logical block 2066, async page read [ 472.642760][T27934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.663011][T27934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.531622][T27970] lo speed is unknown, defaulting to 1000 [ 473.599899][T27970] chnl_net:caif_netlink_parms(): no params data found [ 473.649362][T27970] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.656605][T27970] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.664680][T27970] bridge_slave_0: entered allmulticast mode [ 473.717833][T27970] bridge_slave_0: entered promiscuous mode [ 473.725048][T27970] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.732294][T27970] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.739851][T27970] bridge_slave_1: entered allmulticast mode [ 473.746646][T27970] bridge_slave_1: entered promiscuous mode [ 473.764651][T28007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.765635][T17379] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.773244][T28007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.811664][T27970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.823173][T27970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.841000][T17379] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.859325][T27970] team0: Port device team_slave_0 added [ 473.866331][T27970] team0: Port device team_slave_1 added [ 473.889881][T17379] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.901956][T27970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.909218][T27970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.935375][T27970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.947562][T27970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.954656][T27970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.980879][T27970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.049376][T17379] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.092916][T27970] hsr_slave_0: entered promiscuous mode [ 474.109943][T27970] hsr_slave_1: entered promiscuous mode [ 474.118365][T27970] debugfs: 'hsr0' already exists in 'hsr' [ 474.124214][T27970] Cannot create hsr debugfs directory [ 474.198419][T17379] bridge_slave_1: left allmulticast mode [ 474.204126][T17379] bridge_slave_1: left promiscuous mode [ 474.209997][T17379] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.231075][T17379] bridge_slave_0: left allmulticast mode [ 474.236954][T17379] bridge_slave_0: left promiscuous mode [ 474.242994][T17379] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.300200][T17379] bond1 (unregistering): (slave gretap1): Releasing active interface [ 474.595806][T17379] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.653699][T17379] bond_slave_0: left promiscuous mode [ 474.704141][T17379] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.757419][T17379] bond_slave_1: left promiscuous mode [ 474.774473][T17379] $Hÿ (unregistering): Released all slaves [ 474.783877][T17379] bond1 (unregistering): Released all slaves [ 474.829575][T17379] tipc: Disabling bearer [ 474.835112][T17379] tipc: Left network mode [ 474.859361][T17379] hsr_slave_1: left promiscuous mode [ 474.865240][T17379] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.872906][T17379] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.880822][T17379] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.888355][T17379] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.898968][T17379] veth1_macvtap: left promiscuous mode [ 474.904530][T17379] veth0_macvtap: left promiscuous mode [ 474.910178][T17379] veth1_vlan: left promiscuous mode [ 474.915568][T17379] veth0_vlan: left promiscuous mode [ 474.985377][T17379] team0 (unregistering): Port device team_slave_1 removed [ 475.621918][T27970] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 475.668658][T27970] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 475.713653][T27970] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 475.803410][T27970] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 475.871355][T27970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.887363][T27970] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.898770][T17427] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.905958][T17427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.927164][T17427] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.934352][T17427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.972229][T28147] loop8: detected capacity change from 0 to 256 [ 475.991434][T28147] FAT-fs (loop8): Directory bread(block 64) failed [ 476.006128][T28147] FAT-fs (loop8): Directory bread(block 65) failed [ 476.019115][T28147] FAT-fs (loop8): Directory bread(block 66) failed [ 476.021524][T27970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.026215][T28147] FAT-fs (loop8): Directory bread(block 67) failed [ 476.039777][T28147] FAT-fs (loop8): Directory bread(block 68) failed [ 476.046848][T28147] FAT-fs (loop8): Directory bread(block 69) failed [ 476.080112][T28147] FAT-fs (loop8): Directory bread(block 70) failed [ 476.099807][T28147] FAT-fs (loop8): Directory bread(block 71) failed [ 476.110284][T28147] FAT-fs (loop8): Directory bread(block 72) failed [ 476.117032][T28147] FAT-fs (loop8): Directory bread(block 73) failed [ 476.145941][T28147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.155740][T28147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.174673][T27970] veth0_vlan: entered promiscuous mode [ 476.189277][T27970] veth1_vlan: entered promiscuous mode [ 476.210216][T27970] veth0_macvtap: entered promiscuous mode [ 476.219304][T27970] veth1_macvtap: entered promiscuous mode [ 476.231556][T27970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.244733][T27970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.256640][T27970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.265709][T27970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.274592][T27970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.283707][T27970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.118912][T28220] loop8: detected capacity change from 0 to 256 [ 477.139077][T28220] FAT-fs (loop8): Directory bread(block 64) failed [ 477.145914][T28220] FAT-fs (loop8): Directory bread(block 65) failed [ 477.156535][T28220] FAT-fs (loop8): Directory bread(block 66) failed [ 477.165796][T28220] FAT-fs (loop8): Directory bread(block 67) failed [ 477.185480][T28220] FAT-fs (loop8): Directory bread(block 68) failed [ 477.193515][T28220] FAT-fs (loop8): Directory bread(block 69) failed [ 477.202433][T28220] FAT-fs (loop8): Directory bread(block 70) failed [ 477.209331][T28220] FAT-fs (loop8): Directory bread(block 71) failed [ 477.216876][T28220] FAT-fs (loop8): Directory bread(block 72) failed [ 477.223916][T28220] FAT-fs (loop8): Directory bread(block 73) failed [ 477.249953][T28220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.260863][T28220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.126958][T28336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.135834][T28336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.510356][T28493] netlink: 'syz.2.8566': attribute type 2 has an invalid length. [ 480.490980][T28549] loop8: detected capacity change from 0 to 512 [ 480.499258][T28549] EXT4-fs: Ignoring removed oldalloc option [ 480.505482][T28549] ext3: Unknown parameter 'subj_user' [ 480.734088][T28578] loop8: detected capacity change from 0 to 128 [ 480.745296][T28578] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 480.753396][T28578] FAT-fs (loop8): Filesystem has been set read-only [ 480.796162][T28578] bio_check_eod: 43357 callbacks suppressed [ 480.796180][T28578] syz.8.8597: attempt to access beyond end of device [ 480.796180][T28578] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 480.825069][T28578] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 480.832985][T28578] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 480.841546][T28578] syz.8.8597: attempt to access beyond end of device [ 480.841546][T28578] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 480.855481][T28578] syz.8.8597: attempt to access beyond end of device [ 480.855481][T28578] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 480.869554][T28578] syz.8.8597: attempt to access beyond end of device [ 480.869554][T28578] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 480.887536][T28578] syz.8.8597: attempt to access beyond end of device [ 480.887536][T28578] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 480.901355][T28581] syz.8.8597: attempt to access beyond end of device [ 480.901355][T28581] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 480.914854][T28581] buffer_io_error: 43350 callbacks suppressed [ 480.914870][T28581] Buffer I/O error on dev loop8, logical block 2065, async page read [ 480.929563][T28581] syz.8.8597: attempt to access beyond end of device [ 480.929563][T28581] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 480.943048][T28581] Buffer I/O error on dev loop8, logical block 2066, async page read [ 480.951379][T28581] syz.8.8597: attempt to access beyond end of device [ 480.951379][T28581] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 480.964773][T28581] Buffer I/O error on dev loop8, logical block 2067, async page read [ 480.974194][T28581] syz.8.8597: attempt to access beyond end of device [ 480.974194][T28581] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 480.987621][T28581] Buffer I/O error on dev loop8, logical block 2068, async page read [ 480.998621][T28581] syz.8.8597: attempt to access beyond end of device [ 480.998621][T28581] loop8: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 481.012095][T28581] Buffer I/O error on dev loop8, logical block 2069, async page read [ 481.024392][T28581] Buffer I/O error on dev loop8, logical block 2070, async page read [ 481.032988][T28581] Buffer I/O error on dev loop8, logical block 2071, async page read [ 481.043677][T28581] Buffer I/O error on dev loop8, logical block 2072, async page read [ 481.052109][T28578] Buffer I/O error on dev loop8, logical block 2065, async page read [ 481.060829][T28578] Buffer I/O error on dev loop8, logical block 2066, async page read [ 481.078751][T28592] FAULT_INJECTION: forcing a failure. [ 481.078751][T28592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.091975][T28592] CPU: 1 UID: 0 PID: 28592 Comm: syz.6.8600 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 481.092019][T28592] Tainted: [W]=WARN [ 481.092029][T28592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.092046][T28592] Call Trace: [ 481.092053][T28592] [ 481.092061][T28592] __dump_stack+0x1d/0x30 [ 481.092082][T28592] dump_stack_lvl+0xe8/0x140 [ 481.092119][T28592] dump_stack+0x15/0x1b [ 481.092148][T28592] should_fail_ex+0x265/0x280 [ 481.092181][T28592] should_fail+0xb/0x20 [ 481.092208][T28592] should_fail_usercopy+0x1a/0x20 [ 481.092314][T28592] _copy_from_user+0x1c/0xb0 [ 481.092381][T28592] kstrtouint_from_user+0x69/0xf0 [ 481.092411][T28592] ? 0xffffffff81000000 [ 481.092424][T28592] ? selinux_file_permission+0x1e4/0x320 [ 481.092540][T28592] proc_fail_nth_write+0x50/0x160 [ 481.092564][T28592] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 481.092592][T28592] vfs_write+0x266/0x8e0 [ 481.092631][T28592] ? vfs_read+0x47f/0x6f0 [ 481.092731][T28592] ? __rcu_read_unlock+0x4f/0x70 [ 481.092754][T28592] ? __fget_files+0x184/0x1c0 [ 481.092818][T28592] ? __sys_setsockopt+0x18e/0x200 [ 481.092848][T28592] ksys_write+0xda/0x1a0 [ 481.092889][T28592] __x64_sys_write+0x40/0x50 [ 481.092985][T28592] x64_sys_call+0x27fe/0x2ff0 [ 481.093013][T28592] do_syscall_64+0xd2/0x200 [ 481.093100][T28592] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 481.093180][T28592] ? clear_bhb_loop+0x40/0x90 [ 481.093204][T28592] ? clear_bhb_loop+0x40/0x90 [ 481.093338][T28592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.093363][T28592] RIP: 0033:0x7f8b2993d45f [ 481.093384][T28592] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 481.093424][T28592] RSP: 002b:00007f8b27fa7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 481.093458][T28592] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8b2993d45f [ 481.093475][T28592] RDX: 0000000000000001 RSI: 00007f8b27fa70a0 RDI: 0000000000000005 [ 481.093487][T28592] RBP: 00007f8b27fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 481.093501][T28592] R10: 0000200000000080 R11: 0000000000000293 R12: 0000000000000001 [ 481.093517][T28592] R13: 0000000000000000 R14: 00007f8b29b65fa0 R15: 00007ffdaacb26f8 [ 481.093541][T28592] [ 481.865615][T28649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.882801][T28649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.008439][T28668] loop8: detected capacity change from 0 to 256 [ 482.036290][T28668] FAT-fs (loop8): Directory bread(block 64) failed [ 482.043182][T28668] FAT-fs (loop8): Directory bread(block 65) failed [ 482.052876][T28668] FAT-fs (loop8): Directory bread(block 66) failed [ 482.059566][T28668] FAT-fs (loop8): Directory bread(block 67) failed [ 482.061820][T28676] FAULT_INJECTION: forcing a failure. [ 482.061820][T28676] name failslab, interval 1, probability 0, space 0, times 0 [ 482.068328][T28668] FAT-fs (loop8): Directory bread(block 68) failed [ 482.079031][T28676] CPU: 1 UID: 0 PID: 28676 Comm: syz.4.8632 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 482.079093][T28676] Tainted: [W]=WARN [ 482.079103][T28676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 482.079121][T28676] Call Trace: [ 482.079130][T28676] [ 482.079143][T28676] __dump_stack+0x1d/0x30 [ 482.079171][T28676] dump_stack_lvl+0xe8/0x140 [ 482.079201][T28676] dump_stack+0x15/0x1b [ 482.079225][T28676] should_fail_ex+0x265/0x280 [ 482.079293][T28676] should_failslab+0x8c/0xb0 [ 482.079347][T28676] kmem_cache_alloc_noprof+0x50/0x310 [ 482.079385][T28676] ? security_file_alloc+0x32/0x100 [ 482.079443][T28676] security_file_alloc+0x32/0x100 [ 482.079475][T28676] init_file+0x5c/0x1d0 [ 482.079509][T28676] alloc_empty_file+0x8b/0x200 [ 482.079544][T28676] path_openat+0x68/0x2170 [ 482.079611][T28676] ? _parse_integer_limit+0x170/0x190 [ 482.079651][T28676] ? kstrtoull+0x111/0x140 [ 482.079685][T28676] ? kstrtouint+0x76/0xc0 [ 482.079737][T28676] do_filp_open+0x109/0x230 [ 482.079791][T28676] do_sys_openat2+0xa6/0x110 [ 482.079830][T28676] __x64_sys_openat+0xf2/0x120 [ 482.079924][T28676] x64_sys_call+0x2e9c/0x2ff0 [ 482.079955][T28676] do_syscall_64+0xd2/0x200 [ 482.080033][T28676] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 482.080071][T28676] ? clear_bhb_loop+0x40/0x90 [ 482.080102][T28676] ? clear_bhb_loop+0x40/0x90 [ 482.080134][T28676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.080257][T28676] RIP: 0033:0x7f76feefe9a9 [ 482.080294][T28676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.080329][T28676] RSP: 002b:00007f76fd567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 482.080425][T28676] RAX: ffffffffffffffda RBX: 00007f76ff125fa0 RCX: 00007f76feefe9a9 [ 482.080486][T28676] RDX: 0000000000080000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 482.080506][T28676] RBP: 00007f76fd567090 R08: 0000000000000000 R09: 0000000000000000 [ 482.080525][T28676] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 482.080543][T28676] R13: 0000000000000000 R14: 00007f76ff125fa0 R15: 00007ffec71207a8 [ 482.080620][T28676] [ 482.309196][T28668] FAT-fs (loop8): Directory bread(block 69) failed [ 482.315878][T28668] FAT-fs (loop8): Directory bread(block 70) failed [ 482.322466][T28668] FAT-fs (loop8): Directory bread(block 71) failed [ 482.330762][T28668] FAT-fs (loop8): Directory bread(block 72) failed [ 482.338097][T28668] FAT-fs (loop8): Directory bread(block 73) failed [ 482.346195][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 482.346239][ T29] audit: type=1326 audit(1754331288.044:38863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28693 comm="syz.6.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 482.379804][ T29] audit: type=1326 audit(1754331288.044:38864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28693 comm="syz.6.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 482.403731][ T29] audit: type=1326 audit(1754331288.044:38865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28693 comm="syz.6.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 482.427519][ T29] audit: type=1326 audit(1754331288.044:38866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28693 comm="syz.6.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 482.451325][ T29] audit: type=1326 audit(1754331288.044:38867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28693 comm="syz.6.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 482.475179][ T29] audit: type=1326 audit(1754331288.072:38868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28693 comm="syz.6.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 482.499188][ T29] audit: type=1326 audit(1754331288.184:38869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28693 comm="syz.6.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 482.522868][ T29] audit: type=1326 audit(1754331288.184:38870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28693 comm="syz.6.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 482.546614][ T29] audit: type=1326 audit(1754331288.184:38871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28693 comm="syz.6.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 482.570304][ T29] audit: type=1326 audit(1754331288.184:38872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28693 comm="syz.6.8639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b2993e9a9 code=0x7ffc0000 [ 482.591274][T28668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.631312][T28668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.749153][T28718] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8645'. [ 482.758606][T28718] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8645'. [ 482.780130][T28718] netlink: 'syz.6.8645': attribute type 13 has an invalid length. [ 482.866807][T28718] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.874742][T28718] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.905867][T28731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.914481][T28731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.945981][T28718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.957883][T28718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.997960][T28718] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.007313][T28718] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.016522][T28718] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.025611][T28718] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.242564][T28752] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28752 comm=syz.2.8663 [ 483.278586][T28752] SELinux: policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c [ 483.289215][T28752] SELinux: failed to load policy [ 484.150894][T28829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.159665][T28829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.587261][T28888] lo speed is unknown, defaulting to 1000 [ 484.911879][T28915] xt_hashlimit: max too large, truncated to 1048576 [ 484.949528][T28921] FAULT_INJECTION: forcing a failure. [ 484.949528][T28921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.962803][T28921] CPU: 0 UID: 0 PID: 28921 Comm: syz.2.8735 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 484.962914][T28921] Tainted: [W]=WARN [ 484.962921][T28921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 484.962933][T28921] Call Trace: [ 484.962940][T28921] [ 484.962948][T28921] __dump_stack+0x1d/0x30 [ 484.962970][T28921] dump_stack_lvl+0xe8/0x140 [ 484.962996][T28921] dump_stack+0x15/0x1b [ 484.963041][T28921] should_fail_ex+0x265/0x280 [ 484.963073][T28921] should_fail+0xb/0x20 [ 484.963102][T28921] should_fail_usercopy+0x1a/0x20 [ 484.963142][T28921] _copy_from_user+0x1c/0xb0 [ 484.963191][T28921] do_ipt_set_ctl+0x3a0/0x820 [ 484.963226][T28921] nf_setsockopt+0x196/0x1b0 [ 484.963326][T28921] ip_setsockopt+0x102/0x110 [ 484.963345][T28921] udp_setsockopt+0x99/0xb0 [ 484.963377][T28921] sock_common_setsockopt+0x66/0x80 [ 484.963415][T28921] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 484.963538][T28921] __sys_setsockopt+0x181/0x200 [ 484.963568][T28921] __x64_sys_setsockopt+0x64/0x80 [ 484.963597][T28921] x64_sys_call+0x20ec/0x2ff0 [ 484.963669][T28921] do_syscall_64+0xd2/0x200 [ 484.963762][T28921] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 484.963800][T28921] ? clear_bhb_loop+0x40/0x90 [ 484.963828][T28921] ? clear_bhb_loop+0x40/0x90 [ 484.963856][T28921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.964001][T28921] RIP: 0033:0x7f51a486e9a9 [ 484.964020][T28921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.964114][T28921] RSP: 002b:00007f51a2ed7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 484.964135][T28921] RAX: ffffffffffffffda RBX: 00007f51a4a95fa0 RCX: 00007f51a486e9a9 [ 484.964195][T28921] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 484.964212][T28921] RBP: 00007f51a2ed7090 R08: 00000000000003c8 R09: 0000000000000000 [ 484.964230][T28921] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 484.964246][T28921] R13: 0000000000000000 R14: 00007f51a4a95fa0 R15: 00007ffee71c3738 [ 484.964270][T28921] [ 485.258604][T28934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.267785][T28934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.321261][T28943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 485.329995][T28943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.516731][T29012] lo speed is unknown, defaulting to 1000 [ 487.447616][T29068] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8798'. [ 487.714148][T29093] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8810'. [ 487.765651][T29101] loop8: detected capacity change from 0 to 256 [ 487.778840][T29101] FAT-fs (loop8): Directory bread(block 64) failed [ 487.787257][T29101] FAT-fs (loop8): Directory bread(block 65) failed [ 487.793969][T29101] FAT-fs (loop8): Directory bread(block 66) failed [ 487.800610][T29101] FAT-fs (loop8): Directory bread(block 67) failed [ 487.808888][T29101] FAT-fs (loop8): Directory bread(block 68) failed [ 487.815568][T29101] FAT-fs (loop8): Directory bread(block 69) failed [ 487.822683][T29101] FAT-fs (loop8): Directory bread(block 70) failed [ 487.829397][T29101] FAT-fs (loop8): Directory bread(block 71) failed [ 487.835991][T29101] FAT-fs (loop8): Directory bread(block 72) failed [ 487.844241][T29101] FAT-fs (loop8): Directory bread(block 73) failed [ 487.884879][T29101] bio_check_eod: 42725 callbacks suppressed [ 487.884898][T29101] syz.8.8814: attempt to access beyond end of device [ 487.884898][T29101] loop8: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 487.905077][T29101] syz.8.8814: attempt to access beyond end of device [ 487.905077][T29101] loop8: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 487.920041][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 487.920059][ T29] audit: type=1400 audit(1754331293.254:38932): avc: denied { listen } for pid=29102 comm="syz.2.8815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 487.923365][T29101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.954703][T29101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.185743][T29126] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8823'. [ 488.282264][ T29] audit: type=1400 audit(1754331293.591:38933): avc: denied { create } for pid=29131 comm="syz.0.8826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 488.891615][T29154] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8835'. [ 489.337651][ T29] audit: type=1326 audit(1754331294.582:38934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29164 comm="syz.0.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3fdee9a9 code=0x7ffc0000 [ 489.365432][ T29] audit: type=1326 audit(1754331294.601:38935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29164 comm="syz.0.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3fdee9a9 code=0x7ffc0000 [ 489.371860][T29165] FAULT_INJECTION: forcing a failure. [ 489.371860][T29165] name failslab, interval 1, probability 0, space 0, times 0 [ 489.389216][ T29] audit: type=1326 audit(1754331294.601:38936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29164 comm="syz.0.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe3fdee9a9 code=0x7ffc0000 [ 489.401884][T29165] CPU: 1 UID: 0 PID: 29165 Comm: syz.0.8840 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 489.401932][T29165] Tainted: [W]=WARN [ 489.401941][T29165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 489.401961][T29165] Call Trace: [ 489.401971][T29165] [ 489.401991][T29165] __dump_stack+0x1d/0x30 [ 489.402086][T29165] dump_stack_lvl+0xe8/0x140 [ 489.402129][T29165] dump_stack+0x15/0x1b [ 489.402154][T29165] should_fail_ex+0x265/0x280 [ 489.402234][T29165] ? audit_log_d_path+0x8d/0x150 [ 489.402279][T29165] should_failslab+0x8c/0xb0 [ 489.402310][T29165] __kmalloc_cache_noprof+0x4c/0x320 [ 489.402395][T29165] audit_log_d_path+0x8d/0x150 [ 489.402439][T29165] audit_log_d_path_exe+0x42/0x70 [ 489.402484][T29165] audit_log_task+0x1e9/0x250 [ 489.402535][T29165] audit_seccomp+0x61/0x100 [ 489.402572][T29165] ? __seccomp_filter+0x68c/0x10d0 [ 489.402626][T29165] __seccomp_filter+0x69d/0x10d0 [ 489.402667][T29165] __secure_computing+0x82/0x150 [ 489.402699][T29165] syscall_trace_enter+0xcf/0x1e0 [ 489.402754][T29165] do_syscall_64+0xac/0x200 [ 489.402788][T29165] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 489.402825][T29165] ? clear_bhb_loop+0x40/0x90 [ 489.402856][T29165] ? clear_bhb_loop+0x40/0x90 [ 489.402917][T29165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.402940][T29165] RIP: 0033:0x7fbe3fded3bc [ 489.403011][T29165] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 489.403084][T29165] RSP: 002b:00007fbe3e457030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.403111][T29165] RAX: ffffffffffffffda RBX: 00007fbe40015fa0 RCX: 00007fbe3fded3bc [ 489.403142][T29165] RDX: 000000000000000f RSI: 00007fbe3e4570a0 RDI: 0000000000000005 [ 489.403158][T29165] RBP: 00007fbe3e457090 R08: 0000000000000000 R09: 0000000000000000 [ 489.403176][T29165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 489.403268][T29165] R13: 0000000000000000 R14: 00007fbe40015fa0 R15: 00007ffc55d64748 [ 489.403353][T29165] [ 489.634598][ T29] audit: type=1326 audit(1754331294.601:38937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29164 comm="syz.0.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3fdee9a9 code=0x7ffc0000 [ 489.658235][ T29] audit: type=1326 audit(1754331294.601:38938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29164 comm="syz.0.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3fdee9a9 code=0x7ffc0000 [ 489.681859][ T29] audit: type=1326 audit(1754331294.601:38939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29164 comm="syz.0.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe3fdee9a9 code=0x7ffc0000 [ 489.705718][ T29] audit: type=1326 audit(1754331294.601:38940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29164 comm="syz.0.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3fdee9a9 code=0x7ffc0000 [ 489.729448][ T29] audit: type=1326 audit(1754331294.601:38941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29164 comm="syz.0.8840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbe3fdee9a9 code=0x7ffc0000 [ 490.632037][T29220] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8860'. [ 490.771073][T29238] FAULT_INJECTION: forcing a failure. [ 490.771073][T29238] name failslab, interval 1, probability 0, space 0, times 0 [ 490.783941][T29238] CPU: 0 UID: 0 PID: 29238 Comm: syz.8.8867 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 490.784037][T29238] Tainted: [W]=WARN [ 490.784047][T29238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 490.784063][T29238] Call Trace: [ 490.784072][T29238] [ 490.784082][T29238] __dump_stack+0x1d/0x30 [ 490.784110][T29238] dump_stack_lvl+0xe8/0x140 [ 490.784191][T29238] dump_stack+0x15/0x1b [ 490.784212][T29238] should_fail_ex+0x265/0x280 [ 490.784245][T29238] should_failslab+0x8c/0xb0 [ 490.784334][T29238] kmem_cache_alloc_noprof+0x50/0x310 [ 490.784367][T29238] ? security_inode_alloc+0x37/0x100 [ 490.784479][T29238] security_inode_alloc+0x37/0x100 [ 490.784519][T29238] inode_init_always_gfp+0x4b7/0x500 [ 490.784635][T29238] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 490.784699][T29238] alloc_inode+0x58/0x170 [ 490.784816][T29238] new_inode+0x1d/0xe0 [ 490.784840][T29238] shmem_get_inode+0x244/0x750 [ 490.784943][T29238] __shmem_file_setup+0x113/0x210 [ 490.784982][T29238] shmem_file_setup+0x3b/0x50 [ 490.785011][T29238] __se_sys_memfd_create+0x2c3/0x590 [ 490.785052][T29238] __x64_sys_memfd_create+0x31/0x40 [ 490.785104][T29238] x64_sys_call+0x2abe/0x2ff0 [ 490.785126][T29238] do_syscall_64+0xd2/0x200 [ 490.785150][T29238] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 490.785179][T29238] ? clear_bhb_loop+0x40/0x90 [ 490.785209][T29238] ? clear_bhb_loop+0x40/0x90 [ 490.785234][T29238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.785284][T29238] RIP: 0033:0x7f342bcae9a9 [ 490.785303][T29238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.785326][T29238] RSP: 002b:00007f342a316e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 490.785350][T29238] RAX: ffffffffffffffda RBX: 0000000000000571 RCX: 00007f342bcae9a9 [ 490.785367][T29238] RDX: 00007f342a316ef0 RSI: 0000000000000000 RDI: 00007f342bd316fc [ 490.785382][T29238] RBP: 0000200000001400 R08: 00007f342a316bb7 R09: 00007f342a316e40 [ 490.785398][T29238] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 490.785493][T29238] R13: 00007f342a316ef0 R14: 00007f342a316eb0 R15: 00002000000007c0 [ 490.785516][T29238] [ 491.117085][T29252] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8873'. [ 491.129494][T29256] 9pnet_fd: Insufficient options for proto=fd [ 491.141594][T29256] hsr0: entered allmulticast mode [ 491.146736][T29256] hsr_slave_1: entered allmulticast mode [ 491.153301][T29256] hsr0: entered promiscuous mode [ 491.162293][T29253] hsr0: left promiscuous mode [ 491.167154][T29253] hsr0: left allmulticast mode [ 491.171965][T29253] hsr_slave_1: left allmulticast mode [ 491.218406][T29270] FAULT_INJECTION: forcing a failure. [ 491.218406][T29270] name failslab, interval 1, probability 0, space 0, times 0 [ 491.231313][T29270] CPU: 0 UID: 0 PID: 29270 Comm: syz.2.8880 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 491.231351][T29270] Tainted: [W]=WARN [ 491.231360][T29270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 491.231376][T29270] Call Trace: [ 491.231385][T29270] [ 491.231395][T29270] __dump_stack+0x1d/0x30 [ 491.231422][T29270] dump_stack_lvl+0xe8/0x140 [ 491.231450][T29270] dump_stack+0x15/0x1b [ 491.231495][T29270] should_fail_ex+0x265/0x280 [ 491.231527][T29270] ? percpu_ref_init+0x9c/0x250 [ 491.231559][T29270] should_failslab+0x8c/0xb0 [ 491.231580][T29270] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 491.231683][T29270] __kmalloc_cache_noprof+0x4c/0x320 [ 491.231717][T29270] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 491.231753][T29270] percpu_ref_init+0x9c/0x250 [ 491.231896][T29270] io_ring_ctx_alloc+0x1aa/0x6a0 [ 491.231934][T29270] io_uring_create+0x10f/0x610 [ 491.232024][T29270] __se_sys_io_uring_setup+0x1f7/0x210 [ 491.232065][T29270] __x64_sys_io_uring_setup+0x31/0x40 [ 491.232092][T29270] x64_sys_call+0x2b21/0x2ff0 [ 491.232171][T29270] do_syscall_64+0xd2/0x200 [ 491.232222][T29270] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 491.232250][T29270] ? clear_bhb_loop+0x40/0x90 [ 491.232277][T29270] ? clear_bhb_loop+0x40/0x90 [ 491.232305][T29270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.232397][T29270] RIP: 0033:0x7f51a486e9a9 [ 491.232412][T29270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.232485][T29270] RSP: 002b:00007f51a2ed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 491.232510][T29270] RAX: ffffffffffffffda RBX: 00007f51a4a95fa0 RCX: 00007f51a486e9a9 [ 491.232527][T29270] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000004285 [ 491.232605][T29270] RBP: 00007f51a2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 491.232625][T29270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.232636][T29270] R13: 0000000000000000 R14: 00007f51a4a95fa0 R15: 00007ffee71c3738 [ 491.232732][T29270] [ 492.043975][T29282] loop8: detected capacity change from 0 to 128 [ 492.057939][T29282] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 492.065877][T29282] FAT-fs (loop8): Filesystem has been set read-only [ 492.074735][T29282] syz.8.8884: attempt to access beyond end of device [ 492.074735][T29282] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 492.088962][T29282] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 492.097052][T29282] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 492.131113][T29282] syz.8.8884: attempt to access beyond end of device [ 492.131113][T29282] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 492.144649][T29282] syz.8.8884: attempt to access beyond end of device [ 492.144649][T29282] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 492.160404][T29282] syz.8.8884: attempt to access beyond end of device [ 492.160404][T29282] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 492.174702][T29285] syz.8.8884: attempt to access beyond end of device [ 492.174702][T29285] loop8: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 492.188462][T29285] buffer_io_error: 42718 callbacks suppressed [ 492.188476][T29285] Buffer I/O error on dev loop8, logical block 2065, async page read [ 492.203244][T29285] syz.8.8884: attempt to access beyond end of device [ 492.203244][T29285] loop8: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 492.216729][T29285] Buffer I/O error on dev loop8, logical block 2066, async page read [ 492.227851][T29285] syz.8.8884: attempt to access beyond end of device [ 492.227851][T29285] loop8: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 492.236349][T29287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.241186][T29285] Buffer I/O error on dev loop8, logical block 2067, async page read [ 492.249840][T29287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.266075][T29285] syz.8.8884: attempt to access beyond end of device [ 492.266075][T29285] loop8: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 492.279450][T29285] Buffer I/O error on dev loop8, logical block 2068, async page read [ 492.288401][T29285] Buffer I/O error on dev loop8, logical block 2069, async page read [ 492.296629][T29285] Buffer I/O error on dev loop8, logical block 2070, async page read [ 492.304803][T29285] Buffer I/O error on dev loop8, logical block 2071, async page read [ 492.313195][T29285] Buffer I/O error on dev loop8, logical block 2072, async page read [ 492.322145][T29285] Buffer I/O error on dev loop8, logical block 2065, async page read [ 492.330669][T29285] Buffer I/O error on dev loop8, logical block 2066, async page read [ 492.435673][T29294] SELinux: Context system_u:object_r:devpts_t:s0 is not valid (left unmapped). [ 492.621139][T29304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.631425][T29304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.643002][T29304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8894'. [ 492.651994][T29304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8894'. [ 492.664669][T29304] netlink: 'syz.2.8894': attribute type 6 has an invalid length. [ 492.940513][T29306] lo speed is unknown, defaulting to 1000 [ 493.039226][T29306] chnl_net:caif_netlink_parms(): no params data found [ 493.086418][T29306] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.093880][T29306] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.101581][T29306] bridge_slave_0: entered allmulticast mode [ 493.108344][T29306] bridge_slave_0: entered promiscuous mode [ 493.115832][T29306] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.123117][T29306] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.130751][T29306] bridge_slave_1: entered allmulticast mode [ 493.137435][T29306] bridge_slave_1: entered promiscuous mode [ 493.160699][T29306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.173852][T29306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.207735][T29306] team0: Port device team_slave_0 added [ 493.216334][T29306] team0: Port device team_slave_1 added [ 493.239936][T29306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.247202][T29306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.273499][T29306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.284782][T29306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.291851][T29306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.318042][T29306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.365315][T17427] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.388124][T29306] hsr_slave_0: entered promiscuous mode [ 493.395147][T29306] hsr_slave_1: entered promiscuous mode [ 493.404793][T29306] debugfs: 'hsr0' already exists in 'hsr' [ 493.410597][T29306] Cannot create hsr debugfs directory [ 493.421660][T17427] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.507594][T17427] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.636686][T17427] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.839064][T17427] bridge_slave_1: left allmulticast mode [ 493.844783][T17427] bridge_slave_1: left promiscuous mode [ 493.850533][T17427] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.860734][T17427] bridge_slave_0: left allmulticast mode [ 493.866518][T17427] bridge_slave_0: left promiscuous mode [ 493.872319][T17427] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.895893][T29368] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8913'. [ 493.905806][T29368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8913'. [ 493.929360][T29370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.950139][T29370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.971745][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8914'. [ 493.981103][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8914'. [ 493.991234][T29370] netlink: 'syz.0.8914': attribute type 6 has an invalid length. [ 494.097444][T17427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.110671][T17427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.120971][T17427] bond0 (unregistering): Released all slaves [ 494.236027][T29397] xt_hashlimit: max too large, truncated to 1048576 [ 494.244361][T29397] netlink: 60 bytes leftover after parsing attributes in process `syz.8.8923'. [ 494.254471][T29397] siw: device registration error -23 [ 494.254730][T29398] siw: device registration error -23 [ 494.276964][T17427] hsr_slave_1: left promiscuous mode [ 494.284548][T17427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.292039][T17427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.299802][T17427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.307307][T17427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.318172][T17427] veth1_macvtap: left promiscuous mode [ 494.323724][T17427] veth0_macvtap: left promiscuous mode [ 494.330271][T17427] veth1_vlan: left promiscuous mode [ 494.335538][T17427] veth0_vlan: left promiscuous mode [ 494.403492][T17427] team0 (unregistering): Port device team_slave_1 removed [ 494.415135][T17427] team0 (unregistering): Port device team_slave_0 removed [ 494.447015][T17427] team0 (unregistering): Port device dummy0 removed [ 494.462272][T11455] lo speed is unknown, defaulting to 1000 [ 494.468172][T11455] infiniband syz0: ib_query_port failed (-19) [ 494.621083][T29306] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 494.629789][T29306] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 494.638785][T29306] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 494.647682][T29306] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 494.682090][T29306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.694680][T29306] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.705092][T17388] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.712216][T17388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.723253][T17372] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.730496][T17372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.754197][T29306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 494.764659][T29306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.790014][T17427] IPVS: stop unused estimator thread 0... [ 494.798681][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 494.798695][ T29] audit: type=1400 audit(1754331299.699:39050): avc: denied { remount } for pid=29409 comm="syz.6.8925" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 494.860689][T29306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.919178][T29420] FAULT_INJECTION: forcing a failure. [ 494.919178][T29420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.932407][T29420] CPU: 0 UID: 0 PID: 29420 Comm: syz.0.8927 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 494.932451][T29420] Tainted: [W]=WARN [ 494.932460][T29420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.932475][T29420] Call Trace: [ 494.932484][T29420] [ 494.932494][T29420] __dump_stack+0x1d/0x30 [ 494.932520][T29420] dump_stack_lvl+0xe8/0x140 [ 494.932545][T29420] dump_stack+0x15/0x1b [ 494.932641][T29420] should_fail_ex+0x265/0x280 [ 494.932680][T29420] should_fail+0xb/0x20 [ 494.932707][T29420] should_fail_usercopy+0x1a/0x20 [ 494.932734][T29420] copy_folio_from_iter_atomic+0x278/0x1170 [ 494.932813][T29420] ? shmem_write_begin+0xa8/0x190 [ 494.932888][T29420] ? shmem_write_begin+0xe1/0x190 [ 494.932921][T29420] generic_perform_write+0x2c2/0x490 [ 494.932952][T29420] shmem_file_write_iter+0xc5/0xf0 [ 494.932993][T29420] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 494.933020][T29420] vfs_write+0x49d/0x8e0 [ 494.933103][T29420] ksys_write+0xda/0x1a0 [ 494.933144][T29420] __x64_sys_write+0x40/0x50 [ 494.933208][T29420] x64_sys_call+0x27fe/0x2ff0 [ 494.933235][T29420] do_syscall_64+0xd2/0x200 [ 494.933264][T29420] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 494.933313][T29420] ? clear_bhb_loop+0x40/0x90 [ 494.933340][T29420] ? clear_bhb_loop+0x40/0x90 [ 494.933368][T29420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.933394][T29420] RIP: 0033:0x7fbe3fdee9a9 [ 494.933415][T29420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.933492][T29420] RSP: 002b:00007fbe3e457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 494.933515][T29420] RAX: ffffffffffffffda RBX: 00007fbe40015fa0 RCX: 00007fbe3fdee9a9 [ 494.933530][T29420] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000003 [ 494.933570][T29420] RBP: 00007fbe3e457090 R08: 0000000000000000 R09: 0000000000000000 [ 494.933584][T29420] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.933655][T29420] R13: 0000000000000000 R14: 00007fbe40015fa0 R15: 00007ffc55d64748 [ 494.933679][T29420] [ 495.244815][T29430] loop8: detected capacity change from 0 to 512 [ 495.262892][T29430] EXT4-fs: Ignoring removed nobh option [ 495.305035][T29430] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.8930: iget: bad i_size value: 38620345925642 [ 495.522746][T29430] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.8930: couldn't read orphan inode 15 (err -117) [ 495.642243][T29430] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 495.798305][T29306] veth0_vlan: entered promiscuous mode [ 495.811070][T29306] veth1_vlan: entered promiscuous mode [ 495.827997][T29306] veth0_macvtap: entered promiscuous mode [ 495.839330][T21368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.850550][T29306] veth1_macvtap: entered promiscuous mode [ 495.872917][T29306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.889028][T29306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 495.907414][T29306] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.916258][T29306] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.925154][T29306] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.934007][T29306] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.055876][T29474] FAULT_INJECTION: forcing a failure. [ 496.055876][T29474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 496.069199][T29474] CPU: 0 UID: 0 PID: 29474 Comm: syz.4.8942 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 496.069241][T29474] Tainted: [W]=WARN [ 496.069324][T29474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.069338][T29474] Call Trace: [ 496.069344][T29474] [ 496.069353][T29474] __dump_stack+0x1d/0x30 [ 496.069375][T29474] dump_stack_lvl+0xe8/0x140 [ 496.069405][T29474] dump_stack+0x15/0x1b [ 496.069424][T29474] should_fail_ex+0x265/0x280 [ 496.069452][T29474] should_fail+0xb/0x20 [ 496.069547][T29474] should_fail_usercopy+0x1a/0x20 [ 496.069604][T29474] _copy_from_user+0x1c/0xb0 [ 496.069645][T29474] ___sys_recvmsg+0xaa/0x370 [ 496.069676][T29474] ? 0xffffffff81000000 [ 496.069693][T29474] ? __rcu_read_unlock+0x4f/0x70 [ 496.069734][T29474] __x64_sys_recvmsg+0xd1/0x160 [ 496.069772][T29474] x64_sys_call+0x2b42/0x2ff0 [ 496.069815][T29474] do_syscall_64+0xd2/0x200 [ 496.069844][T29474] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 496.069923][T29474] ? clear_bhb_loop+0x40/0x90 [ 496.069949][T29474] ? clear_bhb_loop+0x40/0x90 [ 496.069972][T29474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.069993][T29474] RIP: 0033:0x7f559239e9a9 [ 496.070007][T29474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.070058][T29474] RSP: 002b:00007f55909ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 496.070082][T29474] RAX: ffffffffffffffda RBX: 00007f55925c5fa0 RCX: 00007f559239e9a9 [ 496.070097][T29474] RDX: 0000000000000142 RSI: 0000200000000640 RDI: 0000000000000003 [ 496.070112][T29474] RBP: 00007f55909ff090 R08: 0000000000000000 R09: 0000000000000000 [ 496.070127][T29474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.070143][T29474] R13: 0000000000000000 R14: 00007f55925c5fa0 R15: 00007fffbc8565d8 [ 496.070177][T29474] [ 496.488399][T29497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.497197][T29497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.513308][ T29] audit: type=1400 audit(1754331301.298:39051): avc: denied { accept } for pid=29484 comm="syz.0.8946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 496.789387][T29517] FAULT_INJECTION: forcing a failure. [ 496.789387][T29517] name failslab, interval 1, probability 0, space 0, times 0 [ 496.802287][T29517] CPU: 0 UID: 0 PID: 29517 Comm: syz.6.8957 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 496.802407][T29517] Tainted: [W]=WARN [ 496.802414][T29517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 496.802426][T29517] Call Trace: [ 496.802432][T29517] [ 496.802446][T29517] __dump_stack+0x1d/0x30 [ 496.802466][T29517] dump_stack_lvl+0xe8/0x140 [ 496.802483][T29517] dump_stack+0x15/0x1b [ 496.802541][T29517] should_fail_ex+0x265/0x280 [ 496.802564][T29517] should_failslab+0x8c/0xb0 [ 496.802591][T29517] kmem_cache_alloc_noprof+0x50/0x310 [ 496.802614][T29517] ? security_file_alloc+0x32/0x100 [ 496.802637][T29517] security_file_alloc+0x32/0x100 [ 496.802684][T29517] init_file+0x5c/0x1d0 [ 496.802717][T29517] alloc_empty_file+0x8b/0x200 [ 496.802739][T29517] path_openat+0x68/0x2170 [ 496.802765][T29517] ? _parse_integer_limit+0x170/0x190 [ 496.802790][T29517] ? kstrtoull+0x111/0x140 [ 496.802877][T29517] ? kstrtouint+0x76/0xc0 [ 496.802899][T29517] do_filp_open+0x109/0x230 [ 496.802995][T29517] do_sys_openat2+0xa6/0x110 [ 496.803066][T29517] __x64_sys_openat+0xf2/0x120 [ 496.803091][T29517] x64_sys_call+0x2e9c/0x2ff0 [ 496.803112][T29517] do_syscall_64+0xd2/0x200 [ 496.803175][T29517] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 496.803200][T29517] ? clear_bhb_loop+0x40/0x90 [ 496.803220][T29517] ? clear_bhb_loop+0x40/0x90 [ 496.803323][T29517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.803344][T29517] RIP: 0033:0x7f8b2993e9a9 [ 496.803358][T29517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 496.803398][T29517] RSP: 002b:00007f8b27fa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.803415][T29517] RAX: ffffffffffffffda RBX: 00007f8b29b65fa0 RCX: 00007f8b2993e9a9 [ 496.803427][T29517] RDX: 0000000000080000 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 496.803438][T29517] RBP: 00007f8b27fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 496.803449][T29517] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 496.803460][T29517] R13: 0000000000000000 R14: 00007f8b29b65fa0 R15: 00007ffdaacb26f8 [ 496.803481][T29517] [ 497.058752][T29521] loop8: detected capacity change from 0 to 512 [ 497.066470][T29521] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 497.087844][T29519] FAULT_INJECTION: forcing a failure. [ 497.087844][T29519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 497.097959][T29521] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.101063][T29519] CPU: 0 UID: 0 PID: 29519 Comm: syz.6.8958 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 497.101177][T29519] Tainted: [W]=WARN [ 497.101188][T29519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 497.101207][T29519] Call Trace: [ 497.101216][T29519] [ 497.101228][T29519] __dump_stack+0x1d/0x30 [ 497.101258][T29519] dump_stack_lvl+0xe8/0x140 [ 497.101335][T29519] dump_stack+0x15/0x1b [ 497.101358][T29519] should_fail_ex+0x265/0x280 [ 497.101457][T29519] should_fail+0xb/0x20 [ 497.101523][T29519] should_fail_usercopy+0x1a/0x20 [ 497.101602][T29519] _copy_to_user+0x20/0xa0 [ 497.101650][T29519] simple_read_from_buffer+0xb5/0x130 [ 497.101695][T29519] proc_fail_nth_read+0x100/0x140 [ 497.101739][T29519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 497.101772][T29519] vfs_read+0x19d/0x6f0 [ 497.101863][T29519] ? __rcu_read_unlock+0x4f/0x70 [ 497.101925][T29519] ? __fget_files+0x184/0x1c0 [ 497.101955][T29519] ksys_read+0xda/0x1a0 [ 497.102001][T29519] __x64_sys_read+0x40/0x50 [ 497.102046][T29519] x64_sys_call+0x27bc/0x2ff0 [ 497.102139][T29519] do_syscall_64+0xd2/0x200 [ 497.102174][T29519] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 497.102253][T29519] ? clear_bhb_loop+0x40/0x90 [ 497.102285][T29519] ? clear_bhb_loop+0x40/0x90 [ 497.102317][T29519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.102422][T29519] RIP: 0033:0x7f8b2993d3bc [ 497.102444][T29519] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 497.102479][T29519] RSP: 002b:00007f8b27fa7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 497.102547][T29519] RAX: ffffffffffffffda RBX: 00007f8b29b65fa0 RCX: 00007f8b2993d3bc [ 497.102568][T29519] RDX: 000000000000000f RSI: 00007f8b27fa70a0 RDI: 0000000000000007 [ 497.102672][T29519] RBP: 00007f8b27fa7090 R08: 0000000000000000 R09: 0000000000000000 [ 497.102691][T29519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.102757][T29519] R13: 0000000000000000 R14: 00007f8b29b65fa0 R15: 00007ffdaacb26f8 [ 497.102814][T29519] [ 497.326807][T29521] ext4 filesystem being mounted at /532/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 497.413168][ T29] audit: type=1400 audit(1754331302.131:39052): avc: denied { append } for pid=29520 comm="syz.8.8959" name="file0" dev="loop8" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 497.530550][T21368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.588955][T29555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.597620][T29555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 498.391327][T29568] FAULT_INJECTION: forcing a failure. [ 498.391327][T29568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.404626][T29568] CPU: 0 UID: 0 PID: 29568 Comm: syz.4.8975 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 498.404660][T29568] Tainted: [W]=WARN [ 498.404666][T29568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.404811][T29568] Call Trace: [ 498.404820][T29568] [ 498.404830][T29568] __dump_stack+0x1d/0x30 [ 498.404855][T29568] dump_stack_lvl+0xe8/0x140 [ 498.404875][T29568] dump_stack+0x15/0x1b [ 498.404953][T29568] should_fail_ex+0x265/0x280 [ 498.404986][T29568] should_fail+0xb/0x20 [ 498.405013][T29568] should_fail_usercopy+0x1a/0x20 [ 498.405082][T29568] strncpy_from_user+0x25/0x230 [ 498.405107][T29568] ? kmem_cache_alloc_noprof+0x186/0x310 [ 498.405140][T29568] ? getname_flags+0x80/0x3b0 [ 498.405188][T29568] getname_flags+0xae/0x3b0 [ 498.405303][T29568] do_sys_openat2+0x60/0x110 [ 498.405335][T29568] __x64_sys_openat+0xf2/0x120 [ 498.405406][T29568] x64_sys_call+0x2e9c/0x2ff0 [ 498.405433][T29568] do_syscall_64+0xd2/0x200 [ 498.405456][T29568] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 498.405488][T29568] ? clear_bhb_loop+0x40/0x90 [ 498.405517][T29568] ? clear_bhb_loop+0x40/0x90 [ 498.405617][T29568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.405643][T29568] RIP: 0033:0x7f559239d310 [ 498.405662][T29568] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 498.405687][T29568] RSP: 002b:00007f55909bcb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 498.405711][T29568] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f559239d310 [ 498.405778][T29568] RDX: 0000000000000002 RSI: 00007f55909bcc10 RDI: 00000000ffffff9c [ 498.405794][T29568] RBP: 00007f55909bcc10 R08: 0000000000000000 R09: 00007f55909bc986 [ 498.405810][T29568] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 498.405826][T29568] R13: 0000000000000000 R14: 00007f55925c6160 R15: 00007fffbc8565d8 [ 498.405873][T29568] [ 498.681527][T29569] netlink: 'syz.6.8976': attribute type 1 has an invalid length. [ 498.689471][T29569] netlink: 244 bytes leftover after parsing attributes in process `syz.6.8976'. [ 498.863223][T29591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 498.872065][T29591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.496168][T29621] ip6erspan0: entered allmulticast mode [ 500.555930][T29631] SELinux: policydb version 1762587546 does not match my version range 15-35 [ 500.565061][T29631] SELinux: failed to load policy [ 500.626014][T29637] netlink: 268 bytes leftover after parsing attributes in process `syz.0.9000'. [ 500.701547][T29648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 500.710190][T29648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 500.859722][ T29] audit: type=1400 audit(1754331305.367:39053): avc: denied { wake_alarm } for pid=29649 comm="syz.4.9006" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 500.867300][T29650] 8021q: VLANs not supported on vcan0 [ 500.904663][ T29] audit: type=1326 audit(1754331305.405:39054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29651 comm="syz.4.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 500.928717][ T29] audit: type=1326 audit(1754331305.405:39055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29651 comm="syz.4.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 500.952470][ T29] audit: type=1326 audit(1754331305.405:39056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29651 comm="syz.4.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 500.976305][ T29] audit: type=1326 audit(1754331305.405:39057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29651 comm="syz.4.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 500.999993][ T29] audit: type=1326 audit(1754331305.405:39058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29651 comm="syz.4.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 501.024360][ T29] audit: type=1326 audit(1754331305.405:39059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29651 comm="syz.4.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 501.048317][ T29] audit: type=1326 audit(1754331305.405:39060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29651 comm="syz.4.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 501.072115][ T29] audit: type=1326 audit(1754331305.405:39061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29651 comm="syz.4.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 501.095748][ T29] audit: type=1326 audit(1754331305.405:39062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29651 comm="syz.4.9007" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 501.342355][T29679] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9020'. [ 501.360669][T29684] netlink: 'syz.8.9022': attribute type 1 has an invalid length. [ 501.368743][T29684] netlink: 224 bytes leftover after parsing attributes in process `syz.8.9022'. [ 501.487124][T29684] loop8: detected capacity change from 0 to 8192 [ 501.521511][T29684] loop8: p1 p2 p4 < > [ 501.526052][T29684] loop8: p1 start 4261412864 is beyond EOD, truncated [ 501.533032][T29684] loop8: p2 start 4009754624 is beyond EOD, truncated [ 501.612281][T29718] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9034'. [ 501.659767][T29724] FAULT_INJECTION: forcing a failure. [ 501.659767][T29724] name failslab, interval 1, probability 0, space 0, times 0 [ 501.672601][T29724] CPU: 0 UID: 0 PID: 29724 Comm: syz.0.9037 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 501.672670][T29724] Tainted: [W]=WARN [ 501.672679][T29724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 501.672694][T29724] Call Trace: [ 501.672700][T29724] [ 501.672708][T29724] __dump_stack+0x1d/0x30 [ 501.672729][T29724] dump_stack_lvl+0xe8/0x140 [ 501.672801][T29724] dump_stack+0x15/0x1b [ 501.672823][T29724] should_fail_ex+0x265/0x280 [ 501.672883][T29724] should_failslab+0x8c/0xb0 [ 501.672943][T29724] kmem_cache_alloc_noprof+0x50/0x310 [ 501.672970][T29724] ? dst_alloc+0xbd/0x100 [ 501.672989][T29724] ? __rcu_read_unlock+0x4f/0x70 [ 501.673055][T29724] dst_alloc+0xbd/0x100 [ 501.673090][T29724] ip_route_output_key_hash_rcu+0xf16/0x1440 [ 501.673200][T29724] ip_route_output_flow+0x7b/0x130 [ 501.673243][T29724] raw_sendmsg+0x9f5/0xe50 [ 501.673298][T29724] ? __pfx_raw_sendmsg+0x10/0x10 [ 501.673327][T29724] inet_sendmsg+0xc5/0xd0 [ 501.673354][T29724] __sock_sendmsg+0x102/0x180 [ 501.673392][T29724] ____sys_sendmsg+0x31e/0x4e0 [ 501.673486][T29724] ___sys_sendmsg+0x17b/0x1d0 [ 501.673529][T29724] __x64_sys_sendmsg+0xd4/0x160 [ 501.673605][T29724] x64_sys_call+0x191e/0x2ff0 [ 501.673640][T29724] do_syscall_64+0xd2/0x200 [ 501.673671][T29724] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 501.673758][T29724] ? clear_bhb_loop+0x40/0x90 [ 501.673783][T29724] ? clear_bhb_loop+0x40/0x90 [ 501.673812][T29724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.673841][T29724] RIP: 0033:0x7fbe3fdee9a9 [ 501.673860][T29724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 501.673919][T29724] RSP: 002b:00007fbe3e457038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 501.673942][T29724] RAX: ffffffffffffffda RBX: 00007fbe40015fa0 RCX: 00007fbe3fdee9a9 [ 501.673959][T29724] RDX: 0000000000000004 RSI: 0000200000001000 RDI: 0000000000000006 [ 501.673973][T29724] RBP: 00007fbe3e457090 R08: 0000000000000000 R09: 0000000000000000 [ 501.674040][T29724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 501.674053][T29724] R13: 0000000000000000 R14: 00007fbe40015fa0 R15: 00007ffc55d64748 [ 501.674073][T29724] [ 502.144614][T29743] FAULT_INJECTION: forcing a failure. [ 502.144614][T29743] name failslab, interval 1, probability 0, space 0, times 0 [ 502.157453][T29743] CPU: 1 UID: 0 PID: 29743 Comm: syz.0.9044 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 502.157487][T29743] Tainted: [W]=WARN [ 502.157493][T29743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.157551][T29743] Call Trace: [ 502.157560][T29743] [ 502.157570][T29743] __dump_stack+0x1d/0x30 [ 502.157596][T29743] dump_stack_lvl+0xe8/0x140 [ 502.157621][T29743] dump_stack+0x15/0x1b [ 502.157642][T29743] should_fail_ex+0x265/0x280 [ 502.157674][T29743] should_failslab+0x8c/0xb0 [ 502.157773][T29743] __kvmalloc_node_noprof+0x123/0x4e0 [ 502.157808][T29743] ? io_sqe_buffers_register+0xc2/0x530 [ 502.157837][T29743] io_sqe_buffers_register+0xc2/0x530 [ 502.157861][T29743] ? __fget_files+0x184/0x1c0 [ 502.157897][T29743] __se_sys_io_uring_register+0xa9f/0xeb0 [ 502.157939][T29743] ? fput+0x8f/0xc0 [ 502.157968][T29743] ? ksys_write+0x192/0x1a0 [ 502.158003][T29743] __x64_sys_io_uring_register+0x55/0x70 [ 502.158039][T29743] x64_sys_call+0x18a3/0x2ff0 [ 502.158065][T29743] do_syscall_64+0xd2/0x200 [ 502.158159][T29743] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 502.158194][T29743] ? clear_bhb_loop+0x40/0x90 [ 502.158222][T29743] ? clear_bhb_loop+0x40/0x90 [ 502.158265][T29743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.158293][T29743] RIP: 0033:0x7fbe3fdee9a9 [ 502.158313][T29743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.158396][T29743] RSP: 002b:00007fbe3e457038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 502.158416][T29743] RAX: ffffffffffffffda RBX: 00007fbe40015fa0 RCX: 00007fbe3fdee9a9 [ 502.158429][T29743] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000006 [ 502.158446][T29743] RBP: 00007fbe3e457090 R08: 0000000000000000 R09: 0000000000000000 [ 502.158463][T29743] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 502.158479][T29743] R13: 0000000000000000 R14: 00007fbe40015fa0 R15: 00007ffc55d64748 [ 502.158504][T29743] [ 502.412037][T29747] FAULT_INJECTION: forcing a failure. [ 502.412037][T29747] name failslab, interval 1, probability 0, space 0, times 0 [ 502.425028][T29747] CPU: 0 UID: 0 PID: 29747 Comm: syz.2.9046 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 502.425072][T29747] Tainted: [W]=WARN [ 502.425080][T29747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.425164][T29747] Call Trace: [ 502.425172][T29747] [ 502.425182][T29747] __dump_stack+0x1d/0x30 [ 502.425207][T29747] dump_stack_lvl+0xe8/0x140 [ 502.425273][T29747] dump_stack+0x15/0x1b [ 502.425294][T29747] should_fail_ex+0x265/0x280 [ 502.425342][T29747] should_failslab+0x8c/0xb0 [ 502.425375][T29747] kmem_cache_alloc_noprof+0x50/0x310 [ 502.425408][T29747] ? io_submit_one+0xb8/0x11d0 [ 502.425436][T29747] io_submit_one+0xb8/0x11d0 [ 502.425472][T29747] __se_sys_io_submit+0xfb/0x280 [ 502.425592][T29747] __x64_sys_io_submit+0x43/0x50 [ 502.425646][T29747] x64_sys_call+0x2d5d/0x2ff0 [ 502.425670][T29747] do_syscall_64+0xd2/0x200 [ 502.425720][T29747] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 502.425808][T29747] ? clear_bhb_loop+0x40/0x90 [ 502.425913][T29747] ? clear_bhb_loop+0x40/0x90 [ 502.425941][T29747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.425967][T29747] RIP: 0033:0x7f51a486e9a9 [ 502.426005][T29747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.426030][T29747] RSP: 002b:00007f51a2ed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 502.426054][T29747] RAX: ffffffffffffffda RBX: 00007f51a4a95fa0 RCX: 00007f51a486e9a9 [ 502.426070][T29747] RDX: 0000200000000340 RSI: 0000000000000001 RDI: 00007f51a2e93000 [ 502.426086][T29747] RBP: 00007f51a2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 502.426101][T29747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.426117][T29747] R13: 0000000000000000 R14: 00007f51a4a95fa0 R15: 00007ffee71c3738 [ 502.426141][T29747] [ 502.426731][T29749] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9047'. [ 502.506294][T29751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9048'. [ 502.697560][T29765] FAULT_INJECTION: forcing a failure. [ 502.697560][T29765] name failslab, interval 1, probability 0, space 0, times 0 [ 502.710460][T29765] CPU: 1 UID: 0 PID: 29765 Comm: syz.4.9054 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 502.710503][T29765] Tainted: [W]=WARN [ 502.710512][T29765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 502.710528][T29765] Call Trace: [ 502.710537][T29765] [ 502.710547][T29765] __dump_stack+0x1d/0x30 [ 502.710626][T29765] dump_stack_lvl+0xe8/0x140 [ 502.710646][T29765] dump_stack+0x15/0x1b [ 502.710735][T29765] should_fail_ex+0x265/0x280 [ 502.710766][T29765] should_failslab+0x8c/0xb0 [ 502.710788][T29765] kmem_cache_alloc_noprof+0x50/0x310 [ 502.710815][T29765] ? radix_tree_node_alloc+0x8a/0x1f0 [ 502.710862][T29765] radix_tree_node_alloc+0x8a/0x1f0 [ 502.710970][T29765] idr_get_free+0x1fa/0x550 [ 502.710993][T29765] idr_alloc_u32+0xca/0x180 [ 502.711028][T29765] tcf_idr_check_alloc+0x193/0x240 [ 502.711081][T29765] tcf_pedit_init+0x1cf/0x970 [ 502.711106][T29765] ? should_fail_ex+0xdb/0x280 [ 502.711203][T29765] tcf_action_init_1+0x367/0x4a0 [ 502.711245][T29765] tcf_action_init+0x267/0x6d0 [ 502.711352][T29765] ? mark_reg_read+0x59/0x340 [ 502.711419][T29765] tc_ctl_action+0x291/0x830 [ 502.711472][T29765] ? __pfx_tc_ctl_action+0x10/0x10 [ 502.711511][T29765] rtnetlink_rcv_msg+0x657/0x6d0 [ 502.711626][T29765] netlink_rcv_skb+0x120/0x220 [ 502.711654][T29765] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 502.711699][T29765] rtnetlink_rcv+0x1c/0x30 [ 502.711785][T29765] netlink_unicast+0x5a5/0x680 [ 502.711815][T29765] netlink_sendmsg+0x58b/0x6b0 [ 502.711901][T29765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.711936][T29765] __sock_sendmsg+0x142/0x180 [ 502.711976][T29765] ____sys_sendmsg+0x31e/0x4e0 [ 502.712017][T29765] ___sys_sendmsg+0x17b/0x1d0 [ 502.712085][T29765] __x64_sys_sendmsg+0xd4/0x160 [ 502.712123][T29765] x64_sys_call+0x191e/0x2ff0 [ 502.712150][T29765] do_syscall_64+0xd2/0x200 [ 502.712213][T29765] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 502.712274][T29765] ? clear_bhb_loop+0x40/0x90 [ 502.712357][T29765] ? clear_bhb_loop+0x40/0x90 [ 502.712380][T29765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.712402][T29765] RIP: 0033:0x7f559239e9a9 [ 502.712522][T29765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.712548][T29765] RSP: 002b:00007f55909ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.712625][T29765] RAX: ffffffffffffffda RBX: 00007f55925c5fa0 RCX: 00007f559239e9a9 [ 502.712642][T29765] RDX: 000000002400c800 RSI: 0000200000000000 RDI: 0000000000000006 [ 502.712659][T29765] RBP: 00007f55909ff090 R08: 0000000000000000 R09: 0000000000000000 [ 502.712676][T29765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.712692][T29765] R13: 0000000000000000 R14: 00007f55925c5fa0 R15: 00007fffbc8565d8 [ 502.712716][T29765] [ 502.719411][T29768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.861645][T29779] kernel profiling enabled (shift: 7) [ 502.866602][T29768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.879916][T29776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9058'. [ 503.007935][T29779] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9059'. [ 503.047528][T29779] xt_TPROXY: Can be used only with -p tcp or -p udp [ 503.148565][T29793] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9064'. [ 503.201541][T29798] xt_socket: unknown flags 0xd0 [ 503.447682][T29811] support for the xor transformation has been removed. [ 503.551885][T29823] Invalid ELF header type: 3 != 1 [ 503.588687][T29823] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 504.182764][T29860] pimreg: entered allmulticast mode [ 504.188462][T29860] pimreg: left allmulticast mode [ 504.191030][T29858] hugetlbfs: Unknown parameter 'GPL' [ 504.194137][T29860] FAULT_INJECTION: forcing a failure. [ 504.194137][T29860] name failslab, interval 1, probability 0, space 0, times 0 [ 504.211886][T29860] CPU: 0 UID: 0 PID: 29860 Comm: syz.4.9087 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 504.211924][T29860] Tainted: [W]=WARN [ 504.211932][T29860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.212013][T29860] Call Trace: [ 504.212022][T29860] [ 504.212032][T29860] __dump_stack+0x1d/0x30 [ 504.212058][T29860] dump_stack_lvl+0xe8/0x140 [ 504.212106][T29860] dump_stack+0x15/0x1b [ 504.212128][T29860] should_fail_ex+0x265/0x280 [ 504.212173][T29860] should_failslab+0x8c/0xb0 [ 504.212201][T29860] kmem_cache_alloc_node_noprof+0x57/0x320 [ 504.212236][T29860] ? __alloc_skb+0x101/0x320 [ 504.212262][T29860] __alloc_skb+0x101/0x320 [ 504.212339][T29860] inet_ifmcaddr_notify+0x64/0x120 [ 504.212378][T29860] __ip_mc_dec_group+0x1ac/0x3d0 [ 504.212414][T29860] ip_mc_down+0x13d/0x1c0 [ 504.212447][T29860] inetdev_event+0x1b3/0xc10 [ 504.212497][T29860] ? ib_netdevice_event+0x281/0x5f0 [ 504.212601][T29860] ? __pfx_inetdev_event+0x10/0x10 [ 504.212627][T29860] raw_notifier_call_chain+0x6c/0x1b0 [ 504.212719][T29860] ? call_netdevice_notifiers_info+0x9c/0x100 [ 504.212761][T29860] call_netdevice_notifiers_info+0xae/0x100 [ 504.212801][T29860] dev_close_many+0x170/0x240 [ 504.212840][T29860] unregister_netdevice_many_notify+0x441/0x1690 [ 504.212878][T29860] ? vif_delete+0x3af/0x430 [ 504.212985][T29860] unregister_netdevice_many+0x19/0x20 [ 504.213016][T29860] mroute_clean_tables+0x177/0x610 [ 504.213051][T29860] ? _copy_from_user+0x89/0xb0 [ 504.213141][T29860] ip_mroute_setsockopt+0x80b/0x960 [ 504.213180][T29860] do_ip_setsockopt+0xcea/0x2240 [ 504.213227][T29860] ip_setsockopt+0x58/0x110 [ 504.213302][T29860] raw_setsockopt+0xbd/0x150 [ 504.213330][T29860] sock_common_setsockopt+0x66/0x80 [ 504.213369][T29860] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 504.213498][T29860] __sys_setsockopt+0x181/0x200 [ 504.213606][T29860] __x64_sys_setsockopt+0x64/0x80 [ 504.213635][T29860] x64_sys_call+0x20ec/0x2ff0 [ 504.213662][T29860] do_syscall_64+0xd2/0x200 [ 504.213697][T29860] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 504.213793][T29860] ? clear_bhb_loop+0x40/0x90 [ 504.213820][T29860] ? clear_bhb_loop+0x40/0x90 [ 504.213923][T29860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.213952][T29860] RIP: 0033:0x7f559239e9a9 [ 504.213984][T29860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.214003][T29860] RSP: 002b:00007f55909ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 504.214093][T29860] RAX: ffffffffffffffda RBX: 00007f55925c5fa0 RCX: 00007f559239e9a9 [ 504.214109][T29860] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000003 [ 504.214124][T29860] RBP: 00007f55909ff090 R08: 0000000000000004 R09: 0000000000000000 [ 504.214139][T29860] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.214152][T29860] R13: 0000000000000000 R14: 00007f55925c5fa0 R15: 00007fffbc8565d8 [ 504.214172][T29860] [ 504.564518][T29868] FAULT_INJECTION: forcing a failure. [ 504.564518][T29868] name failslab, interval 1, probability 0, space 0, times 0 [ 504.577411][T29868] CPU: 1 UID: 0 PID: 29868 Comm: syz.0.9091 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 504.577511][T29868] Tainted: [W]=WARN [ 504.577519][T29868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 504.577535][T29868] Call Trace: [ 504.577616][T29868] [ 504.577626][T29868] __dump_stack+0x1d/0x30 [ 504.577653][T29868] dump_stack_lvl+0xe8/0x140 [ 504.577678][T29868] dump_stack+0x15/0x1b [ 504.577699][T29868] should_fail_ex+0x265/0x280 [ 504.577786][T29868] should_failslab+0x8c/0xb0 [ 504.577815][T29868] kmem_cache_alloc_noprof+0x50/0x310 [ 504.577910][T29868] ? security_file_alloc+0x32/0x100 [ 504.577948][T29868] security_file_alloc+0x32/0x100 [ 504.577978][T29868] init_file+0x5c/0x1d0 [ 504.578117][T29868] alloc_empty_file+0x8b/0x200 [ 504.578149][T29868] alloc_file_pseudo+0xc6/0x160 [ 504.578248][T29868] anon_inode_getfile_fmode+0xa5/0x140 [ 504.578305][T29868] do_signalfd4+0x162/0x2b0 [ 504.578369][T29868] __x64_sys_signalfd+0xbe/0xf0 [ 504.578406][T29868] x64_sys_call+0x2e7b/0x2ff0 [ 504.578473][T29868] do_syscall_64+0xd2/0x200 [ 504.578503][T29868] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 504.578529][T29868] ? clear_bhb_loop+0x40/0x90 [ 504.578552][T29868] ? clear_bhb_loop+0x40/0x90 [ 504.578643][T29868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.578675][T29868] RIP: 0033:0x7fbe3fdee9a9 [ 504.578695][T29868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.578719][T29868] RSP: 002b:00007fbe3e457038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 504.578743][T29868] RAX: ffffffffffffffda RBX: 00007fbe40015fa0 RCX: 00007fbe3fdee9a9 [ 504.578757][T29868] RDX: 0000000000000008 RSI: 00002000000001c0 RDI: ffffffffffffffff [ 504.578769][T29868] RBP: 00007fbe3e457090 R08: 0000000000000000 R09: 0000000000000000 [ 504.578836][T29868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 504.578862][T29868] R13: 0000000000000000 R14: 00007fbe40015fa0 R15: 00007ffc55d64748 [ 504.578887][T29868] [ 504.889311][T29887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.889453][T29887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.782306][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 505.827943][T29906] FAULT_INJECTION: forcing a failure. [ 505.827943][T29906] name failslab, interval 1, probability 0, space 0, times 0 [ 505.840781][T29906] CPU: 1 UID: 0 PID: 29906 Comm: syz.0.9107 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 505.840840][T29906] Tainted: [W]=WARN [ 505.840849][T29906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 505.840866][T29906] Call Trace: [ 505.840873][T29906] [ 505.840883][T29906] __dump_stack+0x1d/0x30 [ 505.840908][T29906] dump_stack_lvl+0xe8/0x140 [ 505.840929][T29906] dump_stack+0x15/0x1b [ 505.840949][T29906] should_fail_ex+0x265/0x280 [ 505.840981][T29906] should_failslab+0x8c/0xb0 [ 505.841009][T29906] kmem_cache_alloc_noprof+0x50/0x310 [ 505.841040][T29906] ? mas_alloc_nodes+0x265/0x520 [ 505.841073][T29906] mas_alloc_nodes+0x265/0x520 [ 505.841104][T29906] mas_preallocate+0x33e/0x520 [ 505.841137][T29906] mmap_region+0xb7e/0x1580 [ 505.841184][T29906] do_mmap+0x9b3/0xbe0 [ 505.841220][T29906] vm_mmap_pgoff+0x17a/0x2e0 [ 505.841255][T29906] ksys_mmap_pgoff+0x2d0/0x310 [ 505.841293][T29906] x64_sys_call+0x14a3/0x2ff0 [ 505.841313][T29906] do_syscall_64+0xd2/0x200 [ 505.841336][T29906] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 505.841362][T29906] ? clear_bhb_loop+0x40/0x90 [ 505.841386][T29906] ? clear_bhb_loop+0x40/0x90 [ 505.841414][T29906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.841441][T29906] RIP: 0033:0x7fbe3fdee9a9 [ 505.841460][T29906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.841483][T29906] RSP: 002b:00007fbe3e457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 505.841504][T29906] RAX: ffffffffffffffda RBX: 00007fbe40015fa0 RCX: 00007fbe3fdee9a9 [ 505.841520][T29906] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 505.841535][T29906] RBP: 00007fbe3e457090 R08: ffffffffffffffff R09: 00000000fffff000 [ 505.841551][T29906] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000002 [ 505.841565][T29906] R13: 0000000000000000 R14: 00007fbe40015fa0 R15: 00007ffc55d64748 [ 505.841586][T29906] [ 506.083434][T29908] __nla_validate_parse: 7 callbacks suppressed [ 506.083453][T29908] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9108'. [ 506.102193][T29911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9109'. [ 506.181468][T29919] netlink: 'syz.2.9112': attribute type 1 has an invalid length. [ 506.216567][T29925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.225270][T29925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.844824][T29938] FAULT_INJECTION: forcing a failure. [ 506.844824][T29938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.858132][T29938] CPU: 1 UID: 0 PID: 29938 Comm: syz.2.9117 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 506.858162][T29938] Tainted: [W]=WARN [ 506.858168][T29938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 506.858191][T29938] Call Trace: [ 506.858197][T29938] [ 506.858205][T29938] __dump_stack+0x1d/0x30 [ 506.858224][T29938] dump_stack_lvl+0xe8/0x140 [ 506.858282][T29938] dump_stack+0x15/0x1b [ 506.858297][T29938] should_fail_ex+0x265/0x280 [ 506.858322][T29938] should_fail+0xb/0x20 [ 506.858422][T29938] should_fail_usercopy+0x1a/0x20 [ 506.858448][T29938] _copy_from_user+0x1c/0xb0 [ 506.858478][T29938] ___sys_recvmsg+0xaa/0x370 [ 506.858568][T29938] ? 0xffffffff81000000 [ 506.858653][T29938] ? __rcu_read_unlock+0x4f/0x70 [ 506.858687][T29938] __x64_sys_recvmsg+0xd1/0x160 [ 506.858719][T29938] x64_sys_call+0x2b42/0x2ff0 [ 506.858753][T29938] do_syscall_64+0xd2/0x200 [ 506.858775][T29938] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 506.858880][T29938] ? clear_bhb_loop+0x40/0x90 [ 506.858900][T29938] ? clear_bhb_loop+0x40/0x90 [ 506.859042][T29938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.859072][T29938] RIP: 0033:0x7f51a486e9a9 [ 506.859092][T29938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 506.859115][T29938] RSP: 002b:00007f51a2ed7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 506.859132][T29938] RAX: ffffffffffffffda RBX: 00007f51a4a95fa0 RCX: 00007f51a486e9a9 [ 506.859154][T29938] RDX: 0000000000000142 RSI: 0000200000000640 RDI: 0000000000000003 [ 506.859165][T29938] RBP: 00007f51a2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 506.859176][T29938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.859187][T29938] R13: 0000000000000000 R14: 00007f51a4a95fa0 R15: 00007ffee71c3738 [ 506.859204][T29938] [ 507.091986][T29942] loop8: detected capacity change from 0 to 2048 [ 507.099079][T29942] EXT4-fs (loop8): Invalid log block size: 8 [ 507.126080][T29946] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9122'. [ 507.161672][T29950] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9123'. [ 507.216224][T29953] netlink: 244 bytes leftover after parsing attributes in process `syz.8.9124'. [ 507.329347][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 507.329366][ T29] audit: type=1400 audit(1754331311.419:39288): avc: denied { mount } for pid=29954 comm="syz.0.9126" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 507.386662][T29975] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9133'. [ 507.424589][T29979] FAULT_INJECTION: forcing a failure. [ 507.424589][T29979] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 507.424622][T29979] CPU: 0 UID: 0 PID: 29979 Comm: syz.2.9134 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 507.424725][T29979] Tainted: [W]=WARN [ 507.424734][T29979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.424749][T29979] Call Trace: [ 507.424757][T29979] [ 507.424766][T29979] __dump_stack+0x1d/0x30 [ 507.424809][T29979] dump_stack_lvl+0xe8/0x140 [ 507.424834][T29979] dump_stack+0x15/0x1b [ 507.424855][T29979] should_fail_ex+0x265/0x280 [ 507.424887][T29979] should_fail+0xb/0x20 [ 507.424921][T29979] should_fail_usercopy+0x1a/0x20 [ 507.424973][T29979] strncpy_from_user+0x25/0x230 [ 507.424995][T29979] ? kmem_cache_alloc_noprof+0x186/0x310 [ 507.425048][T29979] ? getname_flags+0x80/0x3b0 [ 507.425073][T29979] getname_flags+0xae/0x3b0 [ 507.425101][T29979] user_path_at+0x28/0x130 [ 507.425134][T29979] __se_sys_mount+0x25b/0x2e0 [ 507.425241][T29979] ? fput+0x8f/0xc0 [ 507.425298][T29979] __x64_sys_mount+0x67/0x80 [ 507.425423][T29979] x64_sys_call+0x2b4d/0x2ff0 [ 507.425452][T29979] do_syscall_64+0xd2/0x200 [ 507.425478][T29979] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 507.425505][T29979] ? clear_bhb_loop+0x40/0x90 [ 507.425574][T29979] ? clear_bhb_loop+0x40/0x90 [ 507.425600][T29979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.425622][T29979] RIP: 0033:0x7f51a486e9a9 [ 507.425720][T29979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.425746][T29979] RSP: 002b:00007f51a2ed7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 507.425773][T29979] RAX: ffffffffffffffda RBX: 00007f51a4a95fa0 RCX: 00007f51a486e9a9 [ 507.425794][T29979] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 507.425882][T29979] RBP: 00007f51a2ed7090 R08: 0000200000000680 R09: 0000000000000000 [ 507.425900][T29979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.425918][T29979] R13: 0000000000000000 R14: 00007f51a4a95fa0 R15: 00007ffee71c3738 [ 507.425946][T29979] [ 507.632414][ T29] audit: type=1400 audit(1754331311.691:39289): avc: denied { write } for pid=29989 comm="syz.4.9137" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 507.637255][ T29] audit: type=1326 audit(1754331311.691:39290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29989 comm="syz.4.9137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 507.637296][ T29] audit: type=1326 audit(1754331311.691:39291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29989 comm="syz.4.9137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 507.637375][ T29] audit: type=1326 audit(1754331311.691:39292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29989 comm="syz.4.9137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 507.637406][ T29] audit: type=1326 audit(1754331311.691:39293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29989 comm="syz.4.9137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 507.637448][ T29] audit: type=1326 audit(1754331311.691:39294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29989 comm="syz.4.9137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 507.637483][ T29] audit: type=1326 audit(1754331311.691:39295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29989 comm="syz.4.9137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 507.637521][ T29] audit: type=1326 audit(1754331311.691:39296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29989 comm="syz.4.9137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 507.637568][ T29] audit: type=1326 audit(1754331311.691:39297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29989 comm="syz.4.9137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f559239e9a9 code=0x7ffc0000 [ 507.836391][T29993] FAULT_INJECTION: forcing a failure. [ 507.836391][T29993] name failslab, interval 1, probability 0, space 0, times 0 [ 507.836524][T29993] CPU: 1 UID: 0 PID: 29993 Comm: syz.4.9138 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 507.836565][T29993] Tainted: [W]=WARN [ 507.836572][T29993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 507.836589][T29993] Call Trace: [ 507.836598][T29993] [ 507.836605][T29993] __dump_stack+0x1d/0x30 [ 507.836652][T29993] dump_stack_lvl+0xe8/0x140 [ 507.836685][T29993] dump_stack+0x15/0x1b [ 507.836708][T29993] should_fail_ex+0x265/0x280 [ 507.836736][T29993] should_failslab+0x8c/0xb0 [ 507.836759][T29993] kmem_cache_alloc_noprof+0x50/0x310 [ 507.836814][T29993] ? security_inode_alloc+0x37/0x100 [ 507.836849][T29993] security_inode_alloc+0x37/0x100 [ 507.836887][T29993] inode_init_always_gfp+0x4b7/0x500 [ 507.836933][T29993] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 507.836977][T29993] alloc_inode+0x58/0x170 [ 507.837048][T29993] new_inode+0x1d/0xe0 [ 507.837070][T29993] shmem_get_inode+0x244/0x750 [ 507.837145][T29993] __shmem_file_setup+0x113/0x210 [ 507.837182][T29993] shmem_file_setup+0x3b/0x50 [ 507.837224][T29993] __se_sys_memfd_create+0x2c3/0x590 [ 507.837276][T29993] __x64_sys_memfd_create+0x31/0x40 [ 507.837338][T29993] x64_sys_call+0x2abe/0x2ff0 [ 507.837367][T29993] do_syscall_64+0xd2/0x200 [ 507.837399][T29993] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 507.837472][T29993] ? clear_bhb_loop+0x40/0x90 [ 507.837498][T29993] ? clear_bhb_loop+0x40/0x90 [ 507.837520][T29993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.837576][T29993] RIP: 0033:0x7f559239e9a9 [ 507.837595][T29993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.837618][T29993] RSP: 002b:00007f55909fee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 507.837637][T29993] RAX: ffffffffffffffda RBX: 0000000000000240 RCX: 00007f559239e9a9 [ 507.837651][T29993] RDX: 00007f55909feef0 RSI: 0000000000000000 RDI: 00007f55924216fc [ 507.837668][T29993] RBP: 00002000000002c0 R08: 00007f55909febb7 R09: 00007f55909fee40 [ 507.837701][T29993] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000280 [ 507.837740][T29993] R13: 00007f55909feef0 R14: 00007f55909feeb0 R15: 0000200000000040 [ 507.837765][T29993] [ 508.316417][T30005] FAULT_INJECTION: forcing a failure. [ 508.316417][T30005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.360501][T30005] CPU: 0 UID: 0 PID: 30005 Comm: syz.8.9141 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 508.360541][T30005] Tainted: [W]=WARN [ 508.360548][T30005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 508.360589][T30005] Call Trace: [ 508.360597][T30005] [ 508.360605][T30005] __dump_stack+0x1d/0x30 [ 508.360636][T30005] dump_stack_lvl+0xe8/0x140 [ 508.360673][T30005] dump_stack+0x15/0x1b [ 508.360690][T30005] should_fail_ex+0x265/0x280 [ 508.360721][T30005] should_fail+0xb/0x20 [ 508.360808][T30005] should_fail_usercopy+0x1a/0x20 [ 508.360849][T30005] _copy_to_user+0x20/0xa0 [ 508.360900][T30005] simple_read_from_buffer+0xb5/0x130 [ 508.361008][T30005] proc_fail_nth_read+0x100/0x140 [ 508.361039][T30005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 508.361087][T30005] vfs_read+0x19d/0x6f0 [ 508.361131][T30005] ? __rcu_read_unlock+0x4f/0x70 [ 508.361236][T30005] ? __fget_files+0x184/0x1c0 [ 508.361409][T30005] ksys_read+0xda/0x1a0 [ 508.361455][T30005] __x64_sys_read+0x40/0x50 [ 508.361527][T30005] x64_sys_call+0x27bc/0x2ff0 [ 508.361558][T30005] do_syscall_64+0xd2/0x200 [ 508.361590][T30005] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 508.361668][T30005] ? clear_bhb_loop+0x40/0x90 [ 508.361700][T30005] ? clear_bhb_loop+0x40/0x90 [ 508.361732][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.361764][T30005] RIP: 0033:0x7f342bcad3bc [ 508.361785][T30005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 508.361843][T30005] RSP: 002b:00007f342a2f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 508.361870][T30005] RAX: ffffffffffffffda RBX: 00007f342bed6080 RCX: 00007f342bcad3bc [ 508.361889][T30005] RDX: 000000000000000f RSI: 00007f342a2f60a0 RDI: 0000000000000004 [ 508.361907][T30005] RBP: 00007f342a2f6090 R08: 0000000000000000 R09: 0000000000000000 [ 508.361925][T30005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 508.361942][T30005] R13: 0000000000000000 R14: 00007f342bed6080 R15: 00007ffecd4c9118 [ 508.362014][T30005] [ 508.652047][T30013] netlink: 68 bytes leftover after parsing attributes in process `syz.6.9145'. [ 508.665431][T30015] hub 9-0:1.0: USB hub found [ 508.671683][T30015] hub 9-0:1.0: 8 ports detected [ 508.740316][T30024] loop8: detected capacity change from 0 to 512 [ 508.747876][T30024] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 508.749514][T30024] EXT4-fs error (device loop8): ext4_orphan_get:1419: comm syz.8.9151: bad orphan inode 15 [ 508.767033][T30024] ext4_test_bit(bit=14, block=18) = 1 [ 508.767097][T30024] is_bad_inode(inode)=0 [ 508.767105][T30024] NEXT_ORPHAN(inode)=1023 [ 508.767114][T30024] max_ino=32 [ 508.767123][T30024] i_nlink=0 [ 508.767297][T30024] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.9151: corrupted xattr block 19: invalid header [ 508.767437][T30024] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 508.767895][T30024] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 508.768075][T30024] ext2 filesystem being mounted at /560/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 508.807319][T21368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 509.831113][T30052] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9160'. [ 510.209677][T30064] netlink: 12 bytes leftover after parsing attributes in process `syz.8.9163'. [ 510.260780][T30064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.283228][T30064] vlan2: entered allmulticast mode [ 510.283250][T30064] bond0: entered allmulticast mode [ 510.319408][T30065] ================================================================== [ 510.319460][T30065] BUG: KCSAN: data-race in do_con_write / stop_tty [ 510.319498][T30065] [ 510.319504][T30065] write to 0xffff88811f590dbc of 1 bytes by task 30072 on cpu 1: [ 510.319522][T30065] stop_tty+0x4d/0xb0 [ 510.319558][T30065] n_tty_receive_char_flow_ctrl+0xec/0x1a0 [ 510.319595][T30065] n_tty_receive_buf_standard+0x4d2/0x2f10 [ 510.319632][T30065] n_tty_receive_buf_common+0x805/0xbe0 [ 510.319661][T30065] n_tty_receive_buf+0x30/0x40 [ 510.319693][T30065] tiocsti+0x170/0x1d0 [ 510.319711][T30065] tty_ioctl+0x4a4/0xb80 [ 510.319731][T30065] __se_sys_ioctl+0xcb/0x140 [ 510.319765][T30065] __x64_sys_ioctl+0x43/0x50 [ 510.319798][T30065] x64_sys_call+0x1816/0x2ff0 [ 510.319826][T30065] do_syscall_64+0xd2/0x200 [ 510.319856][T30065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.319877][T30065] [ 510.319882][T30065] read to 0xffff88811f590dbc of 1 bytes by task 30065 on cpu 0: [ 510.319898][T30065] do_con_write+0x16b2/0x2940 [ 510.319919][T30065] con_write+0x24/0x40 [ 510.319942][T30065] n_tty_write+0x7d8/0xb10 [ 510.319971][T30065] file_tty_write+0x38c/0x670 [ 510.320006][T30065] tty_write+0x25/0x30 [ 510.320041][T30065] vfs_write+0x49d/0x8e0 [ 510.320080][T30065] ksys_write+0xda/0x1a0 [ 510.320115][T30065] __x64_sys_write+0x40/0x50 [ 510.320147][T30065] x64_sys_call+0x27fe/0x2ff0 [ 510.320168][T30065] do_syscall_64+0xd2/0x200 [ 510.320193][T30065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.320219][T30065] [ 510.320224][T30065] value changed: 0x00 -> 0x01 [ 510.320237][T30065] [ 510.320242][T30065] Reported by Kernel Concurrency Sanitizer on: [ 510.320260][T30065] CPU: 0 UID: 0 PID: 30065 Comm: syz.4.9161 Tainted: G W 6.16.0-syzkaller-01056-gae388edd4a8f #0 PREEMPT(voluntary) [ 510.320301][T30065] Tainted: [W]=WARN [ 510.320309][T30065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.320322][T30065] ==================================================================