last executing test programs: 3m47.864185629s ago: executing program 2 (id=50): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) msgrcv(0x0, 0x0, 0x0, 0x0, 0x800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000025940000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010140001800c00010063", @ANYBLOB, @ANYRES16], 0x118}, 0x1, 0x0, 0x0, 0x80}, 0x240060c0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00', 0x8, 0x1, 0x1, 0xa, 0x7, 0x9}, 0x20) 3m47.418483466s ago: executing program 2 (id=58): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, 0x0, 0x187842, 0x147) socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0042, 0x0) r4 = socket$kcm(0x21, 0x2, 0x2) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x8}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r5, &(0x7f00000004c0)="8afe066e1989f76dc66ee54fefc21ce5ba9fdf2ce2caa98a2283e20cefbc5811fa126a41a8881d58d6f1a8daeeb4ac395f305c7548c5ac8c49600ef8d043f2c757319e7acdc5dd1e02d8421306515b5314c84ed304aaf7f6e31d1c2519a649ab26ac7ef3cf3f1468e4822fc8eb6804e0b7c46ab73934922515549284f94f5809bd937665a62b93fcfbf86f0ab360bbfe3a536a1306e3ee237f16726473f24ff7b00b93d34747c34f1ef827394a2385cd7579d17a46ff3ebc1a11ae7bad8bf7f75bef601251365d584e6c019a1000"}, 0x20) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) pipe2$9p(&(0x7f00000002c0), 0x800) 3m47.305307127s ago: executing program 2 (id=60): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@resuid}, {@jqfmt_vfsv1}, {@errors_remount}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x46f, &(0x7f0000000580)="$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") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1ae96d0103010000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000740)=ANY=[], 0xffc9) 3m47.182018989s ago: executing program 2 (id=62): r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x4}, 0x4110, 0x0, 0x1, 0x4}, 0x0, 0x0, r0, 0x0) syz_mount_image$ext4(&(0x7f0000001280)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fe, &(0x7f0000000a40)="$eJzs3c9vI1cdAPDvTOIkm6ZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBrdeygGpwAq0QeJgNP6RzW7sJOw6tmp/PtJo5s0bz/e9teY97zeJXwBj63pEHEbEVES8HRHz7fNJe4vXW1t23f17d9eO791dS6LReOsfSbM+OxenXpN5qn3PmYj4/ncifpScjVvbP9haLZdLu+1yoV7ZKdT2D25tVlY3Shul7WJxeWl58dXbrxT71tcXKr/55Nubb/zgg9996eM/HX7zJ1mz5tp1p/vRT62u507iZCYj4o2rCDYEE+3+TA27ITyWNCI+ExEvNp//+ZhovpuX0+WxBgA+BRqN+WjMny4DAKMubebAkjTfzgXMRZrm860c3nMxm5artfrNO9W97fVWrmwhcumdzXJpsZ0rXIhckpWX3suOH5SL8XD5dkQ8GxE/nb7WLOfXLp9nAAD666lH5v9/T7fmfwBgxM1cdMHKYNoBAAzOhfM/ADByzP8AMH7M/wAwfsz/ADB+zP8AMG4+6sz/E8NuCQAwEN97881saxy3v/96/Z39va3qO7fWS7WtfGVvLb9W3d3Jb1SrG+VSfq1aueh+5Wp1Z+nl2Hu3UC/V6oXa/sFKpbq3XV9pfq/3Sik3kF4BAOd59oUP/5JExOFr15pbnFrLwVwNoy0ddgOAoZHzh/HlW7hhfPk/PnDRWp49f0X4/ccI1njvMV4E9NuNz8v/w7jqkv+XEoAxIf8P48tkD+Or0Uh6rfmfnlwCAIwUOX5goD//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBEx19wWTpXTNJ+PeDoiFiKX3NkslxYj4pmI+PN0bjorLw21xQDAk0v/lrTX/7ox/9Lco7VTyX+uNfcR8eOfv/Wzd1fr9d2l7Pw/pzvn6++3zxeH0X4A4CKdebozj3fcv3d3rbMNsj2ffKu1uGgW97i9tWomYzLb/XEmchEx+6+kVW7LPq9M9CH+4VFEfK5b/5NmbmShvfLpo/Gz2E8PNH76UPy0WdfaZ/8Wnz1z5+meMS9a6xXGxYfZ+PN6t+cvjevN/UzXxY9nmiPUk+uMf8dnxr/O8z7THGu6jX/XLxvj5d9/t2fdUcQXJrvFT07iJz3iv3RSmjo3/kdf/PKLveoav4y4Ed3jn45VqFd2CrX9g1ubldWN0kZpu1hcXlpefPX2K8VCM0dd6GSqz/r7azef6dn/X0fM9og/c0H/v3ZurxsnA/Cv/vv2D7/SK/5RxDe+2v39f+6c+Nmc+PVz4z+wOvvbnst3Z/HXW/0/+n/f/5uXjP/xXw/WL3kpADAAtf2DrdVyubTb14NcdKma7k+I5Ira7GDED7LP4096n+fbKbOu1/zhFx88n1UOvad9ORjywARcuQcP/bBbAgAAAAAAAAAAAAAA9HLlf06UDruHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjLL/BQAA//8SwcrQ") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x46) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r3, 0x0, 0x40000010000}, 0x18) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) pwritev(r4, 0x0, 0x0, 0x1498, 0x81) close_range(r2, r0, 0x0) 3m46.799420715s ago: executing program 2 (id=69): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3m45.642888413s ago: executing program 2 (id=84): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x208000, &(0x7f00000004c0)={[], [{@fowner_eq}]}, 0x1, 0x789, &(0x7f0000001240)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x8, 0x5e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x30}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010102}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0xfffffffc, 0x0, 0x802}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) io_setup(0x6, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 3m45.598286184s ago: executing program 32 (id=84): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x208000, &(0x7f00000004c0)={[], [{@fowner_eq}]}, 0x1, 0x789, &(0x7f0000001240)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r4}, 0x18) keyctl$KEYCTL_MOVE(0x4, r3, r2, r2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000280)={0x8, 0x5e21, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x30}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @private=0xa010102}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0xfffffffc, 0x0, 0x802}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) close_range(r6, 0xffffffffffffffff, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) io_setup(0x6, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtaction={0x4c, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x38, 0x1, [@m_mirred={0x34, 0x0, 0x0, 0x0, {{0xb, 0x9}, {0x4, 0xe}, {0x6, 0x6, "6ed0"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x58) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) 2m11.574444521s ago: executing program 5 (id=1864): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000780)=ANY=[@ANYBLOB="a5966e75e90fdae318000004000000e4ffffff000000000018110000219fa5dd84aabbd15ac326aca802adc5ad189b0c0c64376ff79f00b2d77dde9d68efbbaa7ee4dde892ba19aed10f5d4d39cbbad1b2f874680b73acbb4bbe92e850d77b44f75f5ef12b017666f6131c2863291e02a3a52aeec92d6f", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x4, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @loopback}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r3}, 0x18) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000740)={0xca, 0x24}) preadv(r4, &(0x7f0000000500)=[{0x0}, {&(0x7f00000003c0)=""/215, 0xd7}], 0x2, 0xfffffffd, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32=r1], 0x48) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x10, &(0x7f0000000880)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) r7 = socket(0xa, 0x5, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000100)={0x2017be01}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r7, &(0x7f0000000000)={0x40000000}) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) write$binfmt_aout(r9, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f00000002c0)=0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r11}, 0x10) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x13) socket$nl_generic(0x10, 0x3, 0x10) 2m10.706326434s ago: executing program 5 (id=1876): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="119bc46b93a7162c17198a12602668c190f0ffa4a3a6fe2f766110f9a41a8788d0e9d6b6a76f6a6a12bb4849265edd5402ec4208219c9e8c3ed46d8c022b7be8cd8c4eb79b33b5d317e370adf2323297bb8fcc1902ec10f2dd8cea9a6ca25747dabcd7b9a192e1036aebbe17ce3562672bc43adf767227eeb421ce2bf2", @ANYRESDEC=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='sched_switch\x00', r3, 0x0, 0x9}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) fcntl$getown(r3, 0x9) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f00000006c0)=0x2, 0x0, 0x2, &(0x7f0000000140)={0x77359400}, 0x0, 0x7fffffff) timer_create(0x0, 0x0, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x58, &(0x7f0000000980)={[{@inode_readahead_blks}, {@grpquota}, {@nomblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4ffff}}, {@norecovery}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x814}}]}, 0xfb, 0x799, &(0x7f00000001c0)="$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") chdir(&(0x7f0000000440)='./file0\x00') open(0x0, 0x8c40, 0x86) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000000c0)=""/85, 0x55) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r6 = gettid() setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000180)={{}, {}, [], {}, [{}, {0x8, 0x5, 0xee00}, {}]}, 0x3c, 0x0) rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) tkill(r6, 0x16) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 2m7.378952166s ago: executing program 5 (id=1977): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x40) 2m7.285465597s ago: executing program 5 (id=1979): syz_open_dev$loop(0x0, 0x9, 0x12d600) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x8080) 2m6.870187074s ago: executing program 5 (id=1988): socket$key(0xf, 0x3, 0x2) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x1b, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.impure\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r10, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r12 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r12, &(0x7f0000000600)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="86de25800717", 0x6}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="34000000000000000000000007000000440893800000000900440491a00713baac1414aa00000000ac1e00010a01010207020000000000001400000000000000000000000200000003000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ffffffff000000000000000014000000000000000000f3"], 0xa0}, 0x742108b30e2cd9ac) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRESDEC=r12], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r13, 0x0, 0xc6e9}, 0x18) socket$kcm(0x10, 0x2, 0x0) 2m6.610167028s ago: executing program 5 (id=1993): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="ff92636b00000000000000005d43fbefbfb2e712a1d7a7dd479be3f4c4afc6684a31ce4130ee28f8d257103114bec66872ea8f8d507251edfd88b608659a5b8c9dc22ba0fe17df085bbd1efedbc0c44fd7098f2e973fd74b46811610ac71a8f2dfc4abf726b830be495cc74bbde2a42fa5ab873f643ea6c9639e2489701ee9c3f73cacc5d687988a8ff5e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 2m6.609834857s ago: executing program 33 (id=1993): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="ff92636b00000000000000005d43fbefbfb2e712a1d7a7dd479be3f4c4afc6684a31ce4130ee28f8d257103114bec66872ea8f8d507251edfd88b608659a5b8c9dc22ba0fe17df085bbd1efedbc0c44fd7098f2e973fd74b46811610ac71a8f2dfc4abf726b830be495cc74bbde2a42fa5ab873f643ea6c9639e2489701ee9c3f73cacc5d687988a8ff5e0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) 1m39.102837824s ago: executing program 4 (id=2573): semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/193) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) write$cgroup_subtree(r0, &(0x7f0000000a00)={[{0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2d, 'cpuacct'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2d, 'net'}, {0x2b, 'blkio'}, {0x2b, 'cpuacct'}]}, 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x3, 0x2, 0x3, 0x0, 0x8, 0x8}, 0x20) r1 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000480)={0xff, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r0, 0x20, &(0x7f0000000980)={&(0x7f0000000880)=""/24, 0x18, 0x0, &(0x7f00000008c0)=""/178, 0xb2}}, 0x10) open$dir(&(0x7f0000000540)='./file0\x00', 0x71a753a09e387c33, 0x2) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x800000009) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000007c0)={'filter\x00', 0x0, 0x4, 0x3f, [0xd, 0xb, 0xff, 0x9c, 0x1, 0x7fffffffffffffff], 0x5, &(0x7f0000000740)=[{}, {}, {}, {}, {}], &(0x7f0000000640)=""/63}, &(0x7f0000000840)=0x78) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x3, 0x0, {0x0, 0x7f}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="600000d9eb1b0d936596668ff6e7fc6cc66ca8741534da19e55a4eaf796182e8123e7fc142", @ANYRES16=r2, @ANYBLOB="00012dbd7000fcdbdf251300000008000300", @ANYRES32=r4, @ANYBLOB="0c009900060000006600000008001400", @ANYRES32, @ANYBLOB="0800a40001000000080011800400050018001180040007000400030004000200040002000400020006001200fcff0000"], 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0xc800) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000d00)=""/115) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4ab}, 0x18) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b) 1m38.965681646s ago: executing program 4 (id=2579): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 1m38.879070557s ago: executing program 4 (id=2582): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0xa}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m38.829877408s ago: executing program 4 (id=2584): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open(&(0x7f0000000080)='./bus\x00', 0x143862, 0x101) mount(&(0x7f00000002c0)=@rnullb, &(0x7f0000000280)='./bus\x00', &(0x7f0000000480)='9p\x00', 0x800000, &(0x7f0000000300)='trans=rdma,') set_tid_address(0x0) 1m38.819335138s ago: executing program 4 (id=2586): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) brk(0x400000ffc020) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000340)=0x10, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r5}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000000000000000000000000bbff02000000000000000000000000000115ce"], 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) utimensat(r0, 0x0, 0x0, 0x0) 1m38.274888057s ago: executing program 4 (id=2588): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x1, 0x3}, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0xa24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x16}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x9e8, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x8a8, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6b70, 0x101, 0x253, 0x400, 0x3, 0x3, 0x8, 0xff, 0xc15b, 0x80000001, 0x0, 0x8, 0x0, 0x2, 0x6, 0x40, 0x10, 0x401, 0x5, 0x200007, 0x10001, 0x48, 0xfffffe00, 0x7ff, 0x8000, 0x1, 0x80000000, 0x3, 0x8, 0x5, 0xef, 0xfffffff7, 0x5, 0x3, 0xa, 0x1ff, 0x1, 0x7, 0xa60, 0x4, 0x9, 0x9, 0x81, 0x2, 0x5, 0xd4, 0x4, 0x81, 0x7, 0xfa, 0x5, 0x3, 0x8, 0xce7f5e7, 0xec, 0x8000, 0x2, 0x4, 0x3f, 0x4, 0x1, 0x8, 0x4, 0xb, 0x6, 0x9, 0x3, 0x9, 0x4, 0x200, 0xab, 0x2, 0x8, 0xf, 0x9, 0x8, 0x1, 0x0, 0x8, 0x64ce, 0x6, 0x401, 0x13b, 0x80, 0xfffffffa, 0x8, 0xbb2d09a, 0x80000000, 0x2, 0xf, 0x6, 0x3dc, 0x22, 0x7, 0x9158, 0xd84, 0x15d, 0x1, 0x5, 0x0, 0x9, 0x8, 0x4, 0x8, 0x408, 0x2, 0x8, 0x52, 0x40, 0x8490, 0x2, 0xfe, 0x101, 0x4, 0x8000, 0x34a71484, 0x7, 0x2, 0x7fff, 0x1, 0x0, 0x3f, 0x1000, 0x3, 0x6, 0x6, 0x0, 0x1, 0x1, 0x4411dd87, 0x2172, 0x6, 0x5f2f40e7, 0x5, 0x3, 0x800, 0x7, 0x4, 0x8, 0x7, 0x646ddddc, 0x1, 0x0, 0x1, 0x6, 0x7, 0x6, 0x6, 0x10001, 0x4, 0x1, 0xd, 0x0, 0xe48, 0x8001, 0x7, 0xfffffffe, 0x4, 0x9, 0xded2, 0x3, 0x9, 0xffffffff, 0x8, 0x200, 0x4, 0x4, 0x40, 0x5, 0x39edd6c0, 0x6, 0x3, 0x5, 0x5, 0xfffff5c6, 0x4, 0x9, 0x200, 0x3ff, 0x4, 0x1, 0x342, 0x1, 0x5, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0xb7, 0x5, 0xd, 0x0, 0xf3f, 0x1, 0x5338, 0x401, 0x1, 0x2e, 0x1ff, 0x7, 0x4, 0xfffffffd, 0x7fff, 0x6, 0x81, 0x80, 0x200, 0x101, 0x1000, 0xfffffffc, 0x1, 0x3, 0x8, 0x8, 0x7fc, 0x8, 0x3, 0x7, 0x8, 0x7, 0x40, 0x3, 0xffffffff, 0xffffffff, 0x8, 0xe, 0x100, 0x5, 0xc, 0x2, 0x6e96914f, 0x7, 0x5, 0x1, 0x80000000, 0x1, 0x9, 0x7, 0x4, 0xe, 0x1, 0x4, 0xffff8001, 0x5, 0x10000, 0x4, 0xffff, 0x9, 0x8, 0xb3, 0x101, 0x5, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4800, 0x7, 0x1, 0x9ba, 0x0, {0x6, 0x1, 0x8, 0x100, 0x504, 0x100003}, {0x5, 0x0, 0x2, 0x3, 0xe, 0x7fc}, 0x2393, 0x3, 0x1ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xffffffdb, 0xfffffff7, 0x4, {0x8, 0x3, 0x9, 0xe, 0x2f7d, 0x8}, {0x2, 0x2, 0x3, 0xb77, 0x3, 0x9}, 0x3, 0xe, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffff7f, 0x7, 0x2dc, 0x9, 0x8001, 0xfffffff9, 0x291, 0x3, 0x5, 0x3, 0x8001, 0x4a49, 0xfffffff6, 0x1, 0x4, 0x4, 0x6ca, 0x7, 0x7, 0xb, 0x8, 0xc, 0xffffff7f, 0x8000, 0x811, 0x2000005, 0x3, 0x2, 0xff, 0xff, 0x1c, 0x2, 0x7, 0x2, 0x5, 0x0, 0x6af7, 0x10, 0x4, 0x400, 0x1, 0x6, 0x401, 0x5, 0x4, 0x7fff, 0xeb9, 0xdac, 0x8, 0x80, 0xf7, 0x7, 0x4, 0xfffffffa, 0x9, 0x4, 0x4, 0x7, 0x8000, 0x4, 0x10, 0x8, 0x4, 0x8, 0xe, 0x1, 0x10000, 0xe, 0xd0ee, 0x0, 0xffffff32, 0x2, 0xffffffff, 0xbd6, 0xfffffff8, 0xffff0001, 0x0, 0x2, 0xfffff6c2, 0x8, 0x1, 0x9, 0x5, 0x6, 0x8, 0x5, 0x3, 0x1, 0x5, 0x4, 0x6, 0x6, 0x2, 0x81, 0x8, 0x5, 0x8, 0x1, 0x8, 0xf, 0x6c2, 0xb2, 0x80000001, 0x6, 0xa7a7, 0xc0000000, 0x800, 0x80000000, 0x7cc, 0x1, 0x3, 0x6, 0x5, 0x6, 0x0, 0xc3, 0x7fff, 0x800, 0x2, 0x5, 0x6, 0x8, 0xffffffff, 0x9, 0x0, 0xddb7, 0x3ff, 0x7fff, 0x200, 0x1, 0x81, 0x1, 0x100, 0x4, 0x401, 0x6, 0xd, 0x3ff, 0x3ff, 0x58a, 0x5, 0x53d1, 0x0, 0x8, 0x8, 0x2, 0x4, 0x5, 0x69a, 0x5, 0x3, 0x7, 0x200, 0xfffffff2, 0x0, 0x1, 0x8, 0x0, 0x200, 0x3, 0x7, 0x5, 0x0, 0x0, 0x10000, 0x3, 0x2, 0x81ce, 0x80000001, 0xfffffffa, 0xf, 0x0, 0x40, 0x5, 0xa, 0x7, 0x7, 0xfee, 0x2, 0xeec7, 0x40000000, 0xc6, 0x6d2, 0x9, 0x9, 0x6, 0x5, 0xa, 0x9, 0x3, 0x0, 0x7, 0x3, 0xffffffff, 0x0, 0xfffffffd, 0x7, 0x0, 0x2, 0x58, 0x8, 0x0, 0x753, 0x10000, 0x3, 0x8, 0x2, 0xb5, 0xffffffff, 0x8ec1, 0x9, 0x8001, 0x6, 0x1e, 0x8001, 0x7fffffff, 0x5, 0x2, 0x7d4, 0x400, 0xffff, 0x100, 0x800, 0xe, 0x26f4c879, 0x5, 0x6, 0x5, 0x894, 0x7, 0x6, 0xb, 0x764, 0x5c8a, 0xe0, 0x401, 0x81, 0xffffffff, 0x2, 0xf, 0xe8, 0x6, 0x0, 0x400, 0x9, 0xe, 0xfffffffd, 0xe73, 0x5, 0x1, 0x6, 0x8, 0x3, 0x454a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x0, 0x1, 0xf, 0x2466aaee}, {0xfff, 0x0, 0xf, 0x2}, {0x1, 0xf8, 0xc, 0x1}, {0x3, 0x3, 0xf7, 0x1ff}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_ACT={0xd0, 0x1, [@m_csum={0xcc, 0x17, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x3, 0x1, 0x1f9}, 0xf}}]}, {0x82, 0x6, "1cc777346f4a77963fca8ddd5c7925d3a3015c0c2d696c10910df00601ff73b0c64196c8b3a8ca7ee74edaae58bd0cfbfd7d43d61ac2de0ab0b819fad9a2567126484124b7d3305b1504f77ad91d0b0ce7f34230cf89ebde83700f0275fac58f53e84df07a81ca1d4cbb1f075e4a265a402b23c904584a7f4cb44c4fbcd6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x3}}]}}]}, 0xa24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r3 = syz_open_dev$vcsu(&(0x7f0000000180), 0x4, 0x10040) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r0}) recvmmsg(r1, &(0x7f0000003bc0)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)}, {&(0x7f0000003d00)=""/4095, 0xfff}, {&(0x7f0000000c40)=""/193, 0xc1}], 0x3, &(0x7f0000000f40)=""/214, 0xd6}, 0x101}, {{&(0x7f0000001040)=@can, 0x80, &(0x7f0000001200)=[{&(0x7f0000001100)=""/42, 0x2a}, {&(0x7f0000001140)=""/131, 0x83}], 0x2, &(0x7f0000001240)=""/19, 0x13}, 0x800}, {{&(0x7f0000001280)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001300)=""/166, 0xa6}, {&(0x7f00000013c0)=""/244, 0xf4}, {&(0x7f00000014c0)=""/80, 0x50}, {&(0x7f0000001540)=""/114, 0x72}, {&(0x7f00000015c0)=""/73, 0x49}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000001640)=""/218, 0xda}, {&(0x7f0000001740)=""/48, 0x30}], 0x8, &(0x7f0000000980)=""/107, 0x6b}, 0x1}, {{&(0x7f0000002980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000002a00)=""/158, 0x9e}, {&(0x7f0000002ac0)=""/221, 0xdd}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x3}, 0x8}], 0x4, 0x40002003, &(0x7f0000003cc0)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x1, 0x3}, 0x2}, 0x18) (async) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0xa24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x16}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x9e8, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x8a8, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6b70, 0x101, 0x253, 0x400, 0x3, 0x3, 0x8, 0xff, 0xc15b, 0x80000001, 0x0, 0x8, 0x0, 0x2, 0x6, 0x40, 0x10, 0x401, 0x5, 0x200007, 0x10001, 0x48, 0xfffffe00, 0x7ff, 0x8000, 0x1, 0x80000000, 0x3, 0x8, 0x5, 0xef, 0xfffffff7, 0x5, 0x3, 0xa, 0x1ff, 0x1, 0x7, 0xa60, 0x4, 0x9, 0x9, 0x81, 0x2, 0x5, 0xd4, 0x4, 0x81, 0x7, 0xfa, 0x5, 0x3, 0x8, 0xce7f5e7, 0xec, 0x8000, 0x2, 0x4, 0x3f, 0x4, 0x1, 0x8, 0x4, 0xb, 0x6, 0x9, 0x3, 0x9, 0x4, 0x200, 0xab, 0x2, 0x8, 0xf, 0x9, 0x8, 0x1, 0x0, 0x8, 0x64ce, 0x6, 0x401, 0x13b, 0x80, 0xfffffffa, 0x8, 0xbb2d09a, 0x80000000, 0x2, 0xf, 0x6, 0x3dc, 0x22, 0x7, 0x9158, 0xd84, 0x15d, 0x1, 0x5, 0x0, 0x9, 0x8, 0x4, 0x8, 0x408, 0x2, 0x8, 0x52, 0x40, 0x8490, 0x2, 0xfe, 0x101, 0x4, 0x8000, 0x34a71484, 0x7, 0x2, 0x7fff, 0x1, 0x0, 0x3f, 0x1000, 0x3, 0x6, 0x6, 0x0, 0x1, 0x1, 0x4411dd87, 0x2172, 0x6, 0x5f2f40e7, 0x5, 0x3, 0x800, 0x7, 0x4, 0x8, 0x7, 0x646ddddc, 0x1, 0x0, 0x1, 0x6, 0x7, 0x6, 0x6, 0x10001, 0x4, 0x1, 0xd, 0x0, 0xe48, 0x8001, 0x7, 0xfffffffe, 0x4, 0x9, 0xded2, 0x3, 0x9, 0xffffffff, 0x8, 0x200, 0x4, 0x4, 0x40, 0x5, 0x39edd6c0, 0x6, 0x3, 0x5, 0x5, 0xfffff5c6, 0x4, 0x9, 0x200, 0x3ff, 0x4, 0x1, 0x342, 0x1, 0x5, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0xb7, 0x5, 0xd, 0x0, 0xf3f, 0x1, 0x5338, 0x401, 0x1, 0x2e, 0x1ff, 0x7, 0x4, 0xfffffffd, 0x7fff, 0x6, 0x81, 0x80, 0x200, 0x101, 0x1000, 0xfffffffc, 0x1, 0x3, 0x8, 0x8, 0x7fc, 0x8, 0x3, 0x7, 0x8, 0x7, 0x40, 0x3, 0xffffffff, 0xffffffff, 0x8, 0xe, 0x100, 0x5, 0xc, 0x2, 0x6e96914f, 0x7, 0x5, 0x1, 0x80000000, 0x1, 0x9, 0x7, 0x4, 0xe, 0x1, 0x4, 0xffff8001, 0x5, 0x10000, 0x4, 0xffff, 0x9, 0x8, 0xb3, 0x101, 0x5, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4800, 0x7, 0x1, 0x9ba, 0x0, {0x6, 0x1, 0x8, 0x100, 0x504, 0x100003}, {0x5, 0x0, 0x2, 0x3, 0xe, 0x7fc}, 0x2393, 0x3, 0x1ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xffffffdb, 0xfffffff7, 0x4, {0x8, 0x3, 0x9, 0xe, 0x2f7d, 0x8}, {0x2, 0x2, 0x3, 0xb77, 0x3, 0x9}, 0x3, 0xe, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffff7f, 0x7, 0x2dc, 0x9, 0x8001, 0xfffffff9, 0x291, 0x3, 0x5, 0x3, 0x8001, 0x4a49, 0xfffffff6, 0x1, 0x4, 0x4, 0x6ca, 0x7, 0x7, 0xb, 0x8, 0xc, 0xffffff7f, 0x8000, 0x811, 0x2000005, 0x3, 0x2, 0xff, 0xff, 0x1c, 0x2, 0x7, 0x2, 0x5, 0x0, 0x6af7, 0x10, 0x4, 0x400, 0x1, 0x6, 0x401, 0x5, 0x4, 0x7fff, 0xeb9, 0xdac, 0x8, 0x80, 0xf7, 0x7, 0x4, 0xfffffffa, 0x9, 0x4, 0x4, 0x7, 0x8000, 0x4, 0x10, 0x8, 0x4, 0x8, 0xe, 0x1, 0x10000, 0xe, 0xd0ee, 0x0, 0xffffff32, 0x2, 0xffffffff, 0xbd6, 0xfffffff8, 0xffff0001, 0x0, 0x2, 0xfffff6c2, 0x8, 0x1, 0x9, 0x5, 0x6, 0x8, 0x5, 0x3, 0x1, 0x5, 0x4, 0x6, 0x6, 0x2, 0x81, 0x8, 0x5, 0x8, 0x1, 0x8, 0xf, 0x6c2, 0xb2, 0x80000001, 0x6, 0xa7a7, 0xc0000000, 0x800, 0x80000000, 0x7cc, 0x1, 0x3, 0x6, 0x5, 0x6, 0x0, 0xc3, 0x7fff, 0x800, 0x2, 0x5, 0x6, 0x8, 0xffffffff, 0x9, 0x0, 0xddb7, 0x3ff, 0x7fff, 0x200, 0x1, 0x81, 0x1, 0x100, 0x4, 0x401, 0x6, 0xd, 0x3ff, 0x3ff, 0x58a, 0x5, 0x53d1, 0x0, 0x8, 0x8, 0x2, 0x4, 0x5, 0x69a, 0x5, 0x3, 0x7, 0x200, 0xfffffff2, 0x0, 0x1, 0x8, 0x0, 0x200, 0x3, 0x7, 0x5, 0x0, 0x0, 0x10000, 0x3, 0x2, 0x81ce, 0x80000001, 0xfffffffa, 0xf, 0x0, 0x40, 0x5, 0xa, 0x7, 0x7, 0xfee, 0x2, 0xeec7, 0x40000000, 0xc6, 0x6d2, 0x9, 0x9, 0x6, 0x5, 0xa, 0x9, 0x3, 0x0, 0x7, 0x3, 0xffffffff, 0x0, 0xfffffffd, 0x7, 0x0, 0x2, 0x58, 0x8, 0x0, 0x753, 0x10000, 0x3, 0x8, 0x2, 0xb5, 0xffffffff, 0x8ec1, 0x9, 0x8001, 0x6, 0x1e, 0x8001, 0x7fffffff, 0x5, 0x2, 0x7d4, 0x400, 0xffff, 0x100, 0x800, 0xe, 0x26f4c879, 0x5, 0x6, 0x5, 0x894, 0x7, 0x6, 0xb, 0x764, 0x5c8a, 0xe0, 0x401, 0x81, 0xffffffff, 0x2, 0xf, 0xe8, 0x6, 0x0, 0x400, 0x9, 0xe, 0xfffffffd, 0xe73, 0x5, 0x1, 0x6, 0x8, 0x3, 0x454a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x0, 0x1, 0xf, 0x2466aaee}, {0xfff, 0x0, 0xf, 0x2}, {0x1, 0xf8, 0xc, 0x1}, {0x3, 0x3, 0xf7, 0x1ff}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_ACT={0xd0, 0x1, [@m_csum={0xcc, 0x17, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x3, 0x1, 0x1f9}, 0xf}}]}, {0x82, 0x6, "1cc777346f4a77963fca8ddd5c7925d3a3015c0c2d696c10910df00601ff73b0c64196c8b3a8ca7ee74edaae58bd0cfbfd7d43d61ac2de0ab0b819fad9a2567126484124b7d3305b1504f77ad91d0b0ce7f34230cf89ebde83700f0275fac58f53e84df07a81ca1d4cbb1f075e4a265a402b23c904584a7f4cb44c4fbcd6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x3}}]}}]}, 0xa24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) syz_open_dev$vcsu(&(0x7f0000000180), 0x4, 0x10040) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r0}) (async) recvmmsg(r1, &(0x7f0000003bc0)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)}, {&(0x7f0000003d00)=""/4095, 0xfff}, {&(0x7f0000000c40)=""/193, 0xc1}], 0x3, &(0x7f0000000f40)=""/214, 0xd6}, 0x101}, {{&(0x7f0000001040)=@can, 0x80, &(0x7f0000001200)=[{&(0x7f0000001100)=""/42, 0x2a}, {&(0x7f0000001140)=""/131, 0x83}], 0x2, &(0x7f0000001240)=""/19, 0x13}, 0x800}, {{&(0x7f0000001280)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001300)=""/166, 0xa6}, {&(0x7f00000013c0)=""/244, 0xf4}, {&(0x7f00000014c0)=""/80, 0x50}, {&(0x7f0000001540)=""/114, 0x72}, {&(0x7f00000015c0)=""/73, 0x49}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000001640)=""/218, 0xda}, {&(0x7f0000001740)=""/48, 0x30}], 0x8, &(0x7f0000000980)=""/107, 0x6b}, 0x1}, {{&(0x7f0000002980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000002a00)=""/158, 0x9e}, {&(0x7f0000002ac0)=""/221, 0xdd}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x3}, 0x8}], 0x4, 0x40002003, &(0x7f0000003cc0)) (async) 1m23.072064512s ago: executing program 34 (id=2588): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x1, 0x3}, 0x2}, 0x18) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0xa24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x16}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x9e8, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x8a8, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6b70, 0x101, 0x253, 0x400, 0x3, 0x3, 0x8, 0xff, 0xc15b, 0x80000001, 0x0, 0x8, 0x0, 0x2, 0x6, 0x40, 0x10, 0x401, 0x5, 0x200007, 0x10001, 0x48, 0xfffffe00, 0x7ff, 0x8000, 0x1, 0x80000000, 0x3, 0x8, 0x5, 0xef, 0xfffffff7, 0x5, 0x3, 0xa, 0x1ff, 0x1, 0x7, 0xa60, 0x4, 0x9, 0x9, 0x81, 0x2, 0x5, 0xd4, 0x4, 0x81, 0x7, 0xfa, 0x5, 0x3, 0x8, 0xce7f5e7, 0xec, 0x8000, 0x2, 0x4, 0x3f, 0x4, 0x1, 0x8, 0x4, 0xb, 0x6, 0x9, 0x3, 0x9, 0x4, 0x200, 0xab, 0x2, 0x8, 0xf, 0x9, 0x8, 0x1, 0x0, 0x8, 0x64ce, 0x6, 0x401, 0x13b, 0x80, 0xfffffffa, 0x8, 0xbb2d09a, 0x80000000, 0x2, 0xf, 0x6, 0x3dc, 0x22, 0x7, 0x9158, 0xd84, 0x15d, 0x1, 0x5, 0x0, 0x9, 0x8, 0x4, 0x8, 0x408, 0x2, 0x8, 0x52, 0x40, 0x8490, 0x2, 0xfe, 0x101, 0x4, 0x8000, 0x34a71484, 0x7, 0x2, 0x7fff, 0x1, 0x0, 0x3f, 0x1000, 0x3, 0x6, 0x6, 0x0, 0x1, 0x1, 0x4411dd87, 0x2172, 0x6, 0x5f2f40e7, 0x5, 0x3, 0x800, 0x7, 0x4, 0x8, 0x7, 0x646ddddc, 0x1, 0x0, 0x1, 0x6, 0x7, 0x6, 0x6, 0x10001, 0x4, 0x1, 0xd, 0x0, 0xe48, 0x8001, 0x7, 0xfffffffe, 0x4, 0x9, 0xded2, 0x3, 0x9, 0xffffffff, 0x8, 0x200, 0x4, 0x4, 0x40, 0x5, 0x39edd6c0, 0x6, 0x3, 0x5, 0x5, 0xfffff5c6, 0x4, 0x9, 0x200, 0x3ff, 0x4, 0x1, 0x342, 0x1, 0x5, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0xb7, 0x5, 0xd, 0x0, 0xf3f, 0x1, 0x5338, 0x401, 0x1, 0x2e, 0x1ff, 0x7, 0x4, 0xfffffffd, 0x7fff, 0x6, 0x81, 0x80, 0x200, 0x101, 0x1000, 0xfffffffc, 0x1, 0x3, 0x8, 0x8, 0x7fc, 0x8, 0x3, 0x7, 0x8, 0x7, 0x40, 0x3, 0xffffffff, 0xffffffff, 0x8, 0xe, 0x100, 0x5, 0xc, 0x2, 0x6e96914f, 0x7, 0x5, 0x1, 0x80000000, 0x1, 0x9, 0x7, 0x4, 0xe, 0x1, 0x4, 0xffff8001, 0x5, 0x10000, 0x4, 0xffff, 0x9, 0x8, 0xb3, 0x101, 0x5, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4800, 0x7, 0x1, 0x9ba, 0x0, {0x6, 0x1, 0x8, 0x100, 0x504, 0x100003}, {0x5, 0x0, 0x2, 0x3, 0xe, 0x7fc}, 0x2393, 0x3, 0x1ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xffffffdb, 0xfffffff7, 0x4, {0x8, 0x3, 0x9, 0xe, 0x2f7d, 0x8}, {0x2, 0x2, 0x3, 0xb77, 0x3, 0x9}, 0x3, 0xe, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffff7f, 0x7, 0x2dc, 0x9, 0x8001, 0xfffffff9, 0x291, 0x3, 0x5, 0x3, 0x8001, 0x4a49, 0xfffffff6, 0x1, 0x4, 0x4, 0x6ca, 0x7, 0x7, 0xb, 0x8, 0xc, 0xffffff7f, 0x8000, 0x811, 0x2000005, 0x3, 0x2, 0xff, 0xff, 0x1c, 0x2, 0x7, 0x2, 0x5, 0x0, 0x6af7, 0x10, 0x4, 0x400, 0x1, 0x6, 0x401, 0x5, 0x4, 0x7fff, 0xeb9, 0xdac, 0x8, 0x80, 0xf7, 0x7, 0x4, 0xfffffffa, 0x9, 0x4, 0x4, 0x7, 0x8000, 0x4, 0x10, 0x8, 0x4, 0x8, 0xe, 0x1, 0x10000, 0xe, 0xd0ee, 0x0, 0xffffff32, 0x2, 0xffffffff, 0xbd6, 0xfffffff8, 0xffff0001, 0x0, 0x2, 0xfffff6c2, 0x8, 0x1, 0x9, 0x5, 0x6, 0x8, 0x5, 0x3, 0x1, 0x5, 0x4, 0x6, 0x6, 0x2, 0x81, 0x8, 0x5, 0x8, 0x1, 0x8, 0xf, 0x6c2, 0xb2, 0x80000001, 0x6, 0xa7a7, 0xc0000000, 0x800, 0x80000000, 0x7cc, 0x1, 0x3, 0x6, 0x5, 0x6, 0x0, 0xc3, 0x7fff, 0x800, 0x2, 0x5, 0x6, 0x8, 0xffffffff, 0x9, 0x0, 0xddb7, 0x3ff, 0x7fff, 0x200, 0x1, 0x81, 0x1, 0x100, 0x4, 0x401, 0x6, 0xd, 0x3ff, 0x3ff, 0x58a, 0x5, 0x53d1, 0x0, 0x8, 0x8, 0x2, 0x4, 0x5, 0x69a, 0x5, 0x3, 0x7, 0x200, 0xfffffff2, 0x0, 0x1, 0x8, 0x0, 0x200, 0x3, 0x7, 0x5, 0x0, 0x0, 0x10000, 0x3, 0x2, 0x81ce, 0x80000001, 0xfffffffa, 0xf, 0x0, 0x40, 0x5, 0xa, 0x7, 0x7, 0xfee, 0x2, 0xeec7, 0x40000000, 0xc6, 0x6d2, 0x9, 0x9, 0x6, 0x5, 0xa, 0x9, 0x3, 0x0, 0x7, 0x3, 0xffffffff, 0x0, 0xfffffffd, 0x7, 0x0, 0x2, 0x58, 0x8, 0x0, 0x753, 0x10000, 0x3, 0x8, 0x2, 0xb5, 0xffffffff, 0x8ec1, 0x9, 0x8001, 0x6, 0x1e, 0x8001, 0x7fffffff, 0x5, 0x2, 0x7d4, 0x400, 0xffff, 0x100, 0x800, 0xe, 0x26f4c879, 0x5, 0x6, 0x5, 0x894, 0x7, 0x6, 0xb, 0x764, 0x5c8a, 0xe0, 0x401, 0x81, 0xffffffff, 0x2, 0xf, 0xe8, 0x6, 0x0, 0x400, 0x9, 0xe, 0xfffffffd, 0xe73, 0x5, 0x1, 0x6, 0x8, 0x3, 0x454a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x0, 0x1, 0xf, 0x2466aaee}, {0xfff, 0x0, 0xf, 0x2}, {0x1, 0xf8, 0xc, 0x1}, {0x3, 0x3, 0xf7, 0x1ff}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_ACT={0xd0, 0x1, [@m_csum={0xcc, 0x17, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x3, 0x1, 0x1f9}, 0xf}}]}, {0x82, 0x6, "1cc777346f4a77963fca8ddd5c7925d3a3015c0c2d696c10910df00601ff73b0c64196c8b3a8ca7ee74edaae58bd0cfbfd7d43d61ac2de0ab0b819fad9a2567126484124b7d3305b1504f77ad91d0b0ce7f34230cf89ebde83700f0275fac58f53e84df07a81ca1d4cbb1f075e4a265a402b23c904584a7f4cb44c4fbcd6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x3}}]}}]}, 0xa24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) r3 = syz_open_dev$vcsu(&(0x7f0000000180), 0x4, 0x10040) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r0}) recvmmsg(r1, &(0x7f0000003bc0)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)}, {&(0x7f0000003d00)=""/4095, 0xfff}, {&(0x7f0000000c40)=""/193, 0xc1}], 0x3, &(0x7f0000000f40)=""/214, 0xd6}, 0x101}, {{&(0x7f0000001040)=@can, 0x80, &(0x7f0000001200)=[{&(0x7f0000001100)=""/42, 0x2a}, {&(0x7f0000001140)=""/131, 0x83}], 0x2, &(0x7f0000001240)=""/19, 0x13}, 0x800}, {{&(0x7f0000001280)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001300)=""/166, 0xa6}, {&(0x7f00000013c0)=""/244, 0xf4}, {&(0x7f00000014c0)=""/80, 0x50}, {&(0x7f0000001540)=""/114, 0x72}, {&(0x7f00000015c0)=""/73, 0x49}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000001640)=""/218, 0xda}, {&(0x7f0000001740)=""/48, 0x30}], 0x8, &(0x7f0000000980)=""/107, 0x6b}, 0x1}, {{&(0x7f0000002980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000002a00)=""/158, 0x9e}, {&(0x7f0000002ac0)=""/221, 0xdd}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x3}, 0x8}], 0x4, 0x40002003, &(0x7f0000003cc0)) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0x1, 0x3}, 0x2}, 0x18) (async) connect$can_j1939(r1, &(0x7f00000010c0)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfe}, 0x18) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0xa24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x16}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_bpf={{0x8}, {0x9e8, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}, @TCA_BPF_POLICE={0x8a8, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x6b70, 0x101, 0x253, 0x400, 0x3, 0x3, 0x8, 0xff, 0xc15b, 0x80000001, 0x0, 0x8, 0x0, 0x2, 0x6, 0x40, 0x10, 0x401, 0x5, 0x200007, 0x10001, 0x48, 0xfffffe00, 0x7ff, 0x8000, 0x1, 0x80000000, 0x3, 0x8, 0x5, 0xef, 0xfffffff7, 0x5, 0x3, 0xa, 0x1ff, 0x1, 0x7, 0xa60, 0x4, 0x9, 0x9, 0x81, 0x2, 0x5, 0xd4, 0x4, 0x81, 0x7, 0xfa, 0x5, 0x3, 0x8, 0xce7f5e7, 0xec, 0x8000, 0x2, 0x4, 0x3f, 0x4, 0x1, 0x8, 0x4, 0xb, 0x6, 0x9, 0x3, 0x9, 0x4, 0x200, 0xab, 0x2, 0x8, 0xf, 0x9, 0x8, 0x1, 0x0, 0x8, 0x64ce, 0x6, 0x401, 0x13b, 0x80, 0xfffffffa, 0x8, 0xbb2d09a, 0x80000000, 0x2, 0xf, 0x6, 0x3dc, 0x22, 0x7, 0x9158, 0xd84, 0x15d, 0x1, 0x5, 0x0, 0x9, 0x8, 0x4, 0x8, 0x408, 0x2, 0x8, 0x52, 0x40, 0x8490, 0x2, 0xfe, 0x101, 0x4, 0x8000, 0x34a71484, 0x7, 0x2, 0x7fff, 0x1, 0x0, 0x3f, 0x1000, 0x3, 0x6, 0x6, 0x0, 0x1, 0x1, 0x4411dd87, 0x2172, 0x6, 0x5f2f40e7, 0x5, 0x3, 0x800, 0x7, 0x4, 0x8, 0x7, 0x646ddddc, 0x1, 0x0, 0x1, 0x6, 0x7, 0x6, 0x6, 0x10001, 0x4, 0x1, 0xd, 0x0, 0xe48, 0x8001, 0x7, 0xfffffffe, 0x4, 0x9, 0xded2, 0x3, 0x9, 0xffffffff, 0x8, 0x200, 0x4, 0x4, 0x40, 0x5, 0x39edd6c0, 0x6, 0x3, 0x5, 0x5, 0xfffff5c6, 0x4, 0x9, 0x200, 0x3ff, 0x4, 0x1, 0x342, 0x1, 0x5, 0x8, 0x2, 0x0, 0xffffffff, 0x0, 0xb7, 0x5, 0xd, 0x0, 0xf3f, 0x1, 0x5338, 0x401, 0x1, 0x2e, 0x1ff, 0x7, 0x4, 0xfffffffd, 0x7fff, 0x6, 0x81, 0x80, 0x200, 0x101, 0x1000, 0xfffffffc, 0x1, 0x3, 0x8, 0x8, 0x7fc, 0x8, 0x3, 0x7, 0x8, 0x7, 0x40, 0x3, 0xffffffff, 0xffffffff, 0x8, 0xe, 0x100, 0x5, 0xc, 0x2, 0x6e96914f, 0x7, 0x5, 0x1, 0x80000000, 0x1, 0x9, 0x7, 0x4, 0xe, 0x1, 0x4, 0xffff8001, 0x5, 0x10000, 0x4, 0xffff, 0x9, 0x8, 0xb3, 0x101, 0x5, 0x4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4800, 0x7, 0x1, 0x9ba, 0x0, {0x6, 0x1, 0x8, 0x100, 0x504, 0x100003}, {0x5, 0x0, 0x2, 0x3, 0xe, 0x7fc}, 0x2393, 0x3, 0x1ff}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0xffffffdb, 0xfffffff7, 0x4, {0x8, 0x3, 0x9, 0xe, 0x2f7d, 0x8}, {0x2, 0x2, 0x3, 0xb77, 0x3, 0x9}, 0x3, 0xe, 0x9}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0xffffff7f, 0x7, 0x2dc, 0x9, 0x8001, 0xfffffff9, 0x291, 0x3, 0x5, 0x3, 0x8001, 0x4a49, 0xfffffff6, 0x1, 0x4, 0x4, 0x6ca, 0x7, 0x7, 0xb, 0x8, 0xc, 0xffffff7f, 0x8000, 0x811, 0x2000005, 0x3, 0x2, 0xff, 0xff, 0x1c, 0x2, 0x7, 0x2, 0x5, 0x0, 0x6af7, 0x10, 0x4, 0x400, 0x1, 0x6, 0x401, 0x5, 0x4, 0x7fff, 0xeb9, 0xdac, 0x8, 0x80, 0xf7, 0x7, 0x4, 0xfffffffa, 0x9, 0x4, 0x4, 0x7, 0x8000, 0x4, 0x10, 0x8, 0x4, 0x8, 0xe, 0x1, 0x10000, 0xe, 0xd0ee, 0x0, 0xffffff32, 0x2, 0xffffffff, 0xbd6, 0xfffffff8, 0xffff0001, 0x0, 0x2, 0xfffff6c2, 0x8, 0x1, 0x9, 0x5, 0x6, 0x8, 0x5, 0x3, 0x1, 0x5, 0x4, 0x6, 0x6, 0x2, 0x81, 0x8, 0x5, 0x8, 0x1, 0x8, 0xf, 0x6c2, 0xb2, 0x80000001, 0x6, 0xa7a7, 0xc0000000, 0x800, 0x80000000, 0x7cc, 0x1, 0x3, 0x6, 0x5, 0x6, 0x0, 0xc3, 0x7fff, 0x800, 0x2, 0x5, 0x6, 0x8, 0xffffffff, 0x9, 0x0, 0xddb7, 0x3ff, 0x7fff, 0x200, 0x1, 0x81, 0x1, 0x100, 0x4, 0x401, 0x6, 0xd, 0x3ff, 0x3ff, 0x58a, 0x5, 0x53d1, 0x0, 0x8, 0x8, 0x2, 0x4, 0x5, 0x69a, 0x5, 0x3, 0x7, 0x200, 0xfffffff2, 0x0, 0x1, 0x8, 0x0, 0x200, 0x3, 0x7, 0x5, 0x0, 0x0, 0x10000, 0x3, 0x2, 0x81ce, 0x80000001, 0xfffffffa, 0xf, 0x0, 0x40, 0x5, 0xa, 0x7, 0x7, 0xfee, 0x2, 0xeec7, 0x40000000, 0xc6, 0x6d2, 0x9, 0x9, 0x6, 0x5, 0xa, 0x9, 0x3, 0x0, 0x7, 0x3, 0xffffffff, 0x0, 0xfffffffd, 0x7, 0x0, 0x2, 0x58, 0x8, 0x0, 0x753, 0x10000, 0x3, 0x8, 0x2, 0xb5, 0xffffffff, 0x8ec1, 0x9, 0x8001, 0x6, 0x1e, 0x8001, 0x7fffffff, 0x5, 0x2, 0x7d4, 0x400, 0xffff, 0x100, 0x800, 0xe, 0x26f4c879, 0x5, 0x6, 0x5, 0x894, 0x7, 0x6, 0xb, 0x764, 0x5c8a, 0xe0, 0x401, 0x81, 0xffffffff, 0x2, 0xf, 0xe8, 0x6, 0x0, 0x400, 0x9, 0xe, 0xfffffffd, 0xe73, 0x5, 0x1, 0x6, 0x8, 0x3, 0x454a]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}]}, @TCA_BPF_OPS={{0x6, 0x4, 0x4}, {0x24, 0x5, [{0x0, 0x1, 0xf, 0x2466aaee}, {0xfff, 0x0, 0xf, 0x2}, {0x1, 0xf8, 0xc, 0x1}, {0x3, 0x3, 0xf7, 0x1ff}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_ACT={0xd0, 0x1, [@m_csum={0xcc, 0x17, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x7, 0x3, 0x1, 0x1f9}, 0xf}}]}, {0x82, 0x6, "1cc777346f4a77963fca8ddd5c7925d3a3015c0c2d696c10910df00601ff73b0c64196c8b3a8ca7ee74edaae58bd0cfbfd7d43d61ac2de0ab0b819fad9a2567126484124b7d3305b1504f77ad91d0b0ce7f34230cf89ebde83700f0275fac58f53e84df07a81ca1d4cbb1f075e4a265a402b23c904584a7f4cb44c4fbcd6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x3}}]}}]}, 0xa24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) syz_open_dev$vcsu(&(0x7f0000000180), 0x4, 0x10040) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000001c0)={r0}) (async) recvmmsg(r1, &(0x7f0000003bc0)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000c00)}, {&(0x7f0000003d00)=""/4095, 0xfff}, {&(0x7f0000000c40)=""/193, 0xc1}], 0x3, &(0x7f0000000f40)=""/214, 0xd6}, 0x101}, {{&(0x7f0000001040)=@can, 0x80, &(0x7f0000001200)=[{&(0x7f0000001100)=""/42, 0x2a}, {&(0x7f0000001140)=""/131, 0x83}], 0x2, &(0x7f0000001240)=""/19, 0x13}, 0x800}, {{&(0x7f0000001280)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000002880)=[{&(0x7f0000001300)=""/166, 0xa6}, {&(0x7f00000013c0)=""/244, 0xf4}, {&(0x7f00000014c0)=""/80, 0x50}, {&(0x7f0000001540)=""/114, 0x72}, {&(0x7f00000015c0)=""/73, 0x49}, {&(0x7f0000001880)=""/4096, 0x1000}, {&(0x7f0000001640)=""/218, 0xda}, {&(0x7f0000001740)=""/48, 0x30}], 0x8, &(0x7f0000000980)=""/107, 0x6b}, 0x1}, {{&(0x7f0000002980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001780)=[{&(0x7f0000002a00)=""/158, 0x9e}, {&(0x7f0000002ac0)=""/221, 0xdd}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x3}, 0x8}], 0x4, 0x40002003, &(0x7f0000003cc0)) (async) 45.77907619s ago: executing program 3 (id=3640): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xce, &(0x7f0000000280)={0x0, 0x8b48, 0x20000, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 45.755615631s ago: executing program 3 (id=3641): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x62042, 0x113) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_setup(0x409, &(0x7f0000000600)=0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x6, &(0x7f0000000580)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r7, &(0x7f0000000100)="b26a0ed33ca9666b168b9681c5a7a7e2e1c8d721d52a6e9daa5141799eaca485e83332fbd3c931abb17b17221067565d0e6a8a40e8", 0x35, 0x13f2}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x8001, r8, &(0x7f0000000240)="6faa25da0e49", 0x6, 0xff, 0x0, 0x2, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x1, r6, &(0x7f0000000300)="45b96878fb73a95f", 0x8, 0x3}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r6, &(0x7f0000000380)="bc88caacd1bc3b40c967a449fffd52dd1650d225829e3e8e4837967881a0c483a9e1a66a57d7a505ede92ba4c6e0aa8b6435e2a3c7689ccc1f9a2d2f180f989a510856708bfe62654e8c38b6c7c50d8bf472ea5c525239246e2156c57b1a75f91b776ff8f3ac79ff4a16bc80991b2a4aab5ccc06662fafefd819ebf4187478e07930a4f7d81587d7712d92922da660ee90e9beda5b9678c64108e26d107f54e4d537e74a79c2a5942b2319f0f1d27d352f25a04d1b893516ad972e3c65ab8788627ca5de99d98eeb5c67772302054eff44791a1bf0aef5f4cc69bd673cfb9e634f7a61", 0xe3, 0x6, 0x0, 0x2, r6}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0xffff, r4, &(0x7f00000004c0)="aac88c4232b69b21b78a1adf80500c51e3333627877ef9e6289d7f226963ab0f1bd326518d8b752ce294c7d726ae18f2dc37064eb2c22b2b", 0x38, 0x77c, 0x0, 0x2, r0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x7, r0, &(0x7f00000007c0)="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", 0xfd, 0x6, 0x0, 0x3, r6}]) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3={0x300008c}, 0x18, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) io_submit(r10, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) shutdown(r9, 0x0) 45.631669912s ago: executing program 3 (id=3644): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x3000000, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 45.523140774s ago: executing program 3 (id=3646): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1900) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@const={0x0, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x5f, 0x61]}}, &(0x7f0000000480)=""/196, 0x28, 0xc4, 0x1, 0x3ff, 0x0, @void, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0x1ff, 0x7, 0x800, r0, 0x81, '\x00', 0x0, r1, 0x0, 0x4, 0x1, 0xa, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 45.458682865s ago: executing program 3 (id=3649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x0, 0x400, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x24, &(0x7f0000000000)=0xd, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000240)={[0xfffffffe]}, 0x8) read(r6, &(0x7f0000000740)=""/384, 0x200008ca) write$tun(r6, &(0x7f0000000040)=ANY=[], 0xfdef) 45.299980708s ago: executing program 3 (id=3654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) syslog(0x3, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x108) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$TUNSETOWNER(r1, 0x801054db, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r5 = dup(r4) r6 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setuid(0xee01) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r12, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x400000000}) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x6}, 0x8) 45.237153839s ago: executing program 35 (id=3654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) syslog(0x3, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x108) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r1, 0x400454c9, 0x1) ioctl$TUNSETOWNER(r1, 0x801054db, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r5 = dup(r4) r6 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r5, r6, 0x0, 0x8000fffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setuid(0xee01) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r11, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r12, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x0, 0x400000000}) setresuid(0x0, 0xee00, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001, 0x6}, 0x8) 2.350126663s ago: executing program 6 (id=4523): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r3}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) 2.339395313s ago: executing program 8 (id=4524): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x238, r3, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x1e0, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x5, 0x6, 0x1, 0x400, 0xb, 0x0, 0x7f]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x0, 0x1, 0xb, 0x30, 0x2]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x5, 0x48, 0xb, 0x1b, 0x2, 0x5, 0x9, 0x0, 0x24, 0x12]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x3, 0x1}, {0x4, 0x3}, {0x1}, {0x1, 0x7}, {0x7, 0x5}, {0x6, 0x8}, {0x3, 0xa}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x4}, {0x6, 0x2}, {0x6}, {0x5, 0x8}, {0x4, 0x2}, {0x3, 0x3}, {0x1, 0xa}, {0x2, 0x9}, {0x2, 0x9}, {0x5, 0x5}, {0x1}, {0x5, 0xa}, {0x3, 0xa}, {0x1, 0x7}, {0x5, 0x6}, {0x5, 0x1}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x5, 0x4}, {0x6, 0x2}, {0x2, 0x9}, {0x2, 0x8}, {0x2, 0x4}, {0x3, 0x6}, {0x4, 0x4}, {0x3, 0x2}, {0x1, 0x5}, {0x6, 0x9}, {0x7, 0x6}, {0x2, 0x8}, {0x3, 0x7}, {0x2, 0x6}, {0x2}, {0x4}, {0x1, 0xa}, {0x6, 0x9}, {0x4, 0x7}, {0x1, 0x8}, {0x3, 0xa}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x4}, {0x5, 0xa}, {0x2}, {0x3, 0x3}, {0x0, 0xa}, {0x3, 0x8}, {0x7, 0x9}, {0x5, 0x1}, {0x6, 0x9}, {0x2, 0x9}, {0x1}, {0x0, 0x8}, {0x4, 0x6}, {0x4, 0x3}, {0x1, 0xa}, {0x7, 0x1}, {0x5, 0x6}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x1}, {0x5}, {0x3, 0x6}, {0x5, 0x6}, {0x6, 0x2}, {0x7, 0x9}, {0x1, 0x1}, {0x6, 0x1}, {0x7, 0x5}, {0x2, 0x9}, {0x1, 0x4}, {0x5, 0x6}, {0x7, 0x4}, {0x5, 0x7}, {0x6, 0x2}, {0x2, 0x9}, {0x0, 0x3}, {0x0, 0x2}]}]}, @NL80211_BAND_60GHZ={0xe0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x4}, {0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0x1}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x5}, {0x3, 0x9}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x9}, {0x7, 0xa}, {0x1, 0xa}, {0x5, 0x3}, {0x0, 0x1}, {0x7, 0xa}, {0x1, 0x6}, {0x3, 0x2}, {0x0, 0x7}, {0x6, 0x1}, {0x1, 0x6}, {}, {0x6, 0x8}, {0x5, 0x3}, {0x6, 0x8}, {0x3, 0x2}, {0x2, 0x5}, {}, {0x2, 0xa}, {0x7, 0x8}, {0x0, 0x5}, {0x7, 0x7}, {0x7, 0x5}, {0x1, 0xa}, {0x3, 0x5}, {0x6, 0x7}, {0x3, 0x3}, {0x2, 0x4}, {0x4, 0xa}, {0x3, 0xa}, {0x3}, {0x5, 0x4}, {0x2, 0x2}, {0x4, 0x4}, {0x0, 0x7}, {0x2, 0x3}, {0x5, 0x7}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x6, 0xa}, {0x2, 0xa}, {0x0, 0x3}, {0x2, 0x8}, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x5, 0x2}, {0x4, 0x1}, {0x0, 0x5}, {0x0, 0x6}, {0x4, 0x5}, {0x2}, {0x3, 0x2}, {0x6, 0x9}, {0x0, 0x4}, {0x0, 0x2}, {0x5, 0x2}, {0x5, 0x6}, {0x1, 0xa}, {0x3, 0xf}, {0x5, 0xa}, {0x0, 0x2}, {0x7, 0x2}, {0x2, 0x3}, {0x0, 0x4}, {0x2, 0x3}, {0x6, 0x4}, {0x5, 0x7}, {0x0, 0x1}, {0x4, 0x8}, {0x4, 0x3}, {0x2, 0x2}, {0x4, 0x7}, {0x4}, {0x6, 0x9}, {0x5, 0x7}, {0x0, 0xa}, {0x7, 0xa}, {0x6, 0x2}, {0x1, 0x5}, {0x6, 0x7}, {0x0, 0x5}, {0x1, 0x3}, {0x3, 0x5}, {0x2, 0xa}, {0x0, 0x3}, {0x5}, {0x1, 0x7}, {0x0, 0x3}, {0x1, 0x7}, {0x7, 0x3}, {0x6, 0x5}, {0x4, 0x8}, {0x0, 0x3}, {0x0, 0x1}, {0x6, 0x5}, {}, {0x5, 0x8}, {0x5}, {0x7, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfffc, 0x7fff, 0xff, 0x4, 0xf, 0x5, 0x4]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb3, 0x3, 0x2, 0x6, 0x2, 0x1, 0x8, 0x80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0x5, 0x18, 0xcace4da45267ee9a, 0x48, 0x5, 0x60, 0x48, 0x12, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x6, 0x4, 0x8, 0x0, 0x6e0, 0x2, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x4, 0x81, 0x7, 0xffff, 0x0, 0x1]}}]}]}, @NL80211_ATTR_MESH_SETUP={0x10, 0x70, [@NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_SETUP={0x28, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5, 0x6, 0x1}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xfd}, @NL80211_MESH_SETUP_ENABLE_VENDOR_SYNC={0x5}]}]}, 0x238}, 0x1, 0x0, 0x0, 0x4040885}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000008c0)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4020) 2.218983655s ago: executing program 8 (id=4525): r0 = open(&(0x7f00000001c0)='./file0\x00', 0x410100, 0x10c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) rt_tgsigqueueinfo(0x0, 0x0, 0x2f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x4}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x3, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x5}, 0x0, 0x6, 0xd4, 0x1, 0x2000, 0x0, 0xfffe, 0x0, 0x3}, 0x0, 0xc, 0xffffffffffffffff, 0x0) epoll_create(0xffffffff) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xeb46, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) listen(r4, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x208}, 0x1, 0x0, 0x0, 0x800}, 0x800) r7 = socket$inet6(0xa, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000300)=@sack_info={0x0, 0xffffffff, 0x9}, &(0x7f0000000340)=0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r8, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x89780e, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0, 0x70a, &(0x7f00000232c0)="$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") r9 = openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x0) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r10, 0x11c, 0x2, 0x0, 0x0) getdents(r9, &(0x7f0000000380)=""/107, 0x6b) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x0) 2.023104638s ago: executing program 8 (id=4528): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004008faf5585e0e5f10a00000000000089e9e95591f77842c23b9d87bbacb335b6cd14805245ea783ca07fa617a6605c136e9da86ae34afcfb1de177625576c11473c4fe8074988e6c30f51a03f381ff0097505c022d449f10c1b3359d3f48babaacef69fa73d61690736f13811e612b6ecf22a546e72824dc1c0d55998caed5b045ed7b7a6bed3200002f72d81e83887df4d139322d25f58fa96b8f924d4d06b91f1dc5148c7984cfcba9cebd32f062c2c3f619cf6fb4f770c86af81182cd8614d2c197a24acde61c092c19864f4e46", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) timer_create(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x24) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.845416861s ago: executing program 8 (id=4530): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYRES64=r1], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4000006}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108283, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xbd4, 0xffffffffffffffff, 0x4}, 0x38) 1.571032475s ago: executing program 6 (id=4532): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/193) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) write$cgroup_subtree(r1, &(0x7f0000000a00)={[{0x2d, 'freezer'}, {0x2d, 'cpuacct'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2d, 'net'}, {0x2b, 'blkio'}, {0x2b, 'cpuacct'}]}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x3, 0x2, 0x3, 0x0, 0x8, 0x8}, 0x20) r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000480)={0xff, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r1, 0x20, &(0x7f0000000980)={&(0x7f0000000880)=""/24, 0x18, 0x0, &(0x7f00000008c0)=""/178, 0xb2}}, 0x10) open$dir(&(0x7f0000000540)='./file0\x00', 0x71a753a09e387c33, 0x2) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000007c0)={'filter\x00', 0x0, 0x4, 0x3f, [0xd, 0xb, 0xff, 0x9c, 0x1, 0x7fffffffffffffff], 0x5, &(0x7f0000000740)=[{}, {}, {}, {}, {}], &(0x7f0000000640)=""/63}, &(0x7f0000000840)=0x78) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x3, 0x0, {0x0, 0x7f}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="600000d9eb1b0d936596668ff6e7fc6cc66ca8741534da19e55a4eaf796182e8123e7fc142", @ANYRES16=r3, @ANYBLOB="00012dbd7000fcdbdf251300000008000300", @ANYRES32=r5, @ANYBLOB="0c009900060000006600000008001400", @ANYRES32=r6, @ANYBLOB="0800a40001000000080011800400050018001180040007000400030004000200040002000400020006001200fcff0000"], 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0xc800) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000d00)=""/115) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x4ab}, 0x18) r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r7, &(0x7f0000000340)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b) 1.322927699s ago: executing program 8 (id=4535): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 1.26031454s ago: executing program 8 (id=4537): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000180)={@empty, 0x0}, &(0x7f0000000200)=0x14) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, 0x0, 0x0) r3 = dup2(r2, r2) write$tun(r3, 0x0, 0x46) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', 0x0, 0x8}, 0x18) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000010c0)={@mcast1, 0x0, 0x0, 0x3, 0x1, 0x6429, 0xd}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000001080)='net/igmp\x00') read$char_usb(r5, &(0x7f0000000040)=""/4109, 0x100d) r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x2, 0x0) getdents(r6, &(0x7f0000000400)=""/136, 0x88) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x5, &(0x7f0000001280)=ANY=[@ANYRES64=r3], &(0x7f0000001240)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41000, 0x34, '\x00', r1, @fallback=0x19, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x8, 0xc, 0x4}, 0x10, 0x0, r4, 0x0, &(0x7f0000000400)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r6, r0, r7], 0x0, 0x10, 0xff, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r8 = io_uring_setup(0x3ae4, &(0x7f0000001100)={0x0, 0xd139, 0x80, 0x5, 0x5b, 0x0, r3}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f00000012c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000"], 0x0) r9 = socket$inet6(0xa, 0x1, 0x6) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x1c) ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f0000000100)) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x11, 0xc, &(0x7f0000001180)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.26007688s ago: executing program 1 (id=4538): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) ftruncate(0xffffffffffffffff, 0xc17a) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0xffe0}, 0x20000000}], 0x1, 0x0) 1.194917841s ago: executing program 1 (id=4540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='f2fs_file_write_iter\x00', r2, 0x0, 0x69}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2c, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES32=r3, @ANYBLOB="7f388f7c3f083c3e53e495589016bef802a45144721004e04d0993c4bc6d3d6040a318f5e7316e0faa4196791b67ac9bfbbc837e198571300387618ae69461b929225f353f617c00052a13537ec067ebb8750ae9d0903f591992a878cfd5ee9fdeebb003cc24b50e643c441d97987406cbcebc9973516962d71b3d"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) pipe2(&(0x7f0000000140), 0x80800) socket$kcm(0xa, 0x5, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r7, 0x0, 0x4ab}, 0x18) r8 = io_uring_setup(0x4d3e, &(0x7f0000000240)={0x0, 0xca6a, 0x20, 0x1, 0x8}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000500), 0x66) unshare(0x28020480) pselect6(0x73, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3fe}, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r9, &(0x7f00000000c0), &(0x7f0000000000)='system_u:object_r:memory_device_t:s0\x00', 0x25, 0x0) 1.181218851s ago: executing program 6 (id=4542): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x8, 0x33}, &(0x7f00000005c0)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_sctp(0x2, 0x5, 0x84) close(r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f00000004c0)=ANY=[@ANYRES32=r8], 0x20, 0x2400e044}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x0, 0x3, 0x0, 0xb, 0x6, 0xff, 0x3, 0x5, r8}, &(0x7f0000000380)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getrusage(0x1, &(0x7f0000001080)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x100, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='\x00', &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB]) 602.51894ms ago: executing program 7 (id=4548): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)) 602.00027ms ago: executing program 7 (id=4549): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/193) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) write$cgroup_subtree(r1, &(0x7f0000000a00), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x3, 0x2, 0x3, 0x0, 0x8, 0x8}, 0x20) r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000480)={0xff, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r1, 0x20, &(0x7f0000000980)={&(0x7f0000000880)=""/24, 0x18, 0x0, 0x0}}, 0x10) open$dir(&(0x7f0000000540)='./file0\x00', 0x71a753a09e387c33, 0x2) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000007c0)={'filter\x00', 0x0, 0x4, 0x0, [0xd, 0xb, 0xff, 0x9c, 0x1, 0x7fffffffffffffff], 0x5, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x0}, &(0x7f0000000840)=0x78) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="600000d9eb1b0d936596668ff6e7fc6cc66ca8741534da19e55a4eaf796182e8123e7fc142", @ANYRES16=r3, @ANYBLOB="00012dbd7000fcdbdf251300000008000300", @ANYRES32=r5, @ANYBLOB="0c009900060000006600000008001400", @ANYRES32, @ANYBLOB="0800a40001000000080011800400050018001180040007000400030004000200040002000400020006001200fcff0000"], 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0xc800) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000d00)=""/115) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x4ab}, 0x18) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r6, &(0x7f0000000340)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b) 507.677721ms ago: executing program 7 (id=4552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}]}], {0x14}}, 0x98}}, 0x0) 491.196932ms ago: executing program 7 (id=4553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/193) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) write$cgroup_subtree(r1, &(0x7f0000000a00)={[{0x2d, 'freezer'}, {0x2d, 'cpuacct'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2d, 'net'}, {0x2b, 'blkio'}, {0x2b, 'cpuacct'}]}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x3, 0x2, 0x3, 0x0, 0x8, 0x8}, 0x20) r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000480)={0xff, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r1, 0x20, &(0x7f0000000980)={&(0x7f0000000880)=""/24, 0x18, 0x0, &(0x7f00000008c0)=""/178, 0xb2}}, 0x10) open$dir(&(0x7f0000000540)='./file0\x00', 0x71a753a09e387c33, 0x2) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000007c0)={'filter\x00', 0x0, 0x4, 0x3f, [0xd, 0xb, 0xff, 0x9c, 0x1, 0x7fffffffffffffff], 0x5, &(0x7f0000000740)=[{}, {}, {}, {}, {}], &(0x7f0000000640)=""/63}, &(0x7f0000000840)=0x78) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x3, 0x0, {0x0, 0x7f}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="600000d9eb1b0d936596668ff6e7fc6cc66ca8741534da19e55a4eaf796182e8123e7fc142", @ANYRES16=r3, @ANYBLOB="00012dbd7000fcdbdf251300000008000300", @ANYRES32=r5, @ANYBLOB="0c009900060000006600000008001400", @ANYRES32=r6, @ANYBLOB="0800a40001000000080011800400050018001180040007000400030004000200040002000400020006001200fcff0000"], 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0xc800) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000d00)=""/115) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x4ab}, 0x18) r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r7, &(0x7f0000000340)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b) 485.501442ms ago: executing program 0 (id=4554): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/193) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) write$cgroup_subtree(r1, &(0x7f0000000a00), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x3, 0x2, 0x3, 0x0, 0x8, 0x8}, 0x20) r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000480)={0xff, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r1, 0x0, 0x0}, 0x10) open$dir(&(0x7f0000000540)='./file0\x00', 0x71a753a09e387c33, 0x2) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000007c0)={'filter\x00', 0x0, 0x4, 0x3f, [0xd, 0xb, 0xff, 0x9c, 0x1, 0x7fffffffffffffff], 0x5, &(0x7f0000000740)=[{}, {}, {}, {}, {}], &(0x7f0000000640)=""/63}, &(0x7f0000000840)=0x78) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x3, 0x0, {0x0, 0x7f}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="600000d9eb1b0d936596668ff6e7fc6cc66ca8741534da19e55a4eaf796182e8123e7fc142", @ANYRES16=r3, @ANYBLOB="00012dbd7000fcdbdf251300000008000300", @ANYRES32=r5, @ANYBLOB="0c009900060000006600000008001400", @ANYRES32, @ANYBLOB="0800a40001000000080011800400050018001180040007000400030004000200040002000400020006001200fcff0000"], 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0xc800) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000d00)=""/115) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x4ab}, 0x18) r6 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r6, &(0x7f0000000340)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b) 444.310932ms ago: executing program 0 (id=4555): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004008faf5585e0e5f10a00000000000089e9e95591f77842c23b9d87bbacb335b6cd14805245ea783ca07fa617a6605c136e9da86ae34afcfb1de177625576c11473c4fe8074988e6c30f51a03f381ff0097505c022d449f10c1b3359d3f48babaacef69fa73d61690736f13811e612b6ecf22a546e72824dc1c0d55998caed5b045ed7b7a6bed3200002f72d81e83887df4d139322d25f58fa96b8f924d4d06b91f1dc5148c7984cfcba9cebd32f062c2c3f619cf6fb4f770c86af81182cd8614d2c197a24acde61c092c19864f4e46", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) timer_create(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x24) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 412.861533ms ago: executing program 0 (id=4557): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00'}, 0x3d) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) 398.812753ms ago: executing program 7 (id=4558): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = dup(r1) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r5}, 0x10) r6 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x2, 0x7f, 0x9, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f00000001c0)='!=u>20\t&&') write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0xd}, 0x400, 0x1000b, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r8}}) 391.712344ms ago: executing program 0 (id=4559): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a2c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480c1}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000900)={0xb0, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000085}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000004a13124e995c6447c1066b007e39d8d755817934ecb9afc46ba53d45842bc232b22ef07366506985a80ef26b1ea39e3882aa303b8fd440b619ab70f6b819b503fe5aa13dd0385c7b272b2618427731ae3e055c1c5fc0ecd5ba04788af8eeac99dd7e7024f50068488bcec1c4647a0dc9157d44513f71d0c7880fe41c4c4fcbab1c1d248c2586eb78ad06241edc6451166514be8e4b47d6457", @ANYRES16=r4, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x0) write$nci(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="710d090102020607037efc0930ea56c4f61cab1d0ff3ff0401eb"], 0x1a) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='mm_page_free\x00', r6, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 341.365314ms ago: executing program 1 (id=4560): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xce, &(0x7f0000000280)={0x0, 0x8b48, 0x20000, 0x0, 0x3d8}, &(0x7f0000ff0000), 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 316.845335ms ago: executing program 6 (id=4561): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0700000004000000084400001e00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="feffffff00"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x29, &(0x7f0000000b40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @cb_func={0x18, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @map_fd={0x18, 0x8, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0x0, 0x3, 0x6, 0x4, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x5, 0x5, 0xb, 0x2, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000ff0f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) r6 = fcntl$dupfd(r2, 0x0, r2) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x25, 0x0, 0x0}) syz_clone(0x20000300, &(0x7f00000000c0)="5b45a69032f8f831b615b63d4692789b5906fb0f61f887dc37278a8ad94dee63024b736a6bebdf3c3601ebeebaa65e0bb76db562a79ecbca13db97a51066a1bd9155581eb8bbd3b0334c65ff06cb90c9d1a3f2cba134d7424a00b9d95b99845a143ed2280880d8d210dfcc8dc344bcfc92341a36e6eed071873472194d3073331bb085a46b4cff6456eb20238796b6196be3902d33e6854ca748245682957922bd98fcc5468876ce755dedee247fc9a0bcb3cbe8c634ca0db6ff135d4f0cc825501a42eae37ed847374bc59090671d5dd72364ebe2", 0xd5, &(0x7f0000000300), &(0x7f0000000340), &(0x7f00000003c0)="992d3779c7cbb1d3301e46afc5d38d36ef6fd1") clock_gettime(0x3, &(0x7f0000000400)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r9}, &(0x7f0000000a00), &(0x7f0000000a40)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r10 = socket$packet(0x11, 0x3, 0x300) r11 = epoll_create1(0x80000) ioctl$EXT4_IOC_MIGRATE(r11, 0x6609) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) setsockopt$packet_fanout_data(r10, 0x107, 0x16, &(0x7f0000000540)={0x1, &(0x7f0000002040)=[{0x4, 0x9, 0x5, 0x4}]}, 0x10) r12 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r13, r14, &(0x7f0000000200)=@IORING_OP_WRITE={0x17, 0x8, 0x4000, @fd, 0x5, 0x0, 0x0, 0x18, 0x1}) io_uring_enter(r12, 0x47bc, 0x0, 0x0, 0x0, 0x0) 295.040835ms ago: executing program 1 (id=4562): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/193) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) write$cgroup_subtree(r1, &(0x7f0000000a00), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x3, 0x2, 0x3, 0x0, 0x8, 0x8}, 0x20) r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000480)={0xff, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r1, 0x20, &(0x7f0000000980)={&(0x7f0000000880)=""/24, 0x18, 0x0, 0x0}}, 0x10) open$dir(&(0x7f0000000540)='./file0\x00', 0x71a753a09e387c33, 0x2) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000007c0)={'filter\x00', 0x0, 0x4, 0x0, [0xd, 0xb, 0xff, 0x9c, 0x1, 0x7fffffffffffffff], 0x5, &(0x7f0000000740)=[{}, {}, {}, {}, {}], 0x0}, &(0x7f0000000840)=0x78) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="600000d9eb1b0d936596668ff6e7fc6cc66ca8741534da19e55a4eaf796182e8123e7fc142", @ANYRES16=r3, @ANYBLOB="00012dbd7000fcdbdf251300000008000300", @ANYRES32, @ANYBLOB="0c009900060000006600000008001400", @ANYRES32, @ANYBLOB="0800a40001000000080011800400050018001180040007000400030004000200040002000400020006001200fcff0000"], 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0xc800) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000d00)=""/115) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x4ab}, 0x18) r5 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r5, &(0x7f0000000340)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b) 253.746366ms ago: executing program 7 (id=4563): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000b40)=ANY=[@ANYRES64=r1], 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x4000006}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000080)={0x7, 0x8}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108283, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xbd4, 0xffffffffffffffff, 0x4}, 0x38) 107.653577ms ago: executing program 0 (id=4564): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}]}], {0x14}}, 0x98}}, 0x0) 82.070498ms ago: executing program 6 (id=4565): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)) 48.212398ms ago: executing program 0 (id=4566): unshare(0x6a040000) r0 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_int(r0, 0x29, 0xb, 0x0, &(0x7f00000004c0)) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0xc3, &(0x7f0000000200)='\xbf\xc9roc/sys/net/ipv4\x00\x00s^sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\'%\x11c\x91l,\xa9\x9d8\xefu%\xa8HC\x89y\x91M\x9bq\xe9\x88\x05\xd3\xfdI\x7f\xf2\v\xc0xF\x8f\xdf\x99\xe9\x1e\x89\xc9\x92\x80\xb4\xec\xef\x0e6*\x0fb\xcbD\xbdd\r\x1c\xb3\xa1\xfa\xc9\xe0:#\x7fjKp\t\xa6r\xd6A\x1fq\xa8\x1d\xb2\xae:LbB\xc66\xc6\xd29\xd9\xf8j\xd3\v\xc2\x82\xddGY\xf4\xf32gK\xa2\xa8\xcc\xb3\xa5\x88,\xe88\x85_\xdd\xc3\xe5\x06\xb4&\"\xa1\x9e\xffJa\x8d{\x14\xb4\x17u\xf1\xc3fiEP\xdc\xc8C\xe7j\xe2\xd7'}, 0x30) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) r3 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440), 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10001}}, 0x7fff, 0x6}, 0x90) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x140, 0x16, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0x118, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x188}, 0x1, 0x0, 0x0, 0x800}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) sendmmsg$sock(0xffffffffffffffff, &(0x7f000000af80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x28, 0x1a, 0x9e8a232eead7ae61, 0x70bd23, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3}, [@RTA_MULTIPATH={0xc, 0x9, {0x40, 0x29, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x30004840}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000100)=""/28, &(0x7f0000000240)=0xffffffffffffffb9) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_io_uring_setup(0x66e3, &(0x7f00000003c0)={0x0, 0x7f25, 0x40, 0x1, 0x12e}, &(0x7f0000000000), &(0x7f0000000140)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 47.910249ms ago: executing program 1 (id=4567): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) io_submit(0x0, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)="96", 0xfffffe10}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) msgget(0x0, 0x0) 556.999µs ago: executing program 6 (id=4568): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004008faf5585e0e5f10a00000000000089e9e95591f77842c23b9d87bbacb335b6cd14805245ea783ca07fa617a6605c136e9da86ae34afcfb1de177625576c11473c4fe8074988e6c30f51a03f381ff0097505c022d449f10c1b3359d3f48babaacef69fa73d61690736f13811e612b6ecf22a546e72824dc1c0d55998caed5b045ed7b7a6bed3200002f72d81e83887df4d139322d25f58fa96b8f924d4d06b91f1dc5148c7984cfcba9cebd32f062c2c3f619cf6fb4f770c86af81182cd8614d2c197a24acde61c092c19864f4e46", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x18) timer_create(0x5, 0x0, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x24) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 1 (id=4569): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, @void, @value}, 0x94) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000080)=""/193) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) write$cgroup_subtree(r1, &(0x7f0000000a00)={[{0x2d, 'freezer'}, {0x2d, 'cpuacct'}, {0x2b, 'io'}, {0x2d, 'rdma'}, {0x2d, 'net'}, {0x2b, 'blkio'}, {0x2b, 'cpuacct'}]}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@local, 0x3, 0x2, 0x3, 0x0, 0x8, 0x8}, 0x20) r2 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000480)={0xff, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}}, 0x88) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r1, 0x20, &(0x7f0000000980)={&(0x7f0000000880)=""/24, 0x18, 0x0, &(0x7f00000008c0)=""/178, 0xb2}}, 0x10) open$dir(&(0x7f0000000540)='./file0\x00', 0x71a753a09e387c33, 0x2) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f00000007c0)={'filter\x00', 0x0, 0x4, 0x3f, [0xd, 0xb, 0xff, 0x9c, 0x1, 0x7fffffffffffffff], 0x5, &(0x7f0000000740)=[{}, {}, {}, {}, {}], &(0x7f0000000640)=""/63}, &(0x7f0000000840)=0x78) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000140)={0x16f, @tick=0x3, 0x0, {0x0, 0x7f}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000440)={&(0x7f00000001c0), 0xc, &(0x7f0000000400)={&(0x7f0000000a40)=ANY=[@ANYBLOB="600000d9eb1b0d936596668ff6e7fc6cc66ca8741534da19e55a4eaf796182e8123e7fc142", @ANYRES16=r3, @ANYBLOB="00012dbd7000fcdbdf251300000008000300", @ANYRES32=r5, @ANYBLOB="0c009900060000006600000008001400", @ANYRES32=r6, @ANYBLOB="0800a40001000000080011800400050018001180040007000400030004000200040002000400020006001200fcff0000"], 0x60}, 0x1, 0x0, 0x0, 0x8041}, 0xc800) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000d00)=""/115) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r0, 0x0, 0x4ab}, 0x18) r7 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r7, &(0x7f0000000340)='system_u:object_r:systemd_logind_exec_t:s0\x00', 0x2b) kernel console output (not intermixed with test programs): ressed [ 240.830474][ T29] audit: type=1326 audit(2000000659.368:17778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e5e8e929 code=0x7ffc0000 [ 240.832749][T21235] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4002'. [ 240.839103][T21237] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 240.864878][T21235] 9pnet_fd: Insufficient options for proto=fd [ 240.869693][T21237] FAT-fs (loop7): Filesystem has been set read-only [ 240.883933][ T29] audit: type=1326 audit(2000000659.368:17779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f50e5e8e929 code=0x7ffc0000 [ 240.893632][T21237] syz.7.4003: attempt to access beyond end of device [ 240.893632][T21237] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 240.914397][ T29] audit: type=1326 audit(2000000659.368:17780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e5e8e929 code=0x7ffc0000 [ 240.914450][ T29] audit: type=1326 audit(2000000659.368:17781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50e5e8d290 code=0x7ffc0000 [ 240.931015][T21237] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 240.952254][ T29] audit: type=1326 audit(2000000659.368:17782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f50e5e90157 code=0x7ffc0000 [ 240.976009][T21237] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 241.015698][ T29] audit: type=1326 audit(2000000659.368:17783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50e5e8e929 code=0x7ffc0000 [ 241.039641][ T29] audit: type=1326 audit(2000000659.368:17784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f50e5e90157 code=0x7ffc0000 [ 241.063268][ T29] audit: type=1326 audit(2000000659.368:17785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f50e5e8d58a code=0x7ffc0000 [ 241.086958][ T29] audit: type=1326 audit(2000000659.368:17786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e5e8e929 code=0x7ffc0000 [ 241.110682][ T29] audit: type=1326 audit(2000000659.368:17787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21234 comm="syz.6.4002" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f50e5e907bc code=0x7ffc0000 [ 241.135868][T21242] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21242 comm=syz.1.4005 [ 241.299947][T21260] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4007' sets config #1 [ 241.318792][T21262] random: crng reseeded on system resumption [ 241.332365][T21262] Restarting kernel threads ... [ 241.339042][T21262] Done restarting kernel threads. [ 241.356088][T21265] loop1: detected capacity change from 0 to 512 [ 241.390488][ T7660] hid-generic FFFC:0003:0000.0019: unknown main item tag 0x0 [ 241.398230][ T7660] hid-generic FFFC:0003:0000.0019: unknown main item tag 0x0 [ 241.406054][ T7660] hid-generic FFFC:0003:0000.0019: unknown main item tag 0x0 [ 241.407848][T21278] netlink: 348 bytes leftover after parsing attributes in process `syz.7.4013'. [ 241.413688][ T7660] hid-generic FFFC:0003:0000.0019: unknown main item tag 0x0 [ 241.413743][ T7660] hid-generic FFFC:0003:0000.0019: unknown main item tag 0x0 [ 241.413770][ T7660] hid-generic FFFC:0003:0000.0019: unknown main item tag 0x0 [ 241.446598][ T7660] hid-generic FFFC:0003:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.490147][T21289] loop7: detected capacity change from 0 to 164 [ 241.494397][T21291] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4016'. [ 241.578787][T21315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21315 comm=syz.6.4021 [ 241.656298][T21323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4022'. [ 241.675367][T21311] loop7: detected capacity change from 0 to 512 [ 241.685387][T21311] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 241.718659][T21311] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.733141][T21311] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.754333][T21311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.798493][T21336] netlink: 348 bytes leftover after parsing attributes in process `syz.1.4025'. [ 241.833035][ T7660] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 241.840881][ T7660] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 241.848549][ T7660] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 241.855977][ T7660] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 241.863471][ T7660] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 241.871521][ T7660] hid-generic FFFC:0003:0000.001A: unknown main item tag 0x0 [ 241.879143][T21342] loop7: detected capacity change from 0 to 256 [ 241.887556][ T7660] hid-generic FFFC:0003:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.945471][T21361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4030'. [ 241.958967][T21361] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 242.019583][T21366] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4032'. [ 242.057816][T21374] loop8: detected capacity change from 0 to 128 [ 242.076302][T21374] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 242.084412][T21374] FAT-fs (loop8): Filesystem has been set read-only [ 242.088132][T21381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.100828][T21374] syz.8.4033: attempt to access beyond end of device [ 242.100828][T21374] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 242.115333][T21374] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 242.123367][T21374] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 242.123481][T21381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.282054][T21407] loop8: detected capacity change from 0 to 512 [ 242.299480][T21407] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 242.322334][T21407] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 242.339143][T21407] EXT4-fs (loop8): 1 truncate cleaned up [ 242.349426][T21407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.369837][T21407] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.401892][T19416] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.430159][T21425] loop8: detected capacity change from 0 to 128 [ 242.443940][T21425] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 242.452398][T21425] FAT-fs (loop8): Filesystem has been set read-only [ 242.460968][T21425] syz.8.4046: attempt to access beyond end of device [ 242.460968][T21425] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 242.475430][T21425] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 242.484010][T21425] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 242.825058][T21440] loop7: detected capacity change from 0 to 512 [ 242.838961][T21440] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 242.847495][T21440] EXT4-fs (loop7): orphan cleanup on readonly fs [ 242.854105][T21440] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 242.870272][T21440] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 242.878101][T21440] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4051: bg 0: block 40: padding at end of block bitmap is not set [ 242.894615][T21440] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 242.904216][T21440] EXT4-fs (loop7): 1 truncate cleaned up [ 242.911722][T21440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.924890][T21440] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.029842][T21447] netlink: 'syz.7.4052': attribute type 10 has an invalid length. [ 243.038650][T21447] veth0_macvtap: left promiscuous mode [ 243.044704][T21447] team0: Device veth0_macvtap failed to register rx_handler [ 243.149874][T21462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.169959][T21462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.174960][T21464] FAULT_INJECTION: forcing a failure. [ 243.174960][T21464] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 243.191456][T21464] CPU: 1 UID: 0 PID: 21464 Comm: syz.1.4058 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 243.191486][T21464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.191556][T21464] Call Trace: [ 243.191562][T21464] [ 243.191569][T21464] __dump_stack+0x1d/0x30 [ 243.191602][T21464] dump_stack_lvl+0xe8/0x140 [ 243.191621][T21464] dump_stack+0x15/0x1b [ 243.191642][T21464] should_fail_ex+0x265/0x280 [ 243.191682][T21464] should_fail_alloc_page+0xf2/0x100 [ 243.191734][T21464] __alloc_frozen_pages_noprof+0xff/0x360 [ 243.191781][T21464] alloc_pages_mpol+0xb3/0x250 [ 243.191814][T21464] folio_alloc_mpol_noprof+0x39/0x80 [ 243.191856][T21464] shmem_get_folio_gfp+0x3cf/0xd60 [ 243.191905][T21464] shmem_write_begin+0xa8/0x190 [ 243.191948][T21464] generic_perform_write+0x184/0x490 [ 243.191978][T21464] shmem_file_write_iter+0xc5/0xf0 [ 243.192044][T21464] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 243.192123][T21464] vfs_write+0x4a0/0x8e0 [ 243.192165][T21464] ksys_write+0xda/0x1a0 [ 243.192254][T21464] __x64_sys_write+0x40/0x50 [ 243.192356][T21464] x64_sys_call+0x2cdd/0x2fb0 [ 243.192384][T21464] do_syscall_64+0xd2/0x200 [ 243.192407][T21464] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 243.192488][T21464] ? clear_bhb_loop+0x40/0x90 [ 243.192508][T21464] ? clear_bhb_loop+0x40/0x90 [ 243.192533][T21464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.192588][T21464] RIP: 0033:0x7fc29f93d3df [ 243.192608][T21464] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 243.192626][T21464] RSP: 002b:00007fc29dfa6d40 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 243.192643][T21464] RAX: ffffffffffffffda RBX: 0000000000400000 RCX: 00007fc29f93d3df [ 243.192655][T21464] RDX: 0000000000400000 RSI: 00007fc295b87000 RDI: 0000000000000005 [ 243.192667][T21464] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000001064 [ 243.192721][T21464] R10: 00000000000000e4 R11: 0000000000000293 R12: 0000000000000005 [ 243.192809][T21464] R13: 00007fc29dfa6dec R14: 00007fc29dfa6df0 R15: 00007fc295b87000 [ 243.192835][T21464] [ 243.476426][T21491] loop1: detected capacity change from 0 to 2048 [ 243.514975][ T23] hid-generic FFFC:0003:0000.001B: unknown main item tag 0x0 [ 243.522608][ T23] hid-generic FFFC:0003:0000.001B: unknown main item tag 0x0 [ 243.530082][ T23] hid-generic FFFC:0003:0000.001B: unknown main item tag 0x0 [ 243.537675][ T23] hid-generic FFFC:0003:0000.001B: unknown main item tag 0x0 [ 243.545273][ T23] hid-generic FFFC:0003:0000.001B: unknown main item tag 0x0 [ 243.552868][ T23] hid-generic FFFC:0003:0000.001B: unknown main item tag 0x0 [ 243.577280][T21491] loop1: p1 < > p4 [ 243.585401][T21499] FAULT_INJECTION: forcing a failure. [ 243.585401][T21499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.598751][T21499] CPU: 1 UID: 0 PID: 21499 Comm: syz.7.4063 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 243.598787][T21499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.598799][T21499] Call Trace: [ 243.598805][T21499] [ 243.598813][T21499] __dump_stack+0x1d/0x30 [ 243.598834][T21499] dump_stack_lvl+0xe8/0x140 [ 243.598925][T21499] dump_stack+0x15/0x1b [ 243.598946][T21499] should_fail_ex+0x265/0x280 [ 243.598983][T21499] should_fail+0xb/0x20 [ 243.599015][T21499] should_fail_usercopy+0x1a/0x20 [ 243.599054][T21499] _copy_from_user+0x1c/0xb0 [ 243.599077][T21499] ____sys_sendmsg+0x1c5/0x4e0 [ 243.599124][T21499] ___sys_sendmsg+0x17b/0x1d0 [ 243.599187][T21499] __x64_sys_sendmsg+0xd4/0x160 [ 243.599211][T21499] x64_sys_call+0x2999/0x2fb0 [ 243.599232][T21499] do_syscall_64+0xd2/0x200 [ 243.599251][T21499] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 243.599285][T21499] ? clear_bhb_loop+0x40/0x90 [ 243.599361][T21499] ? clear_bhb_loop+0x40/0x90 [ 243.599391][T21499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.599418][T21499] RIP: 0033:0x7f0a93b3e929 [ 243.599436][T21499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.599485][T21499] RSP: 002b:00007f0a921a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.599509][T21499] RAX: ffffffffffffffda RBX: 00007f0a93d65fa0 RCX: 00007f0a93b3e929 [ 243.599540][T21499] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 243.599555][T21499] RBP: 00007f0a921a7090 R08: 0000000000000000 R09: 0000000000000000 [ 243.599571][T21499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.599640][T21499] R13: 0000000000000000 R14: 00007f0a93d65fa0 R15: 00007ffc28174428 [ 243.599660][T21499] [ 243.600396][T21491] loop1: p4 size 8388608 extends beyond EOD, [ 243.621924][ T23] hid-generic FFFC:0003:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 243.623483][T21491] truncated [ 243.808831][T21510] macvlan1: entered promiscuous mode [ 243.814200][T21510] bridge0: entered promiscuous mode [ 243.867027][T21491] xt_CT: No such helper "syz0" [ 243.892298][T21491] sd 0:0:1:0: device reset [ 243.939633][T21542] loop6: detected capacity change from 0 to 128 [ 243.953974][T21542] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 243.961965][T21542] FAT-fs (loop6): Filesystem has been set read-only [ 243.985894][T21542] syz.6.4074: attempt to access beyond end of device [ 243.985894][T21542] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 244.002579][T21542] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 244.010554][T21542] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 244.058546][T21556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.077733][T21556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.186278][T21587] loop7: detected capacity change from 0 to 512 [ 244.193347][T21587] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.200542][T21587] EXT4-fs: Mount option(s) incompatible with ext2 [ 244.273992][T21592] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 244.423143][T21610] loop1: detected capacity change from 0 to 128 [ 244.432426][T21610] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 244.440554][T21610] FAT-fs (loop1): Filesystem has been set read-only [ 244.447528][T21610] syz.1.4091: attempt to access beyond end of device [ 244.447528][T21610] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 244.461824][T21610] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 244.469709][T21610] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 244.501642][T21615] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4092' sets config #1 [ 244.645113][T21629] FAULT_INJECTION: forcing a failure. [ 244.645113][T21629] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.658426][T21629] CPU: 0 UID: 0 PID: 21629 Comm: syz.8.4097 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 244.658462][T21629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 244.658479][T21629] Call Trace: [ 244.658487][T21629] [ 244.658497][T21629] __dump_stack+0x1d/0x30 [ 244.658551][T21629] dump_stack_lvl+0xe8/0x140 [ 244.658570][T21629] dump_stack+0x15/0x1b [ 244.658586][T21629] should_fail_ex+0x265/0x280 [ 244.658654][T21629] should_fail+0xb/0x20 [ 244.658681][T21629] should_fail_usercopy+0x1a/0x20 [ 244.658718][T21629] _copy_from_iter+0xcf/0xe40 [ 244.658788][T21629] ? __build_skb_around+0x1a0/0x200 [ 244.658818][T21629] ? __alloc_skb+0x223/0x320 [ 244.658849][T21629] netlink_sendmsg+0x471/0x6b0 [ 244.658878][T21629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.658932][T21629] __sock_sendmsg+0x142/0x180 [ 244.658957][T21629] ____sys_sendmsg+0x31e/0x4e0 [ 244.658997][T21629] ___sys_sendmsg+0x17b/0x1d0 [ 244.659114][T21629] __x64_sys_sendmsg+0xd4/0x160 [ 244.659139][T21629] x64_sys_call+0x2999/0x2fb0 [ 244.659167][T21629] do_syscall_64+0xd2/0x200 [ 244.659192][T21629] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 244.659284][T21629] ? clear_bhb_loop+0x40/0x90 [ 244.659307][T21629] ? clear_bhb_loop+0x40/0x90 [ 244.659328][T21629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.659355][T21629] RIP: 0033:0x7f92b296e929 [ 244.659375][T21629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.659441][T21629] RSP: 002b:00007f92b0fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.659462][T21629] RAX: ffffffffffffffda RBX: 00007f92b2b95fa0 RCX: 00007f92b296e929 [ 244.659478][T21629] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000006 [ 244.659545][T21629] RBP: 00007f92b0fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 244.659557][T21629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.659612][T21629] R13: 0000000000000000 R14: 00007f92b2b95fa0 R15: 00007ffcacd44638 [ 244.659636][T21629] [ 244.890546][T21631] loop8: detected capacity change from 0 to 1024 [ 244.897835][T21631] EXT4-fs: Ignoring removed bh option [ 244.922858][T21631] EXT4-fs (loop8): mounted filesystem 05000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.003943][T21654] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.4104' sets config #1 [ 245.014227][T19416] EXT4-fs (loop8): unmounting filesystem 05000000-0000-0000-0000-000000000000. [ 245.057947][T21663] SELinux: Context system_u:object_r:hald_dccm_exec_t:s0 is not valid (left unmapped). [ 245.087379][T21668] loop6: detected capacity change from 0 to 164 [ 245.094708][T21668] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 245.103287][T21668] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 245.111742][T21668] Symlink component flag not implemented [ 245.117526][T21668] Symlink component flag not implemented [ 245.123628][T21668] Symlink component flag not implemented (7) [ 245.129697][T21668] Symlink component flag not implemented (116) [ 245.136790][T21668] FAULT_INJECTION: forcing a failure. [ 245.136790][T21668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.146335][T21673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21673 comm=syz.8.4110 [ 245.150012][T21668] CPU: 0 UID: 0 PID: 21668 Comm: syz.6.4106 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 245.150052][T21668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.150119][T21668] Call Trace: [ 245.150126][T21668] [ 245.150138][T21668] __dump_stack+0x1d/0x30 [ 245.150197][T21668] dump_stack_lvl+0xe8/0x140 [ 245.150226][T21668] dump_stack+0x15/0x1b [ 245.150249][T21668] should_fail_ex+0x265/0x280 [ 245.150343][T21668] should_fail+0xb/0x20 [ 245.150381][T21668] should_fail_usercopy+0x1a/0x20 [ 245.150483][T21668] _copy_from_iter+0xcf/0xe40 [ 245.150553][T21668] ? __build_skb_around+0x1a0/0x200 [ 245.150598][T21668] ? __alloc_skb+0x223/0x320 [ 245.150640][T21668] netlink_sendmsg+0x471/0x6b0 [ 245.150671][T21668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 245.150724][T21668] __sock_sendmsg+0x142/0x180 [ 245.150760][T21668] ____sys_sendmsg+0x31e/0x4e0 [ 245.150873][T21668] ___sys_sendmsg+0x17b/0x1d0 [ 245.150953][T21668] __x64_sys_sendmsg+0xd4/0x160 [ 245.150985][T21668] x64_sys_call+0x2999/0x2fb0 [ 245.151037][T21668] do_syscall_64+0xd2/0x200 [ 245.151063][T21668] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 245.151100][T21668] ? clear_bhb_loop+0x40/0x90 [ 245.151129][T21668] ? clear_bhb_loop+0x40/0x90 [ 245.151170][T21668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.151200][T21668] RIP: 0033:0x7f50e5e8e929 [ 245.151222][T21668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.151248][T21668] RSP: 002b:00007f50e44d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.151338][T21668] RAX: ffffffffffffffda RBX: 00007f50e60b6080 RCX: 00007f50e5e8e929 [ 245.151356][T21668] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000009 [ 245.151374][T21668] RBP: 00007f50e44d6090 R08: 0000000000000000 R09: 0000000000000000 [ 245.151391][T21668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.151408][T21668] R13: 0000000000000000 R14: 00007f50e60b6080 R15: 00007ffdc5a036a8 [ 245.151436][T21668] [ 245.465126][T21692] loop1: detected capacity change from 0 to 164 [ 245.473018][T21692] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 245.483379][T21692] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 245.492246][T21692] Symlink component flag not implemented [ 245.498043][T21692] Symlink component flag not implemented [ 245.503748][T21692] Symlink component flag not implemented (7) [ 245.509962][T21692] Symlink component flag not implemented (116) [ 245.510149][T21694] loop8: detected capacity change from 0 to 164 [ 245.532481][T21694] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 245.541336][T21694] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 245.549995][T21694] Symlink component flag not implemented [ 245.555679][T21694] Symlink component flag not implemented [ 245.561568][T21694] Symlink component flag not implemented (7) [ 245.567609][T21694] Symlink component flag not implemented (116) [ 245.581093][T21699] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4116' sets config #1 [ 245.716982][T21704] __nla_validate_parse: 31 callbacks suppressed [ 245.717004][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4118'. [ 245.733270][T21704] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4118'. [ 245.743311][T21704] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4118'. [ 245.756312][T21704] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4118'. [ 245.845909][T21716] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21716 comm=syz.7.4123 [ 246.054981][T21714] FAULT_INJECTION: forcing a failure. [ 246.054981][T21714] name failslab, interval 1, probability 0, space 0, times 0 [ 246.067737][T21714] CPU: 1 UID: 0 PID: 21714 Comm: syz.0.4122 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 246.067773][T21714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 246.067789][T21714] Call Trace: [ 246.067796][T21714] [ 246.067885][T21714] __dump_stack+0x1d/0x30 [ 246.067912][T21714] dump_stack_lvl+0xe8/0x140 [ 246.067937][T21714] dump_stack+0x15/0x1b [ 246.068009][T21714] should_fail_ex+0x265/0x280 [ 246.068041][T21714] should_failslab+0x8c/0xb0 [ 246.068068][T21714] __kmalloc_noprof+0xa5/0x3e0 [ 246.068099][T21714] ? vmalloc_info_show+0x3f/0x850 [ 246.068154][T21714] vmalloc_info_show+0x3f/0x850 [ 246.068174][T21714] ? seq_read_iter+0x404/0x940 [ 246.068270][T21714] seq_read_iter+0x316/0x940 [ 246.068375][T21714] proc_reg_read_iter+0x10d/0x180 [ 246.068399][T21714] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 246.068470][T21714] vfs_read+0x5ca/0x6f0 [ 246.068500][T21714] ? __pfx_proc_reg_read_iter+0x10/0x10 [ 246.068547][T21714] ksys_read+0xda/0x1a0 [ 246.068584][T21714] __x64_sys_read+0x40/0x50 [ 246.068620][T21714] x64_sys_call+0x2d77/0x2fb0 [ 246.068647][T21714] do_syscall_64+0xd2/0x200 [ 246.068670][T21714] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 246.068774][T21714] ? clear_bhb_loop+0x40/0x90 [ 246.068795][T21714] ? clear_bhb_loop+0x40/0x90 [ 246.068841][T21714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.068868][T21714] RIP: 0033:0x7fe57d47e929 [ 246.068887][T21714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.068907][T21714] RSP: 002b:00007fe57bae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.068929][T21714] RAX: ffffffffffffffda RBX: 00007fe57d6a5fa0 RCX: 00007fe57d47e929 [ 246.068951][T21714] RDX: 0000000000000ffc RSI: 00002000000000c0 RDI: 0000000000000006 [ 246.068964][T21714] RBP: 00007fe57bae7090 R08: 0000000000000000 R09: 0000000000000000 [ 246.068976][T21714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.069050][T21714] R13: 0000000000000000 R14: 00007fe57d6a5fa0 R15: 00007ffd6e6983f8 [ 246.069142][T21714] [ 246.340368][T21737] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.4127' sets config #1 [ 246.378458][ T29] kauditd_printk_skb: 558 callbacks suppressed [ 246.378478][ T29] audit: type=1326 audit(2000000664.917:18343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.8.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 246.405967][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4129'. [ 246.408346][ T29] audit: type=1400 audit(2000000664.917:18345): avc: denied { block_suspend } for pid=21745 comm="syz.7.4130" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 246.408387][ T29] audit: type=1326 audit(2000000664.917:18344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.8.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 246.408425][ T29] audit: type=1326 audit(2000000664.917:18346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.8.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 246.456841][ T29] audit: type=1326 audit(2000000664.917:18347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.8.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 246.466221][T21743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4129'. [ 246.489278][ T29] audit: type=1326 audit(2000000664.917:18348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.8.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 246.489325][ T29] audit: type=1326 audit(2000000664.917:18349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.8.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 246.489365][ T29] audit: type=1326 audit(2000000664.917:18350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.8.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 246.489438][ T29] audit: type=1326 audit(2000000664.917:18351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21740 comm="syz.8.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 246.630587][T21743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4129'. [ 246.642179][T21743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4129'. [ 246.661543][ T29] audit: type=1326 audit(2000000665.197:18352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21768 comm="syz.6.4133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50e5e8e929 code=0x7ffc0000 [ 246.754105][T21794] loop6: detected capacity change from 0 to 512 [ 246.762295][T21794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e018, mo2=0002] [ 246.770697][T21794] System zones: 1-12 [ 246.773974][T21800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21800 comm=syz.0.4137 [ 246.789082][T21794] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.4136: invalid indirect mapped block 8 (level 2) [ 246.803483][T21794] EXT4-fs (loop6): 1 truncate cleaned up [ 246.821982][T21794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.846087][T21794] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.941130][T21819] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4141' sets config #1 [ 247.228575][T21822] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4142'. [ 247.248535][T21822] netlink: 'syz.8.4142': attribute type 13 has an invalid length. [ 247.348525][T21822] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 247.401089][T21859] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4155' sets config #1 [ 247.439404][T21862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=21862 comm=syz.1.4153 [ 247.452284][T21862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=21862 comm=syz.1.4153 [ 247.591680][T21871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21871 comm=syz.0.4159 [ 247.987589][T21907] loop8: detected capacity change from 0 to 128 [ 247.997647][T21907] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 248.005712][T21907] FAT-fs (loop8): Filesystem has been set read-only [ 248.012521][T21907] syz.8.4164: attempt to access beyond end of device [ 248.012521][T21907] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 248.027633][T21907] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 248.035521][T21907] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 248.040840][T21910] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4165'. [ 248.054688][T21910] x_tables: ip_tables: udp match: only valid for protocol 17 [ 248.217033][T21951] SELinux: security policydb version 18 (MLS) not backwards compatible [ 248.240476][T21951] SELinux: failed to load policy [ 248.266206][T21954] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21954 comm=syz.8.4176 [ 248.746330][T21971] loop6: detected capacity change from 0 to 128 [ 248.761208][T21971] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 248.769273][T21971] FAT-fs (loop6): Filesystem has been set read-only [ 248.814391][T21971] syz.6.4180: attempt to access beyond end of device [ 248.814391][T21971] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 248.862983][T21971] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 248.871003][T21971] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 248.956223][T21984] FAULT_INJECTION: forcing a failure. [ 248.956223][T21984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.969546][T21984] CPU: 0 UID: 0 PID: 21984 Comm: syz.6.4184 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 248.969599][T21984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 248.969614][T21984] Call Trace: [ 248.969623][T21984] [ 248.969634][T21984] __dump_stack+0x1d/0x30 [ 248.969684][T21984] dump_stack_lvl+0xe8/0x140 [ 248.969767][T21984] dump_stack+0x15/0x1b [ 248.969821][T21984] should_fail_ex+0x265/0x280 [ 248.969862][T21984] should_fail+0xb/0x20 [ 248.969896][T21984] should_fail_usercopy+0x1a/0x20 [ 248.970070][T21984] strncpy_from_user+0x25/0x230 [ 248.970101][T21984] ? kmem_cache_alloc_noprof+0x186/0x310 [ 248.970165][T21984] ? getname_flags+0x80/0x3b0 [ 248.970270][T21984] getname_flags+0xae/0x3b0 [ 248.970299][T21984] do_sys_openat2+0x60/0x110 [ 248.970402][T21984] __x64_sys_openat+0xf2/0x120 [ 248.970438][T21984] x64_sys_call+0x1af/0x2fb0 [ 248.970499][T21984] do_syscall_64+0xd2/0x200 [ 248.970523][T21984] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 248.970584][T21984] ? clear_bhb_loop+0x40/0x90 [ 248.970604][T21984] ? clear_bhb_loop+0x40/0x90 [ 248.970628][T21984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.970688][T21984] RIP: 0033:0x7f50e5e8e929 [ 248.970703][T21984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.970725][T21984] RSP: 002b:00007f50e44f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 248.970821][T21984] RAX: ffffffffffffffda RBX: 00007f50e60b5fa0 RCX: 00007f50e5e8e929 [ 248.970836][T21984] RDX: 0000000000001300 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 248.970852][T21984] RBP: 00007f50e44f7090 R08: 0000000000000000 R09: 0000000000000000 [ 248.970874][T21984] R10: 000000000000001d R11: 0000000000000246 R12: 0000000000000001 [ 248.970890][T21984] R13: 0000000000000000 R14: 00007f50e60b5fa0 R15: 00007ffdc5a036a8 [ 248.970913][T21984] [ 249.305717][T22002] loop6: detected capacity change from 0 to 1024 [ 249.310445][T21990] netlink: 'syz.1.4182': attribute type 10 has an invalid length. [ 249.322114][T22001] team1: entered promiscuous mode [ 249.339505][T22002] EXT4-fs: Ignoring removed nobh option [ 249.345152][T22002] EXT4-fs: Ignoring removed bh option [ 249.351327][T22001] team1: entered allmulticast mode [ 249.415913][T22002] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.441081][T22002] lo speed is unknown, defaulting to 1000 [ 249.446895][T22002] lo speed is unknown, defaulting to 1000 [ 249.453457][T22002] lo speed is unknown, defaulting to 1000 [ 249.460556][T22002] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 249.471545][T22002] lo speed is unknown, defaulting to 1000 [ 249.478052][T22002] lo speed is unknown, defaulting to 1000 [ 249.484254][T22002] lo speed is unknown, defaulting to 1000 [ 249.490647][T22002] lo speed is unknown, defaulting to 1000 [ 249.496929][T22002] lo speed is unknown, defaulting to 1000 [ 249.503434][T22002] lo speed is unknown, defaulting to 1000 [ 249.510039][T22002] lo speed is unknown, defaulting to 1000 [ 249.521164][T22051] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4192' sets config #1 [ 249.700837][T22068] xt_connbytes: Forcing CT accounting to be enabled [ 249.721770][ T9918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.741008][T22068] set match dimension is over the limit! [ 249.763952][T22050] lo speed is unknown, defaulting to 1000 [ 249.808837][T22076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22076 comm=syz.6.4198 [ 249.862446][T22095] loop1: detected capacity change from 0 to 128 [ 249.911742][T22095] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 249.920020][T22095] FAT-fs (loop1): Filesystem has been set read-only [ 250.015339][T22095] syz.1.4200: attempt to access beyond end of device [ 250.015339][T22095] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 250.088606][T22095] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.096701][T22095] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 250.282022][T22118] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.4205' sets config #1 [ 250.361180][T22124] loop8: detected capacity change from 0 to 1024 [ 250.380972][T22124] EXT4-fs (loop8): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 250.420061][T22124] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.561996][T19416] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.582522][ T7659] hid-generic FFFC:0003:0000.001C: unknown main item tag 0x0 [ 250.590252][ T7659] hid-generic FFFC:0003:0000.001C: unknown main item tag 0x0 [ 250.598079][ T7659] hid-generic FFFC:0003:0000.001C: unknown main item tag 0x0 [ 250.605640][ T7659] hid-generic FFFC:0003:0000.001C: unknown main item tag 0x0 [ 250.613331][ T7659] hid-generic FFFC:0003:0000.001C: unknown main item tag 0x0 [ 250.620907][ T7659] hid-generic FFFC:0003:0000.001C: unknown main item tag 0x0 [ 250.667048][ T7659] hid-generic FFFC:0003:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.859970][T22160] __nla_validate_parse: 5 callbacks suppressed [ 250.859991][T22160] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4215'. [ 250.917903][T22162] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4216'. [ 250.936760][T22164] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.4217' sets config #1 [ 250.951888][T22160] team1: entered promiscuous mode [ 250.987104][T22160] team1: entered allmulticast mode [ 250.992464][T22162] loop8: detected capacity change from 0 to 1024 [ 251.018021][T22162] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.055117][T22162] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 251.068833][T22202] netlink: 308 bytes leftover after parsing attributes in process `syz.7.4219'. [ 251.089695][T22162] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e02c, mo2=0000] [ 251.139589][T22162] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 2: comm syz.8.4216: lblock 2 mapped to illegal pblock 2 (length 1) [ 251.204162][T22162] EXT4-fs (loop8): Remounting filesystem read-only [ 251.238022][T22210] syz!: rxe_newlink: already configured on team_slave_0 [ 251.249848][T22162] EXT4-fs (loop8): 1 orphan inode deleted [ 251.286723][T22162] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.327658][T22162] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.339547][T22209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4222'. [ 251.349474][T22209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4222'. [ 251.387070][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 251.387123][ T29] audit: type=1326 audit(2000000669.907:18574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22161 comm="syz.8.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f92b296d290 code=0x7ffc0000 [ 251.417213][ T29] audit: type=1326 audit(2000000669.907:18575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22161 comm="syz.8.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f92b296e52b code=0x7ffc0000 [ 251.438105][T22209] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4222'. [ 251.440970][ T29] audit: type=1326 audit(2000000669.907:18576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22161 comm="syz.8.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f92b296d58a code=0x7ffc0000 [ 251.441015][ T29] audit: type=1326 audit(2000000669.917:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22161 comm="syz.8.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 251.441107][ T29] audit: type=1326 audit(2000000669.917:18578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22161 comm="syz.8.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 251.450502][T22209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4222'. [ 251.474170][ T29] audit: type=1326 audit(2000000669.917:18579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22161 comm="syz.8.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 251.474215][ T29] audit: type=1326 audit(2000000669.917:18580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22161 comm="syz.8.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 251.474264][ T29] audit: type=1326 audit(2000000669.917:18581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22161 comm="syz.8.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 251.474301][ T29] audit: type=1326 audit(2000000669.917:18582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22161 comm="syz.8.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 251.474379][ T29] audit: type=1326 audit(2000000669.917:18583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22161 comm="syz.8.4216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92b296e929 code=0x7ffc0000 [ 251.510429][ T23] hid-generic FFFC:0003:0000.001D: unknown main item tag 0x0 [ 251.658552][ T23] hid-generic FFFC:0003:0000.001D: unknown main item tag 0x0 [ 251.666063][ T23] hid-generic FFFC:0003:0000.001D: unknown main item tag 0x0 [ 251.673575][ T23] hid-generic FFFC:0003:0000.001D: unknown main item tag 0x0 [ 251.681141][ T23] hid-generic FFFC:0003:0000.001D: unknown main item tag 0x0 [ 251.688774][ T23] hid-generic FFFC:0003:0000.001D: unknown main item tag 0x0 [ 251.706674][T22221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22221 comm=syz.1.4225 [ 251.722478][ T23] hid-generic FFFC:0003:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 251.869019][T22237] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.4228' sets config #1 [ 251.938708][T22242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.964509][T22246] loop8: detected capacity change from 0 to 128 [ 251.976979][T22242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.999990][T22246] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 252.007948][T22246] FAT-fs (loop8): Filesystem has been set read-only [ 252.031160][T22258] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4234'. [ 252.040282][T22246] syz.8.4231: attempt to access beyond end of device [ 252.040282][T22246] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 252.062327][T22258] team2: entered promiscuous mode [ 252.068207][T22246] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 252.076135][T22246] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 252.084408][T22258] team2: entered allmulticast mode [ 252.123880][T22297] netlink: 308 bytes leftover after parsing attributes in process `syz.6.4236'. [ 252.140034][T22298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4237'. [ 252.171877][ T7660] hid-generic FFFC:0003:0000.001E: unknown main item tag 0x0 [ 252.179503][ T7660] hid-generic FFFC:0003:0000.001E: unknown main item tag 0x0 [ 252.187128][ T7660] hid-generic FFFC:0003:0000.001E: unknown main item tag 0x0 [ 252.194639][ T7660] hid-generic FFFC:0003:0000.001E: unknown main item tag 0x0 [ 252.202206][ T7660] hid-generic FFFC:0003:0000.001E: unknown main item tag 0x0 [ 252.209758][ T7660] hid-generic FFFC:0003:0000.001E: unknown main item tag 0x0 [ 252.247516][ T7660] hid-generic FFFC:0003:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.290767][T22325] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4243' sets config #1 [ 252.341038][T22331] loop6: detected capacity change from 0 to 128 [ 252.357593][T22335] loop1: detected capacity change from 0 to 128 [ 252.367035][T22335] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 252.375049][T22335] FAT-fs (loop1): Filesystem has been set read-only [ 252.383783][T22335] syz.1.4248: attempt to access beyond end of device [ 252.383783][T22335] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 252.404523][T22335] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 252.412488][T22335] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 252.535746][T22372] loop1: detected capacity change from 0 to 1024 [ 252.551382][T22372] EXT4-fs: Ignoring removed orlov option [ 252.557231][T22372] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.565322][T22376] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22376 comm=syz.8.4255 [ 252.601308][T22374] loop7: detected capacity change from 0 to 256 [ 252.615779][T22374] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 252.917848][T22389] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.4260' sets config #1 [ 253.133766][T22396] lo speed is unknown, defaulting to 1000 [ 253.165317][T22422] loop6: detected capacity change from 0 to 128 [ 253.170523][T22372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.176643][T22422] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 253.191702][T22422] FAT-fs (loop6): Filesystem has been set read-only [ 253.198936][T22422] syz.6.4264: attempt to access beyond end of device [ 253.198936][T22422] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 253.212801][T22422] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 253.220836][T22422] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 253.232261][T16669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.292820][T22456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.303090][T22456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.315856][T22460] loop6: detected capacity change from 0 to 2048 [ 253.323000][T22460] EXT4-fs: Ignoring removed nobh option [ 253.339211][T22460] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.600281][ T9918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.609838][T22485] loop8: detected capacity change from 0 to 512 [ 253.617650][T22485] journal_path: Non-blockdev passed as './bus' [ 253.623878][T22485] EXT4-fs: error: could not find journal device path [ 253.626257][T22482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.639952][T22482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.797490][T22503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22503 comm=syz.6.4277 [ 253.989831][T22526] cgroup: release_agent respecified [ 254.150370][T22541] netlink: 'syz.0.4287': attribute type 7 has an invalid length. [ 254.158691][T22541] netlink: 'syz.0.4287': attribute type 8 has an invalid length. [ 254.170808][T22541] syz_tun: entered promiscuous mode [ 254.176973][T22541] syz_tun: left promiscuous mode [ 254.292162][T22549] loop7: detected capacity change from 0 to 128 [ 254.301309][T22549] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 254.309346][T22549] FAT-fs (loop7): Filesystem has been set read-only [ 254.317987][T22549] syz.7.4289: attempt to access beyond end of device [ 254.317987][T22549] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 254.333340][T22549] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 254.338231][T22554] FAULT_INJECTION: forcing a failure. [ 254.338231][T22554] name failslab, interval 1, probability 0, space 0, times 0 [ 254.341294][T22549] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 254.353908][T22554] CPU: 0 UID: 0 PID: 22554 Comm: syz.0.4291 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 254.353945][T22554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.353990][T22554] Call Trace: [ 254.353997][T22554] [ 254.354008][T22554] __dump_stack+0x1d/0x30 [ 254.354043][T22554] dump_stack_lvl+0xe8/0x140 [ 254.354066][T22554] dump_stack+0x15/0x1b [ 254.354111][T22554] should_fail_ex+0x265/0x280 [ 254.354149][T22554] should_failslab+0x8c/0xb0 [ 254.354316][T22554] kmem_cache_alloc_node_noprof+0x57/0x320 [ 254.354363][T22554] ? __alloc_skb+0x101/0x320 [ 254.354539][T22554] __alloc_skb+0x101/0x320 [ 254.354581][T22554] __ipv6_ifa_notify+0x126/0x880 [ 254.354616][T22554] ? fib6_flush_trees+0x165/0x1f0 [ 254.354647][T22554] ? __pfx_fib6_clean_node+0x10/0x10 [ 254.354783][T22554] ? __pfx_fib6_flush_trees+0x10/0x10 [ 254.354815][T22554] add_addr+0x154/0x1e0 [ 254.354852][T22554] addrconf_init_auto_addrs+0x353/0x730 [ 254.354912][T22554] ? __pfx_taprio_dev_notifier+0x10/0x10 [ 254.355029][T22554] ? taprio_dev_notifier+0xed/0x6f0 [ 254.355063][T22554] ? netlink_broadcast_filtered+0xb9e/0xc00 [ 254.355108][T22554] ? tun_device_event+0x49/0x980 [ 254.355183][T22554] ? _raw_spin_unlock+0x26/0x50 [ 254.355215][T22554] ? cbs_dev_notifier+0xf7/0x210 [ 254.355243][T22554] ? addrconf_link_ready+0xc4/0xf0 [ 254.355277][T22554] addrconf_notify+0x72c/0x930 [ 254.355369][T22554] ? __pfx_addrconf_notify+0x10/0x10 [ 254.355403][T22554] raw_notifier_call_chain+0x6f/0x1b0 [ 254.355464][T22554] ? call_netdevice_notifiers_info+0x9c/0x100 [ 254.355627][T22554] call_netdevice_notifiers_info+0xae/0x100 [ 254.355738][T22554] __dev_notify_flags+0xff/0x1a0 [ 254.355802][T22554] netif_change_flags+0xac/0xd0 [ 254.355853][T22554] do_setlink+0x9d2/0x2810 [ 254.355891][T22554] ? selinux_capable+0x1f9/0x270 [ 254.356037][T22554] ? security_capable+0x83/0x90 [ 254.356075][T22554] ? ns_capable+0x7d/0xb0 [ 254.356145][T22554] ? netlink_ns_capable+0x86/0xa0 [ 254.356197][T22554] rtnl_newlink+0xd8b/0x12d0 [ 254.356246][T22554] ? rep_movs_alternative+0x1e/0x90 [ 254.356283][T22554] ? copy_from_user_nofault+0xd5/0x120 [ 254.356347][T22554] ? bpf_probe_read_user+0x6c/0x70 [ 254.356393][T22554] ? __rcu_read_unlock+0x34/0x70 [ 254.356542][T22554] ? __rcu_read_unlock+0x4f/0x70 [ 254.356571][T22554] ? avc_has_perm_noaudit+0x1b1/0x200 [ 254.356614][T22554] ? selinux_capable+0x1f9/0x270 [ 254.356661][T22554] ? security_capable+0x83/0x90 [ 254.356773][T22554] ? ns_capable+0x7d/0xb0 [ 254.356799][T22554] ? __pfx_rtnl_newlink+0x10/0x10 [ 254.356826][T22554] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 254.356855][T22554] netlink_rcv_skb+0x123/0x220 [ 254.356923][T22554] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 254.356964][T22554] rtnetlink_rcv+0x1c/0x30 [ 254.357008][T22554] netlink_unicast+0x59e/0x670 [ 254.357053][T22554] netlink_sendmsg+0x58b/0x6b0 [ 254.357082][T22554] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.357162][T22554] __sock_sendmsg+0x142/0x180 [ 254.357200][T22554] ____sys_sendmsg+0x31e/0x4e0 [ 254.357310][T22554] ___sys_sendmsg+0x17b/0x1d0 [ 254.357378][T22554] __x64_sys_sendmsg+0xd4/0x160 [ 254.357439][T22554] x64_sys_call+0x2999/0x2fb0 [ 254.357503][T22554] do_syscall_64+0xd2/0x200 [ 254.357529][T22554] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 254.357582][T22554] ? clear_bhb_loop+0x40/0x90 [ 254.357656][T22554] ? clear_bhb_loop+0x40/0x90 [ 254.357688][T22554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.357786][T22554] RIP: 0033:0x7fe57d47e929 [ 254.357811][T22554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.357838][T22554] RSP: 002b:00007fe57bae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.357891][T22554] RAX: ffffffffffffffda RBX: 00007fe57d6a5fa0 RCX: 00007fe57d47e929 [ 254.357910][T22554] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 254.357928][T22554] RBP: 00007fe57bae7090 R08: 0000000000000000 R09: 0000000000000000 [ 254.357959][T22554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.357977][T22554] R13: 0000000000000000 R14: 00007fe57d6a5fa0 R15: 00007ffd6e6983f8 [ 254.358005][T22554] [ 254.409048][T22554] 0ªX¹¦D: left allmulticast mode [ 254.801618][T22554] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.824352][T22559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22559 comm=syz.7.4292 [ 254.985965][T22581] syz.0.4296: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 255.000893][T22581] CPU: 1 UID: 0 PID: 22581 Comm: syz.0.4296 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 255.000999][T22581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.001013][T22581] Call Trace: [ 255.001020][T22581] [ 255.001028][T22581] __dump_stack+0x1d/0x30 [ 255.001120][T22581] dump_stack_lvl+0xe8/0x140 [ 255.001147][T22581] dump_stack+0x15/0x1b [ 255.001168][T22581] warn_alloc+0x12b/0x1a0 [ 255.001226][T22581] __vmalloc_node_range_noprof+0x9c/0xe00 [ 255.001268][T22581] ? __futex_wait+0x1ff/0x260 [ 255.001321][T22581] ? __pfx_futex_wake_mark+0x10/0x10 [ 255.001368][T22581] ? __rcu_read_unlock+0x4f/0x70 [ 255.001395][T22581] ? avc_has_perm_noaudit+0x1b1/0x200 [ 255.001429][T22581] ? should_fail_ex+0x30/0x280 [ 255.001470][T22581] ? xskq_create+0x36/0xe0 [ 255.001531][T22581] vmalloc_user_noprof+0x7d/0xb0 [ 255.001566][T22581] ? xskq_create+0x80/0xe0 [ 255.001594][T22581] xskq_create+0x80/0xe0 [ 255.001684][T22581] xsk_init_queue+0x95/0xf0 [ 255.001712][T22581] xsk_setsockopt+0x35c/0x510 [ 255.001738][T22581] ? __pfx_xsk_setsockopt+0x10/0x10 [ 255.001810][T22581] __sys_setsockopt+0x181/0x200 [ 255.001844][T22581] __x64_sys_setsockopt+0x64/0x80 [ 255.001882][T22581] x64_sys_call+0x2bd5/0x2fb0 [ 255.001952][T22581] do_syscall_64+0xd2/0x200 [ 255.001975][T22581] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 255.002003][T22581] ? clear_bhb_loop+0x40/0x90 [ 255.002144][T22581] ? clear_bhb_loop+0x40/0x90 [ 255.002166][T22581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.002193][T22581] RIP: 0033:0x7fe57d47e929 [ 255.002214][T22581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.002280][T22581] RSP: 002b:00007fe57bae7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 255.002300][T22581] RAX: ffffffffffffffda RBX: 00007fe57d6a5fa0 RCX: 00007fe57d47e929 [ 255.002332][T22581] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 255.002349][T22581] RBP: 00007fe57d500b39 R08: 0000000000000004 R09: 0000000000000000 [ 255.002367][T22581] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.002402][T22581] R13: 0000000000000000 R14: 00007fe57d6a5fa0 R15: 00007ffd6e6983f8 [ 255.002429][T22581] [ 255.002451][T22581] Mem-Info: [ 255.082980][T22562] lo speed is unknown, defaulting to 1000 [ 255.085016][T22581] active_anon:9198 inactive_anon:48 isolated_anon:0 [ 255.085016][T22581] active_file:12770 inactive_file:12747 isolated_file:0 [ 255.085016][T22581] unevictable:0 dirty:435 writeback:0 [ 255.085016][T22581] slab_reclaimable:3504 slab_unreclaimable:73720 [ 255.085016][T22581] mapped:40081 shmem:5794 pagetables:1110 [ 255.085016][T22581] sec_pagetables:0 bounce:0 [ 255.085016][T22581] kernel_misc_reclaimable:0 [ 255.085016][T22581] free:1794550 free_pcp:26838 free_cma:0 [ 255.163767][T22571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.179055][T22581] Node 0 active_anon:36792kB inactive_anon:192kB active_file:51080kB inactive_file:50988kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:160092kB dirty:1740kB writeback:0kB shmem:22944kB writeback_tmp:0kB kernel_stack:5232kB pagetables:4440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 255.179140][T22581] Node 0 [ 255.290673][T22571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.294276][T22581] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 255.362506][T22581] lowmem_reserve[]: 0 2882 7860 7860 [ 255.367976][T22581] Node 0 DMA32 free:2947836kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951364kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 255.398295][T22581] lowmem_reserve[]: 0 0 4978 4978 [ 255.398341][T22581] Node 0 Normal free:4214976kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30700kB inactive_anon:192kB active_file:51080kB inactive_file:50988kB unevictable:0kB writepending:1732kB present:5242880kB managed:5098232kB mlocked:0kB bounce:0kB free_pcp:110076kB local_pcp:47600kB free_cma:0kB [ 255.398413][T22581] lowmem_reserve[]: 0 0 0 0 [ 255.440838][T22581] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 255.453940][T22581] Node 0 DMA32: 3*4kB (M) 4*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947836kB [ 255.470358][T22581] Node 0 Normal: 3310*4kB (UME) 1689*8kB (UME) 652*16kB (UME) 360*32kB (UME) 195*64kB (UME) 133*128kB (UM) 115*256kB (UME) 58*512kB (UM) 146*1024kB (UME) 84*2048kB (UM) 917*4096kB (UM) = 4214912kB [ 255.490128][T22581] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 255.499593][T22581] 29657 total pagecache pages [ 255.504313][T22581] 44 pages in swap cache [ 255.508603][T22581] Free swap = 124816kB [ 255.512788][T22581] Total swap = 124996kB [ 255.516969][T22581] 2097051 pages RAM [ 255.520812][T22581] 0 pages HighMem/MovableOnly [ 255.525515][T22581] 80812 pages reserved [ 255.635532][T22614] loop7: detected capacity change from 0 to 256 [ 255.652343][T22614] vfat: Unknown parameter '€' [ 255.687417][T22631] loop8: detected capacity change from 0 to 128 [ 255.706214][T22631] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 255.714150][T22631] FAT-fs (loop8): Filesystem has been set read-only [ 255.726755][T22631] syz.8.4303: attempt to access beyond end of device [ 255.726755][T22631] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 255.755886][T22631] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 255.764105][T22631] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 255.809363][T22651] FAULT_INJECTION: forcing a failure. [ 255.809363][T22651] name failslab, interval 1, probability 0, space 0, times 0 [ 255.822993][T22651] CPU: 0 UID: 0 PID: 22651 Comm: syz.8.4308 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 255.823027][T22651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.823040][T22651] Call Trace: [ 255.823046][T22651] [ 255.823090][T22651] __dump_stack+0x1d/0x30 [ 255.823117][T22651] dump_stack_lvl+0xe8/0x140 [ 255.823142][T22651] dump_stack+0x15/0x1b [ 255.823180][T22651] should_fail_ex+0x265/0x280 [ 255.823224][T22651] should_failslab+0x8c/0xb0 [ 255.823254][T22651] kmem_cache_alloc_noprof+0x50/0x310 [ 255.823368][T22651] ? skb_clone+0x151/0x1f0 [ 255.823391][T22651] skb_clone+0x151/0x1f0 [ 255.823413][T22651] __netlink_deliver_tap+0x2c9/0x500 [ 255.823538][T22651] netlink_unicast+0x64c/0x670 [ 255.823586][T22651] netlink_sendmsg+0x58b/0x6b0 [ 255.823615][T22651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.823637][T22651] __sock_sendmsg+0x142/0x180 [ 255.823670][T22651] ____sys_sendmsg+0x31e/0x4e0 [ 255.823732][T22651] ___sys_sendmsg+0x17b/0x1d0 [ 255.823782][T22651] __x64_sys_sendmsg+0xd4/0x160 [ 255.823804][T22651] x64_sys_call+0x2999/0x2fb0 [ 255.823827][T22651] do_syscall_64+0xd2/0x200 [ 255.823918][T22651] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 255.823997][T22651] ? clear_bhb_loop+0x40/0x90 [ 255.824086][T22651] ? clear_bhb_loop+0x40/0x90 [ 255.824107][T22651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.824129][T22651] RIP: 0033:0x7f92b296e929 [ 255.824148][T22651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.824170][T22651] RSP: 002b:00007f92b0fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.824208][T22651] RAX: ffffffffffffffda RBX: 00007f92b2b95fa0 RCX: 00007f92b296e929 [ 255.824220][T22651] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 255.824233][T22651] RBP: 00007f92b0fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 255.824245][T22651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.824289][T22651] R13: 0000000000000000 R14: 00007f92b2b95fa0 R15: 00007ffcacd44638 [ 255.824314][T22651] [ 255.824557][T22651] netlink: 'syz.8.4308': attribute type 10 has an invalid length. [ 256.030693][T22649] lo speed is unknown, defaulting to 1000 [ 256.035728][T22651] team0: Device dummy0 is up. Set it down before adding it as a team port [ 256.089196][T22664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22664 comm=syz.8.4310 [ 256.159102][T22656] lo speed is unknown, defaulting to 1000 [ 256.165140][T22687] FAULT_INJECTION: forcing a failure. [ 256.165140][T22687] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.180485][T22687] CPU: 1 UID: 0 PID: 22687 Comm: syz.7.4309 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 256.180555][T22687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.180568][T22687] Call Trace: [ 256.180574][T22687] [ 256.180581][T22687] __dump_stack+0x1d/0x30 [ 256.180606][T22687] dump_stack_lvl+0xe8/0x140 [ 256.180632][T22687] dump_stack+0x15/0x1b [ 256.180653][T22687] should_fail_ex+0x265/0x280 [ 256.180698][T22687] should_fail+0xb/0x20 [ 256.180724][T22687] should_fail_usercopy+0x1a/0x20 [ 256.180831][T22687] copy_folio_from_iter_atomic+0x278/0x1170 [ 256.180864][T22687] ? shmem_write_begin+0xa8/0x190 [ 256.180959][T22687] ? shmem_write_begin+0xe1/0x190 [ 256.181005][T22687] generic_perform_write+0x2c2/0x490 [ 256.181032][T22687] shmem_file_write_iter+0xc5/0xf0 [ 256.181056][T22687] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 256.181108][T22687] vfs_write+0x4a0/0x8e0 [ 256.181225][T22687] ksys_write+0xda/0x1a0 [ 256.181245][T22687] __x64_sys_write+0x40/0x50 [ 256.181267][T22687] x64_sys_call+0x2cdd/0x2fb0 [ 256.181293][T22687] do_syscall_64+0xd2/0x200 [ 256.181315][T22687] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 256.181483][T22687] ? clear_bhb_loop+0x40/0x90 [ 256.181508][T22687] ? clear_bhb_loop+0x40/0x90 [ 256.181535][T22687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.181587][T22687] RIP: 0033:0x7f0a93b3d3df [ 256.181606][T22687] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 256.181628][T22687] RSP: 002b:00007f0a921a6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 256.181701][T22687] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f0a93b3d3df [ 256.181716][T22687] RDX: 0000000000040000 RSI: 00007f0a89d87000 RDI: 0000000000000009 [ 256.181732][T22687] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000462 [ 256.181747][T22687] R10: 0000200000000a82 R11: 0000000000000293 R12: 0000000000000009 [ 256.181762][T22687] R13: 00007f0a921a6ef0 R14: 00007f0a921a6eb0 R15: 00007f0a89d87000 [ 256.181786][T22687] [ 256.440504][T22710] tap0: tun_chr_ioctl cmd 2147767517 [ 256.446817][T22714] __nla_validate_parse: 8 callbacks suppressed [ 256.446839][T22714] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4311'. [ 256.462627][T22714] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4311'. [ 256.479495][T22687] loop7: detected capacity change from 0 to 512 [ 256.492739][T22687] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 256.621445][T22687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 256.650234][T22687] System zones: 1-12 [ 256.662403][T22734] FAULT_INJECTION: forcing a failure. [ 256.662403][T22734] name failslab, interval 1, probability 0, space 0, times 0 [ 256.675171][T22734] CPU: 1 UID: 0 PID: 22734 Comm: syz.8.4317 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 256.675252][T22734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.675265][T22734] Call Trace: [ 256.675272][T22734] [ 256.675282][T22734] __dump_stack+0x1d/0x30 [ 256.675309][T22734] dump_stack_lvl+0xe8/0x140 [ 256.675334][T22734] dump_stack+0x15/0x1b [ 256.675355][T22734] should_fail_ex+0x265/0x280 [ 256.675405][T22734] should_failslab+0x8c/0xb0 [ 256.675435][T22734] kmem_cache_alloc_noprof+0x50/0x310 [ 256.675469][T22734] ? skb_clone+0x151/0x1f0 [ 256.675489][T22734] skb_clone+0x151/0x1f0 [ 256.675507][T22734] __netlink_deliver_tap+0x2c9/0x500 [ 256.675658][T22734] netlink_unicast+0x64c/0x670 [ 256.675691][T22734] netlink_sendmsg+0x58b/0x6b0 [ 256.675718][T22734] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.675773][T22734] __sock_sendmsg+0x142/0x180 [ 256.675799][T22734] ____sys_sendmsg+0x31e/0x4e0 [ 256.675846][T22734] ___sys_sendmsg+0x17b/0x1d0 [ 256.675952][T22734] __x64_sys_sendmsg+0xd4/0x160 [ 256.675980][T22734] x64_sys_call+0x2999/0x2fb0 [ 256.676005][T22734] do_syscall_64+0xd2/0x200 [ 256.676088][T22734] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 256.676180][T22734] ? clear_bhb_loop+0x40/0x90 [ 256.676205][T22734] ? clear_bhb_loop+0x40/0x90 [ 256.676226][T22734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.676245][T22734] RIP: 0033:0x7f92b296e929 [ 256.676262][T22734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.676310][T22734] RSP: 002b:00007f92b0fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.676361][T22734] RAX: ffffffffffffffda RBX: 00007f92b2b95fa0 RCX: 00007f92b296e929 [ 256.676374][T22734] RDX: 0000000004000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 256.676387][T22734] RBP: 00007f92b0fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 256.676398][T22734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.676410][T22734] R13: 0000000000000000 R14: 00007f92b2b95fa0 R15: 00007ffcacd44638 [ 256.676453][T22734] [ 256.892605][ T29] kauditd_printk_skb: 281 callbacks suppressed [ 256.892621][ T29] audit: type=1400 audit(2000000676.315:18865): avc: denied { read } for pid=22731 comm="syz.1.4316" path="socket:[47906]" dev="sockfs" ino=47906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 256.892694][ T29] audit: type=1326 audit(2000000676.315:18866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 256.892725][ T29] audit: type=1326 audit(2000000676.315:18867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 256.892760][ T29] audit: type=1326 audit(2000000676.315:18868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 256.904427][T22687] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.4309: missing EA_INODE flag [ 256.923532][ T29] audit: type=1326 audit(2000000676.315:18869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 256.923634][ T29] audit: type=1326 audit(2000000676.315:18870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 256.923670][ T29] audit: type=1326 audit(2000000676.315:18871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 256.923701][ T29] audit: type=1326 audit(2000000676.315:18872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 256.923763][ T29] audit: type=1326 audit(2000000676.315:18873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 256.923853][ T29] audit: type=1326 audit(2000000676.315:18874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22731 comm="syz.1.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 257.076168][T22742] loop6: detected capacity change from 0 to 128 [ 257.101741][T22687] EXT4-fs (loop7): Remounting filesystem read-only [ 257.148668][T22742] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 257.181561][T22687] EXT4-fs (loop7): 1 orphan inode deleted [ 257.185230][T22742] FAT-fs (loop6): Filesystem has been set read-only [ 257.187721][T22742] syz.6.4318: attempt to access beyond end of device [ 257.187721][T22742] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 257.213373][T22687] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.232037][T22742] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 257.232065][T22742] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 257.266717][T22687] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.314343][T22765] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 257.326290][T22764] IPVS: stopping master sync thread 22765 ... [ 257.401259][T22780] FAULT_INJECTION: forcing a failure. [ 257.401259][T22780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.414553][T22780] CPU: 1 UID: 0 PID: 22780 Comm: syz.7.4327 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 257.414632][T22780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 257.414644][T22780] Call Trace: [ 257.414651][T22780] [ 257.414659][T22780] __dump_stack+0x1d/0x30 [ 257.414679][T22780] dump_stack_lvl+0xe8/0x140 [ 257.414743][T22780] dump_stack+0x15/0x1b [ 257.414758][T22780] should_fail_ex+0x265/0x280 [ 257.414807][T22780] should_fail+0xb/0x20 [ 257.414899][T22780] should_fail_usercopy+0x1a/0x20 [ 257.414930][T22780] _copy_from_user+0x1c/0xb0 [ 257.414987][T22780] kstrtouint_from_user+0x69/0xf0 [ 257.415025][T22780] ? 0xffffffff81000000 [ 257.415042][T22780] ? selinux_file_permission+0x1e4/0x320 [ 257.415083][T22780] proc_fail_nth_write+0x50/0x160 [ 257.415109][T22780] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 257.415126][T22780] vfs_write+0x269/0x8e0 [ 257.415183][T22780] ? vfs_read+0x47f/0x6f0 [ 257.415210][T22780] ? __rcu_read_unlock+0x4f/0x70 [ 257.415230][T22780] ? __fget_files+0x184/0x1c0 [ 257.415251][T22780] ksys_write+0xda/0x1a0 [ 257.415342][T22780] __x64_sys_write+0x40/0x50 [ 257.415357][T22780] x64_sys_call+0x2cdd/0x2fb0 [ 257.415385][T22780] do_syscall_64+0xd2/0x200 [ 257.415402][T22780] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 257.415424][T22780] ? clear_bhb_loop+0x40/0x90 [ 257.415443][T22780] ? clear_bhb_loop+0x40/0x90 [ 257.415533][T22780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.415608][T22780] RIP: 0033:0x7f0a93b3d3df [ 257.415623][T22780] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 257.415640][T22780] RSP: 002b:00007f0a921a7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 257.415710][T22780] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0a93b3d3df [ 257.415722][T22780] RDX: 0000000000000001 RSI: 00007f0a921a70a0 RDI: 0000000000000005 [ 257.415734][T22780] RBP: 00007f0a921a7090 R08: 0000000000000000 R09: 0000000000000000 [ 257.415744][T22780] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 257.415756][T22780] R13: 0000000000000000 R14: 00007f0a93d65fa0 R15: 00007ffc28174428 [ 257.415774][T22780] [ 257.656854][T22782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.666187][T22782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.679833][ T7660] lo speed is unknown, defaulting to 1000 [ 257.710914][T22790] loop1: detected capacity change from 0 to 512 [ 257.719342][T22790] EXT4-fs: Ignoring removed orlov option [ 257.727313][T22790] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 257.736105][T22790] EXT4-fs (loop1): bad geometry: block count 16777280 exceeds size of device (64 blocks) [ 257.793943][T22790] loop1: detected capacity change from 0 to 2048 [ 257.809085][T22798] netlink: 'syz.7.4333': attribute type 4 has an invalid length. [ 257.841855][T22790] Alternate GPT is invalid, using primary GPT. [ 257.848888][T22790] loop1: p1 p2 p3 [ 257.895346][T22810] loop7: detected capacity change from 0 to 128 [ 257.912347][T22810] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 257.920367][T22810] FAT-fs (loop7): Filesystem has been set read-only [ 257.929536][T22810] syz.7.4335: attempt to access beyond end of device [ 257.929536][T22810] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 257.943391][T22810] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 257.951383][T22810] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 258.004190][T22825] loop6: detected capacity change from 0 to 128 [ 258.023320][T22825] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 258.031289][T22825] FAT-fs (loop6): Filesystem has been set read-only [ 258.044883][T22825] syz.6.4339: attempt to access beyond end of device [ 258.044883][T22825] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 258.080975][T22835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22835 comm=syz.1.4340 [ 258.085342][T22831] ALSA: seq fatal error: cannot create timer (-19) [ 258.095152][T22825] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 258.108274][T22825] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 258.183350][T22848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.207831][T22848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.360367][T22865] netlink: 'syz.8.4346': attribute type 4 has an invalid length. [ 258.387359][T22869] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4344'. [ 258.403946][T22871] sch_fq: defrate 0 ignored. [ 258.426603][T22873] loop8: detected capacity change from 0 to 128 [ 258.451882][T22873] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 258.460203][T22873] FAT-fs (loop8): Filesystem has been set read-only [ 258.478127][T22873] syz.8.4348: attempt to access beyond end of device [ 258.478127][T22873] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 258.505509][T22873] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 258.513477][T22873] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 258.574994][T22887] loop8: detected capacity change from 0 to 128 [ 258.592581][T22887] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 258.600716][T22887] FAT-fs (loop8): Filesystem has been set read-only [ 258.621618][T22887] syz.8.4353: attempt to access beyond end of device [ 258.621618][T22887] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 258.621804][T22890] loop7: detected capacity change from 0 to 128 [ 258.650352][T22887] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 258.658391][T22887] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 258.665568][T22890] vfat: Unknown parameter ' ' [ 258.687393][T22890] loop7: detected capacity change from 0 to 512 [ 258.702286][T22890] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 258.714524][T22890] EXT4-fs (loop7): 1 truncate cleaned up [ 258.724890][T22890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.739643][T22890] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.818624][T22913] netlink: 'syz.1.4359': attribute type 4 has an invalid length. [ 258.848874][T22917] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22917 comm=syz.7.4360 [ 258.914354][T22928] syzkaller0: tun_chr_ioctl cmd 35111 [ 258.943821][T22928] loop8: detected capacity change from 0 to 512 [ 258.961093][T22928] EXT4-fs error (device loop8): ext4_orphan_get:1393: inode #15: comm syz.8.4363: casefold flag without casefold feature [ 258.979701][T22919] program syz.1.4361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.012115][T22942] loop6: detected capacity change from 0 to 128 [ 259.016351][T22928] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.4363: couldn't read orphan inode 15 (err -117) [ 259.040382][T22942] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 259.048467][T22942] FAT-fs (loop6): Filesystem has been set read-only [ 259.055630][T22942] syz.6.4365: attempt to access beyond end of device [ 259.055630][T22942] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 259.056027][T22928] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.078890][T22942] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 259.089925][T22942] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 259.130911][T22948] loop1: detected capacity change from 0 to 128 [ 259.144172][T22948] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 259.152268][T22948] FAT-fs (loop1): Filesystem has been set read-only [ 259.173068][T22948] syz.1.4366: attempt to access beyond end of device [ 259.173068][T22948] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 259.193010][T22948] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 259.200985][T22948] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 259.209748][T19416] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.235789][T22963] loop7: detected capacity change from 0 to 1024 [ 259.252736][T22968] netlink: 'syz.6.4371': attribute type 4 has an invalid length. [ 259.261637][T22963] EXT4-fs: Ignoring removed orlov option [ 259.287455][T22963] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.313203][T22963] EXT4-fs (loop7): shut down requested (0) [ 259.328132][T22963] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 259.345605][T22963] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 259.369607][T22991] loop8: detected capacity change from 0 to 128 [ 259.384604][T22991] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 259.392582][T22991] FAT-fs (loop8): Filesystem has been set read-only [ 259.402685][T22982] loop1: detected capacity change from 0 to 512 [ 259.416762][T14479] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.428735][T22991] syz.8.4377: attempt to access beyond end of device [ 259.428735][T22991] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 259.443987][T22982] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 259.460726][T22991] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 259.468991][T22991] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 259.480094][T22982] EXT4-fs (loop1): orphan cleanup on readonly fs [ 259.489827][T22999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22999 comm=syz.7.4378 [ 259.506242][T22982] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 259.523446][T22982] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 259.558678][T22982] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4373: bg 0: block 40: padding at end of block bitmap is not set [ 259.581267][T23010] loop8: detected capacity change from 0 to 512 [ 259.598885][T22982] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 259.622232][T22982] EXT4-fs (loop1): 1 truncate cleaned up [ 259.631225][T23010] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.654600][T22982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.656097][T23010] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.772985][T23019] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #18: comm syz.8.4379: corrupted inode contents [ 259.812884][T23019] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #18: comm syz.8.4379: mark_inode_dirty error [ 259.844788][T23019] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #18: comm syz.8.4379: corrupted inode contents [ 259.865470][T23019] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2991: inode #18: comm syz.8.4379: mark_inode_dirty error [ 259.884047][T23019] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2994: inode #18: comm syz.8.4379: mark inode dirty (error -117) [ 259.907073][T23019] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 259.916886][T16669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.949408][T23036] loop7: detected capacity change from 0 to 128 [ 259.959064][T19416] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.971990][T23036] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 259.980018][T23036] FAT-fs (loop7): Filesystem has been set read-only [ 259.997171][T23036] syz.7.4382: attempt to access beyond end of device [ 259.997171][T23036] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 260.001873][T23048] netlink: 'syz.1.4385': attribute type 4 has an invalid length. [ 260.020599][T23049] 9pnet_fd: Insufficient options for proto=fd [ 260.027054][T23036] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 260.034965][T23036] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 260.049014][T23049] loop8: detected capacity change from 0 to 1024 [ 260.090986][T23049] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.114758][T23065] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4389'. [ 260.125023][T19416] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.140078][T23065] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4389'. [ 260.175088][T23084] loop8: detected capacity change from 0 to 128 [ 260.188315][T23084] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 260.196323][T23084] FAT-fs (loop8): Filesystem has been set read-only [ 260.204977][T23084] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 260.212918][T23084] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 260.322207][T23099] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23099 comm=syz.7.4393 [ 260.489422][T23114] netlink: 'syz.8.4398': attribute type 4 has an invalid length. [ 260.497651][T23095] loop6: detected capacity change from 0 to 32768 [ 260.532617][T23118] loop8: detected capacity change from 0 to 128 [ 260.540726][T23095] loop6: p1 p2 p3 < > [ 260.547241][T23095] loop6: p1 size 242222080 extends beyond EOD, truncated [ 260.562271][T23118] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 260.570407][T23118] FAT-fs (loop8): Filesystem has been set read-only [ 260.587744][T23095] loop6: p2 start 4294967295 is beyond EOD, truncated [ 260.597235][T23118] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 260.605159][T23118] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 260.650343][T23133] netlink: 'syz.8.4401': attribute type 4 has an invalid length. [ 260.660520][T23133] netlink: 'syz.8.4401': attribute type 4 has an invalid length. [ 260.741215][T23148] syzkaller1: entered promiscuous mode [ 260.746779][T23148] syzkaller1: entered allmulticast mode [ 260.771398][T23156] loop6: detected capacity change from 0 to 128 [ 260.794023][T23156] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 260.802067][T23156] FAT-fs (loop6): Filesystem has been set read-only [ 260.825224][T23156] bio_check_eod: 2 callbacks suppressed [ 260.825244][T23156] syz.6.4402: attempt to access beyond end of device [ 260.825244][T23156] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 260.871593][T23156] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 260.879849][T23156] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 260.938372][T23172] loop1: detected capacity change from 0 to 128 [ 260.945938][T23172] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.960017][T23172] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 260.991403][T23170] netlink: 'syz.6.4409': attribute type 4 has an invalid length. [ 261.029662][T23180] loop6: detected capacity change from 0 to 128 [ 261.042924][T23179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4410'. [ 261.053412][T23182] FAULT_INJECTION: forcing a failure. [ 261.053412][T23182] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 261.066876][T23182] CPU: 0 UID: 0 PID: 23182 Comm: syz.8.4412 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 261.066914][T23182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.066931][T23182] Call Trace: [ 261.066940][T23182] [ 261.066950][T23182] __dump_stack+0x1d/0x30 [ 261.067045][T23182] dump_stack_lvl+0xe8/0x140 [ 261.067064][T23182] dump_stack+0x15/0x1b [ 261.067080][T23182] should_fail_ex+0x265/0x280 [ 261.067114][T23182] should_fail_alloc_page+0xf2/0x100 [ 261.067192][T23182] __alloc_frozen_pages_noprof+0xff/0x360 [ 261.067239][T23182] alloc_pages_mpol+0xb3/0x250 [ 261.067274][T23182] folio_alloc_mpol_noprof+0x39/0x80 [ 261.067350][T23182] shmem_get_folio_gfp+0x3cf/0xd60 [ 261.067390][T23182] shmem_write_begin+0xa8/0x190 [ 261.067426][T23182] generic_perform_write+0x184/0x490 [ 261.067494][T23182] shmem_file_write_iter+0xc5/0xf0 [ 261.067523][T23182] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 261.067630][T23182] vfs_write+0x4a0/0x8e0 [ 261.067668][T23182] ksys_write+0xda/0x1a0 [ 261.067689][T23182] __x64_sys_write+0x40/0x50 [ 261.067743][T23182] x64_sys_call+0x2cdd/0x2fb0 [ 261.067771][T23182] do_syscall_64+0xd2/0x200 [ 261.067794][T23182] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 261.067826][T23182] ? clear_bhb_loop+0x40/0x90 [ 261.067911][T23182] ? clear_bhb_loop+0x40/0x90 [ 261.067949][T23182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.068018][T23182] RIP: 0033:0x7f92b296d3df [ 261.068036][T23182] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 261.068054][T23182] RSP: 002b:00007f92b0fd6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 261.068072][T23182] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f92b296d3df [ 261.068085][T23182] RDX: 0000000000040000 RSI: 00007f92a8bb7000 RDI: 0000000000000007 [ 261.068099][T23182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000445 [ 261.068121][T23182] R10: 00000000000003bc R11: 0000000000000293 R12: 0000000000000007 [ 261.068138][T23182] R13: 00007f92b0fd6ef0 R14: 00007f92b0fd6eb0 R15: 00007f92a8bb7000 [ 261.068164][T23182] [ 261.328714][T23180] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 261.336699][T23180] FAT-fs (loop6): Filesystem has been set read-only [ 261.368655][T23186] serio: Serial port ptm1 [ 261.374811][T23180] syz.6.4411: attempt to access beyond end of device [ 261.374811][T23180] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 261.402041][T23196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23196 comm=syz.7.4416 [ 261.414824][T23180] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 261.417754][T23195] FAULT_INJECTION: forcing a failure. [ 261.417754][T23195] name failslab, interval 1, probability 0, space 0, times 0 [ 261.422814][T23180] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 261.435551][T23195] CPU: 1 UID: 0 PID: 23195 Comm: syz.0.4415 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 261.435596][T23195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 261.435615][T23195] Call Trace: [ 261.435626][T23195] [ 261.435638][T23195] __dump_stack+0x1d/0x30 [ 261.435730][T23195] dump_stack_lvl+0xe8/0x140 [ 261.435756][T23195] dump_stack+0x15/0x1b [ 261.435779][T23195] should_fail_ex+0x265/0x280 [ 261.435834][T23195] ? bpf_prog_alloc_no_stats+0xc4/0x390 [ 261.435917][T23195] should_failslab+0x8c/0xb0 [ 261.435951][T23195] __kmalloc_cache_noprof+0x4c/0x320 [ 261.435992][T23195] bpf_prog_alloc_no_stats+0xc4/0x390 [ 261.436092][T23195] bpf_prog_alloc+0x3c/0x150 [ 261.436135][T23195] bpf_prog_create_from_user+0x7d/0x260 [ 261.436181][T23195] ? __pfx_seccomp_check_filter+0x10/0x10 [ 261.436273][T23195] do_seccomp+0x5ef/0xa40 [ 261.436304][T23195] ? fput+0x8f/0xc0 [ 261.436368][T23195] ? ksys_write+0x192/0x1a0 [ 261.436473][T23195] __x64_sys_seccomp+0x40/0x50 [ 261.436514][T23195] x64_sys_call+0x2395/0x2fb0 [ 261.436590][T23195] do_syscall_64+0xd2/0x200 [ 261.436616][T23195] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 261.436712][T23195] ? clear_bhb_loop+0x40/0x90 [ 261.436741][T23195] ? clear_bhb_loop+0x40/0x90 [ 261.436776][T23195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.436812][T23195] RIP: 0033:0x7fe57d47e929 [ 261.436835][T23195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.436859][T23195] RSP: 002b:00007fe57bae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 261.436886][T23195] RAX: ffffffffffffffda RBX: 00007fe57d6a5fa0 RCX: 00007fe57d47e929 [ 261.436904][T23195] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000001 [ 261.436921][T23195] RBP: 00007fe57bae7090 R08: 0000000000000000 R09: 0000000000000000 [ 261.436939][T23195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.436956][T23195] R13: 0000000000000000 R14: 00007fe57d6a5fa0 R15: 00007ffd6e6983f8 [ 261.437087][T23195] [ 261.653897][T18008] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 261.732672][T23217] loop6: detected capacity change from 0 to 128 [ 261.750803][T23217] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 261.758805][T23217] FAT-fs (loop6): Filesystem has been set read-only [ 261.776848][T23220] netlink: 'syz.1.4421': attribute type 4 has an invalid length. [ 261.783241][T23217] syz.6.4420: attempt to access beyond end of device [ 261.783241][T23217] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 261.798514][T23217] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 261.806581][T23217] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 261.974207][ T29] kauditd_printk_skb: 700 callbacks suppressed [ 261.974226][ T29] audit: type=1326 audit(2000000681.515:19574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 261.982036][T23242] FAULT_INJECTION: forcing a failure. [ 261.982036][T23242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.017410][T23242] CPU: 0 UID: 0 PID: 23242 Comm: syz.0.4425 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 262.017515][T23242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.017541][T23242] Call Trace: [ 262.017550][T23242] [ 262.017560][T23242] __dump_stack+0x1d/0x30 [ 262.017586][T23242] dump_stack_lvl+0xe8/0x140 [ 262.017643][T23242] dump_stack+0x15/0x1b [ 262.017659][T23242] should_fail_ex+0x265/0x280 [ 262.017695][T23242] should_fail+0xb/0x20 [ 262.017790][T23242] should_fail_usercopy+0x1a/0x20 [ 262.017828][T23242] _copy_from_user+0x1c/0xb0 [ 262.017850][T23242] restore_altstack+0x4b/0x2d0 [ 262.017878][T23242] ? __set_task_blocked+0x23a/0x2a0 [ 262.017966][T23242] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 262.018057][T23242] ? bpf_probe_write_user+0x83/0xc0 [ 262.018117][T23242] ? __rcu_read_unlock+0x4f/0x70 [ 262.018140][T23242] ? bpf_trace_run2+0x124/0x1c0 [ 262.018196][T23242] ? fpu__clear_user_states+0x63/0x1e0 [ 262.018259][T23242] ? __bpf_trace_sys_enter+0x10/0x30 [ 262.018286][T23242] ? trace_sys_enter+0xd0/0x110 [ 262.018322][T23242] x64_sys_call+0x2e8a/0x2fb0 [ 262.018350][T23242] do_syscall_64+0xd2/0x200 [ 262.018403][T23242] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 262.018435][T23242] ? clear_bhb_loop+0x40/0x90 [ 262.018459][T23242] ? clear_bhb_loop+0x40/0x90 [ 262.018565][T23242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.018589][T23242] RIP: 0033:0x7fe57d41ab19 [ 262.018609][T23242] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 262.018632][T23242] RSP: 002b:00007fe57bac5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 262.018727][T23242] RAX: ffffffffffffffda RBX: 00007fe57d6a6080 RCX: 00007fe57d41ab19 [ 262.018743][T23242] RDX: 00007fe57bac5a80 RSI: 00007fe57bac5bb0 RDI: 0000000000000021 [ 262.018759][T23242] RBP: 00007fe57bac6090 R08: 0000000000000000 R09: 0000000000000000 [ 262.018775][T23242] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 262.018789][T23242] R13: 0000000000000000 R14: 00007fe57d6a6080 R15: 00007ffd6e6983f8 [ 262.018808][T23242] [ 262.028310][T23238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.251996][ T29] audit: type=1326 audit(2000000681.545:19575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 262.275807][ T29] audit: type=1326 audit(2000000681.545:19576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 262.299552][ T29] audit: type=1326 audit(2000000681.545:19577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 262.323301][ T29] audit: type=1326 audit(2000000681.565:19578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 262.347014][ T29] audit: type=1326 audit(2000000681.565:19579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 262.370872][ T29] audit: type=1326 audit(2000000681.565:19580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 262.394574][ T29] audit: type=1326 audit(2000000681.575:19581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc29f93d290 code=0x7ffc0000 [ 262.402297][T23253] netlink: 'syz.7.4429': attribute type 10 has an invalid length. [ 262.418469][ T29] audit: type=1326 audit(2000000681.575:19582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc29f93e52b code=0x7ffc0000 [ 262.449847][ T29] audit: type=1326 audit(2000000681.575:19583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23237 comm="syz.1.4426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc29f93e52b code=0x7ffc0000 [ 262.475421][T23238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.492656][T23253] team0: Device veth0_macvtap failed to register rx_handler [ 262.524943][T23258] loop7: detected capacity change from 0 to 128 [ 262.535999][T23258] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 262.544083][T23258] FAT-fs (loop7): Filesystem has been set read-only [ 262.560059][T23258] syz.7.4430: attempt to access beyond end of device [ 262.560059][T23258] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 262.575355][T23258] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 262.583382][T23258] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 262.742570][T23270] netlink: 'syz.6.4433': attribute type 4 has an invalid length. [ 263.442700][T23288] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 263.488083][T23291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23291 comm=syz.0.4439 [ 263.519103][T23297] FAULT_INJECTION: forcing a failure. [ 263.519103][T23297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.532623][T23297] CPU: 1 UID: 0 PID: 23297 Comm: syz.7.4441 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 263.532714][T23297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 263.532732][T23297] Call Trace: [ 263.532742][T23297] [ 263.532750][T23297] __dump_stack+0x1d/0x30 [ 263.532774][T23297] dump_stack_lvl+0xe8/0x140 [ 263.532793][T23297] dump_stack+0x15/0x1b [ 263.532809][T23297] should_fail_ex+0x265/0x280 [ 263.532867][T23297] should_fail_alloc_page+0xf2/0x100 [ 263.532899][T23297] __alloc_frozen_pages_noprof+0xff/0x360 [ 263.532988][T23297] alloc_pages_mpol+0xb3/0x250 [ 263.533031][T23297] folio_alloc_mpol_noprof+0x39/0x80 [ 263.533067][T23297] shmem_get_folio_gfp+0x3cf/0xd60 [ 263.533159][T23297] shmem_write_begin+0xa8/0x190 [ 263.533204][T23297] generic_perform_write+0x184/0x490 [ 263.533343][T23297] shmem_file_write_iter+0xc5/0xf0 [ 263.533403][T23297] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 263.533432][T23297] vfs_write+0x4a0/0x8e0 [ 263.533552][T23297] ksys_write+0xda/0x1a0 [ 263.533573][T23297] __x64_sys_write+0x40/0x50 [ 263.533602][T23297] x64_sys_call+0x2cdd/0x2fb0 [ 263.533624][T23297] do_syscall_64+0xd2/0x200 [ 263.533647][T23297] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 263.533682][T23297] ? clear_bhb_loop+0x40/0x90 [ 263.533759][T23297] ? clear_bhb_loop+0x40/0x90 [ 263.533789][T23297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.533817][T23297] RIP: 0033:0x7f0a93b3d3df [ 263.533861][T23297] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 263.533960][T23297] RSP: 002b:00007f0a921a6df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 263.533986][T23297] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f0a93b3d3df [ 263.534003][T23297] RDX: 0000000000040000 RSI: 00007f0a89d87000 RDI: 0000000000000007 [ 263.534019][T23297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000463 [ 263.534034][T23297] R10: 0000200000000102 R11: 0000000000000293 R12: 0000000000000007 [ 263.534116][T23297] R13: 00007f0a921a6ef0 R14: 00007f0a921a6eb0 R15: 00007f0a89d87000 [ 263.534141][T23297] [ 263.534850][T23288] SELinux: failed to load policy [ 263.922657][T23311] loop7: detected capacity change from 0 to 128 [ 263.962831][T23316] loop6: detected capacity change from 0 to 736 [ 263.964956][T23311] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 263.977316][T23311] FAT-fs (loop7): Filesystem has been set read-only [ 264.014624][T23311] syz.7.4443: attempt to access beyond end of device [ 264.014624][T23311] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 264.049915][T23322] loop1: detected capacity change from 0 to 128 [ 264.065599][T23311] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 264.073579][T23311] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 264.093576][T23322] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 264.101531][T23322] FAT-fs (loop1): Filesystem has been set read-only [ 264.120288][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4445'. [ 264.129843][T23322] syz.1.4446: attempt to access beyond end of device [ 264.129843][T23322] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 264.160689][T23325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.179074][T23322] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 264.187100][T23322] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 264.215905][T23337] netlink: 'syz.7.4448': attribute type 4 has an invalid length. [ 264.217912][T23325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.312549][T23347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=23347 comm=syz.6.4452 [ 264.394036][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4454'. [ 264.446438][T23358] loop1: detected capacity change from 0 to 512 [ 264.469730][T23358] EXT4-fs: dax option not supported [ 264.514284][T23358] loop1: detected capacity change from 0 to 512 [ 264.529396][T23358] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 264.588784][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4454'. [ 264.599909][T23358] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 264.617240][T23358] System zones: 0-2, 18-18, 34-34 [ 264.643681][T23358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.673796][T23358] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.722812][T23376] loop8: detected capacity change from 0 to 128 [ 264.732389][T16669] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.751959][T23376] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 264.760072][T23376] FAT-fs (loop8): Filesystem has been set read-only [ 264.768908][T23376] syz.8.4458: attempt to access beyond end of device [ 264.768908][T23376] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 264.784152][T23376] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 264.792094][T23376] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 264.800556][T23381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23381 comm=syz.1.4459 [ 264.819861][T23385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.828655][T23385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.837701][T23385] netlink: 'syz.6.4461': attribute type 10 has an invalid length. [ 264.854739][T23385] team0: Port device dummy0 added [ 264.868252][T23391] netlink: 'syz.8.4462': attribute type 4 has an invalid length. [ 264.913145][T23395] loop8: detected capacity change from 0 to 128 [ 264.930638][T23395] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 264.938700][T23395] FAT-fs (loop8): Filesystem has been set read-only [ 264.945469][T23395] syz.8.4464: attempt to access beyond end of device [ 264.945469][T23395] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 264.962078][T23395] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 264.970240][T23395] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 265.030936][T23404] netlink: 'syz.0.4465': attribute type 10 has an invalid length. [ 265.047782][T23404] team0: Device dummy0 is up. Set it down before adding it as a team port [ 265.080849][T23408] 9pnet_fd: Insufficient options for proto=fd [ 265.278679][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4471'. [ 265.322441][T23423] loop1: detected capacity change from 0 to 128 [ 265.331954][T23423] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 265.339906][T23423] FAT-fs (loop1): Filesystem has been set read-only [ 265.357647][T23423] syz.1.4473: attempt to access beyond end of device [ 265.357647][T23423] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 265.379094][T23423] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 265.387090][T23423] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 265.426615][T23429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.437031][T23429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.457833][T23438] loop1: detected capacity change from 0 to 128 [ 265.461849][T23419] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4471'. [ 265.468141][T23438] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 265.479445][T23432] netlink: 'syz.6.4475': attribute type 4 has an invalid length. [ 265.481733][T23438] FAT-fs (loop1): Filesystem has been set read-only [ 265.500081][T23438] syz.1.4476: attempt to access beyond end of device [ 265.500081][T23438] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 265.514698][T23438] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 265.522741][T23438] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 265.582014][T23452] 9pnet_fd: Insufficient options for proto=fd [ 265.596511][T23450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23450 comm=syz.1.4479 [ 265.809953][T23470] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4485'. [ 265.828311][T23470] $Hÿ (unregistering): Released all slaves [ 265.857524][T23510] netlink: 'syz.8.4488': attribute type 4 has an invalid length. [ 265.892430][T23516] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4492'. [ 265.911683][T23518] 9pnet_fd: Insufficient options for proto=fd [ 265.983749][T23529] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4496'. [ 266.002514][T23531] loop1: detected capacity change from 0 to 512 [ 266.018046][T23516] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4492'. [ 266.029424][T23531] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 266.037480][T23531] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 266.039641][T23533] loop6: detected capacity change from 0 to 736 [ 266.045813][T23531] EXT4-fs (loop1): orphan cleanup on readonly fs [ 266.061946][T23531] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.4497: iget: bad i_size value: 12154761577498 [ 266.075555][T23531] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4497: couldn't read orphan inode 13 (err -117) [ 266.088634][T23531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 266.111807][T23531] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.4497: dx entry: limit 65535 != root limit 120 [ 266.124038][T23531] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4497: Corrupt directory, running e2fsck is recommended [ 266.151413][T23531] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.186547][T23548] loop6: detected capacity change from 0 to 128 [ 266.203783][T23553] loop1: detected capacity change from 0 to 128 [ 266.206550][T23548] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 266.218395][T23548] FAT-fs (loop6): Filesystem has been set read-only [ 266.229731][T23558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23558 comm=syz.7.4500 [ 266.242465][T23548] syz.6.4499: attempt to access beyond end of device [ 266.242465][T23548] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 266.243372][T23553] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 266.264120][T23553] FAT-fs (loop1): Filesystem has been set read-only [ 266.271787][T23548] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 266.279759][T23548] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 266.288418][T23555] netlink: 'syz.0.4502': attribute type 4 has an invalid length. [ 266.293524][T23553] syz.1.4501: attempt to access beyond end of device [ 266.293524][T23553] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 266.312943][T23553] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 266.321097][T23553] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 266.359230][T23570] FAULT_INJECTION: forcing a failure. [ 266.359230][T23570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.372420][T23570] CPU: 1 UID: 0 PID: 23570 Comm: syz.0.4504 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 266.372458][T23570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.372475][T23570] Call Trace: [ 266.372483][T23570] [ 266.372493][T23570] __dump_stack+0x1d/0x30 [ 266.372561][T23570] dump_stack_lvl+0xe8/0x140 [ 266.372586][T23570] dump_stack+0x15/0x1b [ 266.372608][T23570] should_fail_ex+0x265/0x280 [ 266.372649][T23570] should_fail+0xb/0x20 [ 266.372769][T23570] should_fail_usercopy+0x1a/0x20 [ 266.372801][T23570] _copy_from_iter+0xcf/0xe40 [ 266.372818][T23570] ? __build_skb_around+0x1a0/0x200 [ 266.372926][T23570] ? __alloc_skb+0x223/0x320 [ 266.373001][T23570] netlink_sendmsg+0x471/0x6b0 [ 266.373053][T23570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.373080][T23570] __sock_sendmsg+0x142/0x180 [ 266.373162][T23570] ____sys_sendmsg+0x31e/0x4e0 [ 266.373208][T23570] ___sys_sendmsg+0x17b/0x1d0 [ 266.373270][T23570] __x64_sys_sendmsg+0xd4/0x160 [ 266.373314][T23570] x64_sys_call+0x2999/0x2fb0 [ 266.373392][T23570] do_syscall_64+0xd2/0x200 [ 266.373416][T23570] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 266.373448][T23570] ? clear_bhb_loop+0x40/0x90 [ 266.373468][T23570] ? clear_bhb_loop+0x40/0x90 [ 266.373498][T23570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.373525][T23570] RIP: 0033:0x7fe57d47e929 [ 266.373544][T23570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.373568][T23570] RSP: 002b:00007fe57bae7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.373592][T23570] RAX: ffffffffffffffda RBX: 00007fe57d6a5fa0 RCX: 00007fe57d47e929 [ 266.373608][T23570] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 266.373640][T23570] RBP: 00007fe57bae7090 R08: 0000000000000000 R09: 0000000000000000 [ 266.373673][T23570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.373684][T23570] R13: 0000000000000000 R14: 00007fe57d6a5fa0 R15: 00007ffd6e6983f8 [ 266.373707][T23570] [ 266.658844][T23585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.686873][T23585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.692541][T23590] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 266.721242][T23582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4508'. [ 266.775623][T23599] FAULT_INJECTION: forcing a failure. [ 266.775623][T23599] name failslab, interval 1, probability 0, space 0, times 0 [ 266.788429][T23599] CPU: 0 UID: 0 PID: 23599 Comm: syz.8.4512 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 266.788467][T23599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 266.788480][T23599] Call Trace: [ 266.788490][T23599] [ 266.788500][T23599] __dump_stack+0x1d/0x30 [ 266.788564][T23599] dump_stack_lvl+0xe8/0x140 [ 266.788591][T23599] dump_stack+0x15/0x1b [ 266.788613][T23599] should_fail_ex+0x265/0x280 [ 266.788682][T23599] should_failslab+0x8c/0xb0 [ 266.788713][T23599] kmem_cache_alloc_node_noprof+0x57/0x320 [ 266.788750][T23599] ? perf_event_alloc+0x14c/0x1680 [ 266.788788][T23599] perf_event_alloc+0x14c/0x1680 [ 266.788865][T23599] __se_sys_perf_event_open+0x615/0x11c0 [ 266.788902][T23599] ? __rcu_read_unlock+0x4f/0x70 [ 266.788980][T23599] __x64_sys_perf_event_open+0x67/0x80 [ 266.789027][T23599] x64_sys_call+0x27ec/0x2fb0 [ 266.789068][T23599] do_syscall_64+0xd2/0x200 [ 266.789093][T23599] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 266.789128][T23599] ? clear_bhb_loop+0x40/0x90 [ 266.789160][T23599] ? clear_bhb_loop+0x40/0x90 [ 266.789246][T23599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.789271][T23599] RIP: 0033:0x7f92b296e929 [ 266.789286][T23599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.789304][T23599] RSP: 002b:00007f92b0fd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 266.789329][T23599] RAX: ffffffffffffffda RBX: 00007f92b2b95fa0 RCX: 00007f92b296e929 [ 266.789361][T23599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 266.789378][T23599] RBP: 00007f92b0fd7090 R08: 0000000000000000 R09: 0000000000000000 [ 266.789394][T23599] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 266.789412][T23599] R13: 0000000000000000 R14: 00007f92b2b95fa0 R15: 00007ffcacd44638 [ 266.789436][T23599] [ 267.034529][T23603] netlink: 'syz.7.4515': attribute type 4 has an invalid length. [ 267.070179][T23606] program syz.1.4514 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.105252][T23616] loop7: detected capacity change from 0 to 128 [ 267.116338][T23618] loop6: detected capacity change from 0 to 128 [ 267.117454][T23616] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 267.130649][T23616] FAT-fs (loop7): Filesystem has been set read-only [ 267.140485][T23616] syz.7.4518: attempt to access beyond end of device [ 267.140485][T23616] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 267.145389][T23618] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 267.162465][T23618] FAT-fs (loop6): Filesystem has been set read-only [ 267.179606][T23616] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 267.187287][T23618] syz.6.4519: attempt to access beyond end of device [ 267.187287][T23618] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 267.187563][T23616] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 267.209360][T23618] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 267.217312][T23618] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 267.291801][ T29] kauditd_printk_skb: 231 callbacks suppressed [ 267.291820][ T29] audit: type=1400 audit(2000000686.835:19815): avc: denied { bind } for pid=23628 comm="syz.7.4521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.449084][T23642] loop8: detected capacity change from 0 to 164 [ 267.467861][T23648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23648 comm=syz.0.4526 [ 267.551061][ T29] audit: type=1400 audit(2000000687.065:19816): avc: denied { unmount } for pid=16669 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 267.690228][T23664] netlink: 'syz.8.4528': attribute type 4 has an invalid length. [ 267.951444][ T29] audit: type=1326 audit(2000000687.495:19817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23669 comm="syz.1.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 267.975184][ T29] audit: type=1326 audit(2000000687.495:19818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23669 comm="syz.1.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 268.027993][ T29] audit: type=1326 audit(2000000687.545:19819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23669 comm="syz.1.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 268.051842][ T29] audit: type=1326 audit(2000000687.545:19820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23669 comm="syz.1.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 268.075544][ T29] audit: type=1326 audit(2000000687.545:19821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23669 comm="syz.1.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 268.101521][ T29] audit: type=1326 audit(2000000687.575:19822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23669 comm="syz.1.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 268.125442][ T29] audit: type=1326 audit(2000000687.575:19823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23669 comm="syz.1.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 268.149197][ T29] audit: type=1326 audit(2000000687.575:19824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23669 comm="syz.1.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc29f93e929 code=0x7ffc0000 [ 268.250938][T23679] loop7: detected capacity change from 0 to 128 [ 268.265608][T23670] hub 9-0:1.0: USB hub found [ 268.276789][T23679] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 268.284799][T23679] FAT-fs (loop7): Filesystem has been set read-only [ 268.288195][T23670] hub 9-0:1.0: 8 ports detected [ 268.308894][T23684] loop6: detected capacity change from 0 to 128 [ 268.308935][T23679] syz.7.4533: attempt to access beyond end of device [ 268.308935][T23679] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 268.333193][T23684] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 268.341292][T23684] FAT-fs (loop6): Filesystem has been set read-only [ 268.353937][T23679] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 268.362094][T23679] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 268.363826][T23684] syz.6.4532: attempt to access beyond end of device [ 268.363826][T23684] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 268.408152][T23684] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 268.416069][T23684] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 268.455430][T23696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.474562][T23696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.493673][T23710] netlink: 'syz.0.4541': attribute type 4 has an invalid length. [ 268.505515][T23715] loop7: detected capacity change from 0 to 128 [ 268.519146][T23715] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 268.527267][T23715] FAT-fs (loop7): Filesystem has been set read-only [ 268.534442][T23715] syz.7.4551: attempt to access beyond end of device [ 268.534442][T23715] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 268.548486][T23715] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 268.556364][T23715] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 268.578484][T23725] 9pnet_virtio: no channels available for device [ 268.594788][T23729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23729 comm=syz.7.4544 [ 268.763644][T23741] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23741 comm=syz.0.4556 [ 268.948555][T23742] SET target dimension over the limit! [ 269.063290][T23762] loop7: detected capacity change from 0 to 128 [ 269.074565][T23762] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 269.082519][T23762] FAT-fs (loop7): Filesystem has been set read-only [ 269.091489][T23762] syz.7.4549: attempt to access beyond end of device [ 269.091489][T23762] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 269.105524][T23762] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 269.113435][T23762] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 269.190337][T23773] loop7: detected capacity change from 0 to 128 [ 269.199533][T23773] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 269.207483][T23773] FAT-fs (loop7): Filesystem has been set read-only [ 269.214211][T23773] syz.7.4553: attempt to access beyond end of device [ 269.214211][T23773] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 269.229021][T23773] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 269.230617][T23778] netlink: 'syz.0.4555': attribute type 4 has an invalid length. [ 269.237020][T23773] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 269.289767][T23787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23787 comm=syz.0.4559 [ 269.382132][T23799] Cannot find set identified by id 0 to match [ 269.394798][T23801] loop1: detected capacity change from 0 to 128 [ 269.425290][T23801] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 269.433395][T23801] FAT-fs (loop1): Filesystem has been set read-only [ 269.471514][T23801] syz.1.4562: attempt to access beyond end of device [ 269.471514][T23801] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 269.499893][T23801] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 269.507836][T23801] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 269.544517][T23808] __nla_validate_parse: 7 callbacks suppressed [ 269.544642][T23808] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4563'. [ 269.691875][T23828] loop1: detected capacity change from 0 to 128 [ 269.710487][T23828] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 269.718461][T23828] FAT-fs (loop1): Filesystem has been set read-only [ 269.741195][T23828] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 269.741312][T23831] ================================================================== [ 269.749194][T23828] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 269.757257][T23831] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 269.771799][T23831] [ 269.774158][T23831] write to 0xffffffff8688c7b0 of 8 bytes by task 23828 on cpu 1: [ 269.781923][T23831] data_alloc+0x27d/0x2b0 [ 269.786528][T23831] prb_reserve+0x808/0xaf0 [ 269.791109][T23831] vprintk_store+0x56d/0x860 [ 269.795748][T23831] vprintk_emit+0x178/0x650 [ 269.800301][T23831] vprintk_default+0x26/0x30 [ 269.805015][T23831] vprintk+0x1d/0x30 [ 269.809043][T23831] _printk+0x79/0xa0 [ 269.812984][T23831] _fat_msg+0xa4/0xd0 [ 269.817039][T23831] __fat_fs_error+0x178/0x1d0 [ 269.821902][T23831] fat_ent_read+0x52b/0x5a0 [ 269.827438][T23831] fat_get_cluster+0x4b2/0x7b0 [ 269.835272][T23831] fat_get_mapped_cluster+0xe4/0x240 [ 269.843224][T23831] fat_bmap+0x254/0x280 [ 269.849014][T23831] fat_get_block+0xd3/0x5e0 [ 269.853577][T23831] block_read_full_folio+0x1fa/0x6a0 [ 269.858908][T23831] do_mpage_readpage+0xcf4/0xe20 [ 269.863894][T23831] mpage_readahead+0x1b7/0x2e0 [ 269.868711][T23831] fat_readahead+0x1c/0x30 [ 269.873192][T23831] read_pages+0xa3/0x480 [ 269.877480][T23831] page_cache_ra_unbounded+0x347/0x380 [ 269.883088][T23831] page_cache_ra_order+0x102/0x120 [ 269.888350][T23831] do_sync_mmap_readahead+0x249/0x280 [ 269.893767][T23831] filemap_fault+0x311/0xb40 [ 269.898427][T23831] __do_fault+0xbc/0x200 [ 269.902727][T23831] handle_mm_fault+0xd69/0x2be0 [ 269.907615][T23831] do_user_addr_fault+0x3fe/0x1090 [ 269.912781][T23831] exc_page_fault+0x62/0xa0 [ 269.917432][T23831] asm_exc_page_fault+0x26/0x30 [ 269.922323][T23831] __put_user_4+0xd/0x20 [ 269.926627][T23831] __sys_socketpair+0xa6/0x430 [ 269.931530][T23831] __x64_sys_socketpair+0x52/0x60 [ 269.936646][T23831] x64_sys_call+0x23f2/0x2fb0 [ 269.941372][T23831] do_syscall_64+0xd2/0x200 [ 269.945969][T23831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.951994][T23831] [ 269.954348][T23831] read to 0xffffffff8688c7b0 of 8 bytes by task 23831 on cpu 0: [ 269.962022][T23831] prb_reserve+0x221/0xaf0 [ 269.966519][T23831] vprintk_store+0x56d/0x860 [ 269.971157][T23831] vprintk_emit+0x178/0x650 [ 269.975697][T23831] vprintk_default+0x26/0x30 [ 269.980334][T23831] vprintk+0x1d/0x30 [ 269.984360][T23831] _printk+0x79/0xa0 [ 269.988304][T23831] selinux_netlink_send+0x583/0x5f0 [ 269.993562][T23831] security_netlink_send+0x40/0x80 [ 269.998817][T23831] netlink_sendmsg+0x498/0x6b0 [ 270.003615][T23831] __sock_sendmsg+0x142/0x180 [ 270.008422][T23831] ____sys_sendmsg+0x31e/0x4e0 [ 270.013235][T23831] ___sys_sendmsg+0x17b/0x1d0 [ 270.017971][T23831] __x64_sys_sendmsg+0xd4/0x160 [ 270.022863][T23831] x64_sys_call+0x2999/0x2fb0 [ 270.027586][T23831] do_syscall_64+0xd2/0x200 [ 270.032122][T23831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.038057][T23831] [ 270.040412][T23831] value changed: 0x000000000002e9c0 -> 0x00000000000c8d50 [ 270.047561][T23831] [ 270.049922][T23831] Reported by Kernel Concurrency Sanitizer on: [ 270.056116][T23831] CPU: 0 UID: 0 PID: 23831 Comm: syz.0.4566 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(voluntary) [ 270.068647][T23831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 270.078764][T23831] ================================================================== [ 269.741189][T23831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=23831 comm=syz.0.4566 [ 270.099811][T23831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=23831 comm=syz.0.4566 [ 270.113929][T23833] netlink: 'syz.6.4568': attribute type 4 has an invalid length. [ 270.125603][T23808] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4563'. [ 270.273442][T23820] lo speed is unknown, defaulting to 1000 [ 273.367481][ T7660] page_pool_release_retry() stalled pool shutdown: id 93, 2 inflight 60 sec