last executing test programs: 6m5.863371948s ago: executing program 32 (id=552): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x90, 0xc8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r7, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {&(0x7f0000000240), r8}}, 0x18) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@cgroup, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x6a02f080, 0x0, 0xfffffffffffffd7b, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x5}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x30}, 0x40880) r10 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) 5m59.086801662s ago: executing program 33 (id=647): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x23) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2e, &(0x7f0000000040)=0x8000, 0x4) ftruncate(r0, 0x81fd) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa8"], 0x57) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu>\t\t') 5m57.90742046s ago: executing program 4 (id=660): socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x4000000, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {}, {0x5, 0x2}}}, 0x24}}, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x3fffffffffffd17, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r8, @ANYBLOB="00fbffffff000000b7080000000000007b8af8ff00000000bfa200000000040007020000f8ffffffb703000000000000b70400000000000085000000570000002b"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m54.577417781s ago: executing program 4 (id=696): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x0) 5m54.510802662s ago: executing program 4 (id=698): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x6, 0x2001000a, 0x0, &(0x7f0000000440)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) fstat(0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000100)) getrandom(&(0x7f0000000040)=""/133, 0xfffffffffffffdde, 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000340)=0x2, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109"], 0x0) 5m51.320148281s ago: executing program 4 (id=732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x6e, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x9, &(0x7f00000014c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000001540)='GPL\x00'}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000040)={0x1d, 0x0, 0x3}, 0x18) r2 = accept$phonet_pipe(r1, 0x0, &(0x7f0000000080)) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f00000000c0), 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@grpid}, {@minixdf}, {@resgid}, {@grpquota}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}]}, 0x3, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x64202) 5m50.578941032s ago: executing program 4 (id=748): socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x42000, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x4000000, {0x0, 0x0, 0x0, r2, {0xe, 0x3}, {}, {0x5, 0x2}}}, 0x24}}, 0x40004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r6}, &(0x7f0000000800), &(0x7f0000000840)=r7}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PIO_UNIMAPCLR(r5, 0x4b68, 0x0) recvmmsg(r3, &(0x7f0000000280), 0x3fffffffffffd17, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r8, @ANYBLOB="00fbffffff000000b7080000000000007b8af8ff00000000bfa200000000040007020000f8ffffffb703000000000000b70400000000000085000000570000002b"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r9}, 0x10) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m50.253928217s ago: executing program 4 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) shutdown(r2, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf888a84a0081"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="07000000000000000000050000007d3a762d93d48fbb73797a5f74756e0000000000000000000800038004000380"], 0x34}}, 0x0) sendto$inet6(r2, &(0x7f0000000440)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27132e2b75d78f1b79f5a6bb6f0645e26707d40000f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0x3, 0x4000, 0x0, 0x3e) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r12, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r12, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) ioctl$SIOCPNENABLEPIPE(r11, 0x89ed, 0x0) sendto$inet6(r2, 0x0, 0x60, 0x20004000, 0x0, 0x0) 5m50.253533127s ago: executing program 34 (id=749): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x240880c0, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x28}, [0xffffff00, 0xffffff00, 0x0, 0xff000000], [0xff, 0x0, 0x9f19fd7a5e924fa7, 0xff], 'macvtap0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x5, 0x10}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@tcpmss={{0x28}, {0x39d3, 0x9, 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) shutdown(r2, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211cf888a84a0081"], 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="07000000000000000000050000007d3a762d93d48fbb73797a5f74756e0000000000000000000800038004000380"], 0x34}}, 0x0) sendto$inet6(r2, &(0x7f0000000440)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27132e2b75d78f1b79f5a6bb6f0645e26707d40000f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0x3, 0x4000, 0x0, 0x3e) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) r12 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r12, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001680)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/253, 0xfd}], 0x2}}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x810) sendmsg$nl_generic(r12, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x4000084) ioctl$SIOCPNENABLEPIPE(r11, 0x89ed, 0x0) sendto$inet6(r2, 0x0, 0x60, 0x20004000, 0x0, 0x0) 4m58.870235204s ago: executing program 7 (id=1454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32, @ANYBLOB="0000000000000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010100000200"/28], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000008000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = dup2(r1, r2) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x5f5}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) r11 = socket$inet6(0xa, 0x1, 0x0) r12 = socket(0x15, 0x5, 0x0) getsockopt(r12, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) r13 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r13, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r16], 0x20}}, 0x0) setsockopt$inet6_mreq(r13, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000100000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000064628000fcffffff18120000", @ANYRES32=r4, @ANYBLOB="000000000000000003dc65300500000018330000020000000000000000000000b7080000000000007b8af8ff00000000b70800008f8900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705004d38019c7d63fd5500a5000000186400000a0000000000000090400000852000000200000085100000feffffff181b0000d13c3d947c0ab7d9f53ecd13e4670cf26ddecabb60561611310655bfa92674b6337ccbea5e82019ae574ecee1f0edd27a39e66b8968405f3510cb7e4b92e05c0cb8fe43b9a95b3b6dc8f6b27a5abe4c032b3a302847c464764fe7e7dadbd17b66bd5ea256a53d19cd30e066bf84a4e6024b941379fc435b0ff2f545333d615de49e2c160494c", @ANYRES32=r6, @ANYBLOB="00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x60, 0xc4, &(0x7f0000000440)=""/196, 0x41100, 0x2, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x6, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000740)=[{0x1, 0x1, 0xd}, {0x3, 0x2, 0x2, 0x2}, {0x5, 0x1, 0x3, 0xb}, {0x4, 0x2, 0x10, 0x212620bfb8bd57f8}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0xa438}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 4m57.954688518s ago: executing program 7 (id=1469): r0 = socket(0x10, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000002}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0xfffffffffffffee2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4803}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', r3, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kfree\x00', r4, 0x0, 0x6}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x75, 0x4) r6 = dup(r5) bind$unix(r6, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) getsockname$packet(r6, 0x0, &(0x7f0000000680)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4m57.779407801s ago: executing program 7 (id=1475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000030000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b08007ad815b78c1f25c684aec49f213de0a70a0700000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES64=r0, @ANYRES32, @ANYBLOB="00001d00000000000023b00000000000000000004000000000000000e99e84575f87165a2def3ff79b0a1395f902dc500eba4d538a29532f2075f5caef229bc38dd1cfd90461bfdae265b1ab36847b137326e2680998d77b604c2f597d7fa6e9bf84ef5c81d0017cb89cef81081560985e44e320af307f3f1143cf45715a6ab682d5923f3c1bfa06885280e1a3b53c50045e8daf9eb273f28a49e5a13de7eb0b2ed71eb34a57f1da6bdc4863"], 0x50) syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz7GJAkEABdA/d9zBwh1cJVeAkU2YGFmEuduJuVVsZA82YWRgsDCyjOA2ICK8l8znM/Nhwkt9XH7rJCXZd8t8p2ZYfGXIWB+3Sjv62s2rn9nOLv/3dE5JuSb5nF7069b+5bRtaZMy5tgmVodn/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3sEtAAD//5OFFa8=") r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000100002018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000000500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) semtimedop(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x60, &(0x7f0000001180)=ANY=[@ANYBLOB="24000100fdff00080000000000000000180100002020702500000000002120207bfb6a8d6fab0000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000098de2d00002b1567"], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r8, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)={0x78, r7, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc}}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{0x0, 0x2}, {}, @device_a, @broadcast, @from_mac=@device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @val={0x3, 0x1}, @void, @void, @void, @void, @void, @val={0x3c, 0x4}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6}}}]]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000800018010000", @ANYRES32, @ANYRES8=r4], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f"], 0x50) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x6) 4m57.553681974s ago: executing program 7 (id=1483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="50000000100001040000000000009f8f0000ffff", @ANYRES32=0x0, @ANYBLOB="421c0000000000001c001280090001007866726d000000000c0002800800020002000000140003007866726d3000"/56], 0x50}}, 0x4048050) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200)=@v3={0x3000000, [{0x46, 0x55}, {0x5, 0x2004}]}, 0x18, 0x0) chown(&(0x7f0000000240)='./file0\x00', 0xee00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r6}, 0x10) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) getpgid(r7) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000a40)=0x4) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f0000000100)=0xffff0080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffff0a0000000000000000000002"], 0x3c}, 0x1, 0x0, 0x0, 0x841}, 0x20000000) mount(0x0, &(0x7f0000000a00)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000ffdbdf25010000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x20000) r8 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000001f80)=@urb_type_iso={0x0, {0x0, 0x1}, 0x4, 0x42, &(0x7f0000000680)="2b0f5c14d17808b74357ab3eb8ebe9ec58f5616bcf6db2f660e49d4405417b76824fcb17091dc00ffd0837bf90db88415047f9e30e2cc3a38c55ee642e1447ea76bac68d2481dfe8b09285f72bddab140df1a4ccb2bc34c4f9c2f27e7deb4cb729b31c12956875849bc12f9f1332a9a4ae1d0fd9becba84c210e8faa4efc731fd72a6e9cb96e3a4bcd0f86901f86e0ca8eda4d945d35ab3c5aabd4da1d751593a0e2a3e6595a44d38ae01aa1880c12896890bd1ac4508c949420ff01b4941380f029b07070bc", 0xc6, 0x2, 0x9, 0x2c, 0xa, 0x0, &(0x7f0000000f80)="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", [{0xffffffff, 0x1800, 0x800}, {0x8000, 0x3, 0x9}, {0x4, 0xff99, 0x100}, {0x0, 0x3e, 0x4}, {0x2, 0x100, 0x800}, {0xc0, 0x1, 0x8}, {0xd89f, 0x75, 0x9ef7}, {0x8000, 0x7fff, 0x20}, {0x0, 0x1, 0xffff}, {0x9, 0x6, 0x1}, {0x2, 0x6, 0x80}, {0x4, 0xf01, 0x3}, {0x800, 0xe, 0x7}, {0x3, 0x4, 0x80000001}, {0x8, 0x9, 0x5}, {0x8, 0x8, 0x42af}, {0x8, 0x0, 0x8}, {0xffffffec, 0x5, 0x5}, {0xe4c, 0x9, 0x2}, {0x9, 0x8001, 0x4}, {0x31, 0x0, 0x1000}, {0x6, 0x2, 0x6}, {0xfffff6a1, 0xd, 0x1000}, {0x9, 0x4, 0x7}, {0x0, 0x5, 0x7ff}, {0xffff, 0x800, 0xff}, {0x0, 0x800, 0x33}, {0x4, 0x7fffffff, 0x200}, {0x2, 0x8, 0x7}, {0x5ae696c3, 0x4, 0xffff}, {0x1, 0x5, 0x2}, {0x100, 0x9, 0x7}, {0x7, 0x5, 0x44ce}, {0xf9d, 0x9, 0x4}, {0xc, 0xb, 0x8}, {0x0, 0x5, 0xffff0000}, {0x0, 0xfffffff7, 0x3}, {0x40, 0x6, 0x1}, {0x8, 0x0, 0x2}, {0xfffffff8, 0xbd0d, 0x1ff}, {0x401, 0x3, 0x5}, {0x8, 0x8, 0x40}, {0x0, 0x9, 0x2}, {0x40000000, 0x10, 0x4}]}) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, 0x0, r9, 0x0, 0x256) openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x440002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800) r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r13, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1031010, 0x0) open_tree(r12, &(0x7f0000000640)='\x00', 0x89901) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) syz_emit_ethernet(0xffffffffffffff71, 0x0, 0x0) 4m56.49311072s ago: executing program 7 (id=1494): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) ftruncate(r2, 0xc17a) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000000240)=""/28, 0xffd2) 4m56.48967476s ago: executing program 35 (id=1494): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0xfffffffb}]}) ftruncate(r2, 0xc17a) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r3, &(0x7f0000000240)=""/28, 0xffd2) 4m3.879463796s ago: executing program 2 (id=2232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffe9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x208000, &(0x7f0000000180)={[{@errors_remount}, {@dioread_lock}, {@noquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) write$UHID_INPUT(r1, &(0x7f00000030c0)={0x8, {"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", 0x1000}}, 0x1006) 4m3.745066578s ago: executing program 2 (id=2235): r0 = epoll_create(0x3ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000280)={0x2000000}) 4m3.698154569s ago: executing program 2 (id=2237): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = io_uring_setup(0x3c8e, &(0x7f0000000340)={0x0, 0x3, 0x800, 0x2}) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r7 = accept(r5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r7}, 0x20) recvmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) close_range(r4, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX], &(0x7f0000000040)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x1000010, &(0x7f0000000000), 0xfe, 0x475, &(0x7f0000000940)="$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") creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='qgroup_update_reserve\x00', r9, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb00, 0xf584, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0xc04, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0xfffc, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 4m3.332951324s ago: executing program 2 (id=2242): bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0), 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x2100, 0x10000, 0xfffffffe, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000340)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007bc}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@data_err_ignore}, {@bh}, {@errors_continue}]}, 0x1, 0x553, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x91511, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x6dd0, 0x2}, 0x5c70, 0x7, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="00000a0000000000b7c4c2151209abcec803000000000000850000001b000000000000000000000095000000000000009bc9a19cfbe0b2209e573baea509ff4f7ab2df806fec32d6c5670a4dc9c40a36a5c01b8d1568daf2881c7d0493b2929ab008003a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r2], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r3, 0x40044591, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r7}, &(0x7f0000000300), &(0x7f0000000200)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kmem_cache_free\x00', r8}, 0x10) sendto$inet6(r6, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x14, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m3.221906396s ago: executing program 2 (id=2247): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x800000}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYBLOB, @ANYRES32=0x0], 0x30}}, 0x40) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, 0x0, 0x4010) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r4, 0xffffffffffffffff}, &(0x7f00000004c0), 0x0}, 0x20) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x6, 0x8}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) fdatasync(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[], 0x0) write$binfmt_script(r6, &(0x7f0000000200), 0xfffffd9d) 4m3.105368008s ago: executing program 2 (id=2249): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18, 0x20040000}}], 0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@s}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) sync_file_range(0xffffffffffffffff, 0x1, 0x1200000000000, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) pipe(&(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@lazytime}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r5, &(0x7f0000000000)={0xffffffffffffff2a, 0x4d, 0x1}, 0xffffffd7) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x61) sendfile(r6, r6, 0x0, 0x800000009) 4m3.069824319s ago: executing program 36 (id=2249): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)='b', 0x1}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18, 0x20040000}}], 0x1, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@s}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) sync_file_range(0xffffffffffffffff, 0x1, 0x1200000000000, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) pipe(&(0x7f0000000080)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@lazytime}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r5, &(0x7f0000000000)={0xffffffffffffff2a, 0x4d, 0x1}, 0xffffffd7) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x61) sendfile(r6, r6, 0x0, 0x800000009) 1m52.824569412s ago: executing program 9 (id=4001): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) nanosleep(&(0x7f00000004c0)={0x77359400}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) 1m51.906689956s ago: executing program 9 (id=4011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000100000000", @ANYRES32, @ANYBLOB="0000000000000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010100000200"/28], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="030000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) dup2(r1, r2) r3 = socket$inet(0x2, 0x1, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x5f5}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9], 0x20}}, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 1m51.716321569s ago: executing program 9 (id=4014): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f0000000180)}) iopl(0x3) 1m51.713547319s ago: executing program 9 (id=4017): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1b, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000028002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) personality(0x4000000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_SETMODE(r3, 0x5602, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x6, 0x2, 0x7, 0xfffffffffffffff2}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x484200, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f00000000c0)={0x9, 0x4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r5, 0x0, 0xffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f0000000340)={[{@grpquota}, {@auto_da_alloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@init_itable}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES8=r4, @ANYBLOB="0000000e00000000b70200001400008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='module_request\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x40000, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e57f000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8, 0x0, 0x4000000000000000}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) 1m51.593994391s ago: executing program 9 (id=4018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000000020000100050000010000000000000300000008000000f30000007f00000004"], 0x58) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1m39.069812213s ago: executing program 9 (id=4143): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0\x00', 0xfff}, 0x18) (async) r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x7d1217843126689e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x8, 0x1, 'queue0\x00', 0x40000000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x7, 0xa0, 0x0, 'queue1\x00', 0x7}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000240)={0x0, 0x4, 0xfd, 0x1, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) (async) mq_unlink(&(0x7f0000000280)=',\x00') (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ptrace$getenv(0x4201, r2, 0xe5ed, &(0x7f0000000340)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r4, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r10, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x4080) memfd_create(&(0x7f00000007c0)='veth0\x00', 0x4) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r9) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r11, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) r12 = syz_open_dev$vcsn(&(0x7f0000000940), 0x5, 0x2000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000000980)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x7000, 0xffff8000, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x4c) (async) mq_unlink(&(0x7f0000000a00)='queue0\x00') (async) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r12, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x118, &(0x7f0000000a40)=0x1, 0x0, 0x4) 1m39.059126453s ago: executing program 37 (id=4143): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0\x00', 0xfff}, 0x18) (async) r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x7d1217843126689e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x7, 0x8, 0x1, 'queue0\x00', 0x40000000}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x7, 0xa0, 0x0, 'queue1\x00', 0x7}) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000240)={0x0, 0x4, 0xfd, 0x1, @vifc_lcl_addr=@loopback, @broadcast}, 0x10) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x2) (async) mq_unlink(&(0x7f0000000280)=',\x00') (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) ptrace$getenv(0x4201, r2, 0xe5ed, &(0x7f0000000340)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r4, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40044}, 0x40000) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r3) sendmsg$IEEE802154_DISASSOCIATE_REQ(r7, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1010}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r8, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}]}, 0x3c}}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r9, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x38, r10, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x4, 0x4e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}}, 0x4080) memfd_create(&(0x7f00000007c0)='veth0\x00', 0x4) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840), r9) sendmsg$IPVS_CMD_NEW_DAEMON(r9, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x40, r11, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) r12 = syz_open_dev$vcsn(&(0x7f0000000940), 0x5, 0x2000) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r12, 0x84, 0x6e, &(0x7f0000000980)=[@in={0x2, 0x4e20, @remote}, @in6={0xa, 0x7000, 0xffff8000, @dev={0xfe, 0x80, '\x00', 0xb}, 0x9}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x4c) (async) mq_unlink(&(0x7f0000000a00)='queue0\x00') (async) r13 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x20010, r12, 0x8000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r13, 0x118, &(0x7f0000000a40)=0x1, 0x0, 0x4) 45.261776157s ago: executing program 8 (id=4857): r0 = socket(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(&(0x7f0000000540)='@/$,^\x00', 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = getpid() fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0, r4}) mount$9p_fd(0x0, &(0x7f0000000840)='./bus\x00', &(0x7f0000000980), 0x404, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@directio}, {@msize={'msize', 0x3d, 0x14000000}}, {@ignoreqv}, {@mmap}, {@access_uid}], [{@fowner_eq}, {@context={'context', 0x3d, 'root'}}, {@dont_hash}, {@fowner_eq}, {@hash}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, '!:!}!)(-/-\''}}]}}) recvmsg$qrtr(r3, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000480)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0x1}], 0x1, 0xe7b, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c0a201"], 0x24}}, 0x0) 44.280240332s ago: executing program 8 (id=4869): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf0", 0x13}, {0x0}], 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000000340)=ANY=[], 0x2b08}}, 0x4004006) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x2004}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/106, 0x6a}], 0x1}, 0x4}], 0x2, 0x40000002, 0x0) 43.232396858s ago: executing program 8 (id=4876): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) set_tid_address(0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) setreuid(0x0, r3) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 43.10196022s ago: executing program 8 (id=4882): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000100), 0x1, 0x58a, &(0x7f0000001b40)="$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") r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000003c0)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_setup(0x69a1, 0x0, 0x0, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgid(r3) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x21, 0x0, 0x4) setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f00000000c0)=0xf7e1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r6, 0x0, 0x800) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRESHEX=0x0], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x8840) io_uring_setup(0x2246, &(0x7f0000000100)={0x0, 0xf3ff, 0x4, 0x8000004, 0x2de}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_create(r7, 0x0, 0x0) r8 = syz_clone(0x20a00000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000940)=ANY=[@ANYRES16=r8, @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a50000001801000020206405ff000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095", @ANYRES8, @ANYRES8=r8, @ANYRES16, @ANYRESDEC=r8, @ANYRES32=0x0, @ANYBLOB, @ANYRES16=r8], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x100000e, 0x810, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000300142603600e120800060000000441a800080004001040040000000c5c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/213, 0xd5}, {&(0x7f0000000200)}, {&(0x7f00000006c0)="f3485047536236128db5b15c00d7092566328d77de3e49ed594a815a77c44ac0b8515efcc31c71fa0ef2153ca12f3a1596003fc84e314e272637a2b8e5ec08b3839944f3caac321caf943e79052884b955a4f4431427ef37ed9f7584c81b8f92506da41b2c21ba72b6218222d5be8e0e92e6d3ac40d1bdbc3d6b85a5a7db0348e86a83a70ac43df26ecefcc45e87b963ad816bf3ed029a9306d42d99c4ca2bfc8386fff021137e5dccb90897ed913c54573b3b7fa965a32808e8d68b89abe4208eb00b65b91719e282f75ec055ec729aaea0478ce34a92c9", 0xd8}], 0x3}, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 42.167094845s ago: executing program 8 (id=4897): r0 = epoll_create1(0x80000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000004680)={0xe0000016}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000004e0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r5}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)={0x0, 0x19, 0x6}, 0x18) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) 41.936808358s ago: executing program 8 (id=4902): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)=@req3={0xe, 0xffffffff, 0xd3a, 0x0, 0x0, 0x5, 0x3}, 0x1c) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/30) 41.914953058s ago: executing program 38 (id=4902): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)=@req3={0xe, 0xffffffff, 0xd3a, 0x0, 0x0, 0x5, 0x3}, 0x1c) r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000080)=""/30) 2.664243789s ago: executing program 0 (id=5451): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r0, &(0x7f0000000300)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x810) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x2) openat(0xffffffffffffff9c, 0x0, 0x281c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x7, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) syz_open_dev$hiddev(0x0, 0x2, 0x440) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.97776402s ago: executing program 5 (id=5457): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 1.808973172s ago: executing program 5 (id=5461): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 1.728851044s ago: executing program 5 (id=5465): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="f81100000002010026bd7000fddbdf250100000004001300bc0064800400c080527aae4a2d4995251f71a914c50e2b8af6a7e9d201919549c8ea67ee8c41d2d399f3e9a720ad2466bb7b6389776975f09fc94968ddd8e9403fe7e020144f2d857cee8a78b48f8b6715afe7cb7c3ee28cecbfe372d27e4aa6d6de81c9512bbe129bfcf7582ba8e38356b3c03ba310e814b336e021b1c810252663f09be13f1f031b25b97d11c7f50068a6939a5e25d27d03e6cbc5e760c2e7a5dee76cc4de155b9dd5d4e3720b59deaa86c4eb71d4d48350d8ac5204003d80041032003d0d4af44342a75ab38cc134c65a2154d6c02d4b7baf369b62f042ccbef34d813686b74d001652023a2acd0cbb7c784351207948e4838856fc36acdc268667bcb385ad6952b0ece35e398036d56574bff78fce6790256d6a98b2daeabf6b00d4ea5cfad1c1d41a7eb19bbc8a853788042041219222712065e4ba4411a95c8f7b7f26fd58804c65c7788034eaab880c7ac758d561012d09230c9eafd23ea9459774775b672c4fc82d2666046b6c0b1fe7164cfeafb43f3bc55ae43b798fe922af84fa93b9d96e14a0f8d912ccbe33f36b16bbcf3fca32e5e5f330a9daf164e7b6abdee59c02db041414df3c1f03a66d56dae060c3fdaf433e62be0898392d0c06aea52c0e005e2656640b83aa0932c5e0cd7eca80c1355433b82d8af2ff2bbae998a5d78714882924b922ed78c3c296f10d8c158afd457b2a7b72e929f4f9ad2e4d42a64dfcfb02aedd3df7d9fb48efc1d70ef214be5689d1f37b817e9d16c4d2af3fd759b1df997551f7261a49f59821bae5a7a0872aa037f7f52cac7e280a6192d6288c44767db1b59977103f06be6130d2a0aca3ae96faec97f2ddfe70963804be00be3403be9e6dd48817c1caea186b0d6a450e4dfdec93e21d95d36d7494d7b51648179218240699cc1c9aa3394f3401e81d328dfe9f070d89f9973b71d5f7037bb3b29db1308bca0f2ba34290a6c847daddf52e84e8986b92fd5aa7b6566b8d1741e4ae7853648821f9341a6c2c09cacbe68b11261c56cdb217456758975dd1649546a895161b5d0b715ec40ad044367aab6b8693820264a8b26335976a745d64c2dddfbc2c2635671791f2be2829b4fb2b3a5d1e78dfc12f62c7f3392dcf2102365665b03c5eb5b048d9be6b9a92dd8a5308e87bfb6594c3e50d9776cfa87132a8b6da2cda62c402e729f66c5c810c1f0d10cdcc7ae861769d96a6c271e7dd3bf35c8f91f4346dcdc74373308ec7d32690e4a26d575147bf4782c19fd57466df2c1928cbaf88506ca3cc5b7295d5f94738b938f8fcde4aab7678291fb976315a696a975476203bf83481a4b5392ecd647ce0bbc0bdce3b9d4ed4e9da041d24ae072cbd5bab4e9cd7ff08798ecca36a3ccc801f74d338a002b0e257c9f1269c83a454a0b11ff66999704a39d36f532d112fc82c8e8847c437fcd6467ab6ae2ad27d87709ba8613f83ac58d18b724bd5206172201e1fea2fcea0459ef96dce55c2fb8a61b48283626c39958cd307ab99a2c46baa986969e8a7af7494a703406a659edb310c351e530c86a8a389835bbefc2fed3204a84d4bedf6e1d625b99e27591b08127baab8df3b72e685689a80d9f2f949e561856fb6eb6bde0845dfcd9e2cd8707d17bf4e7862093d1be359ba1c066756ba5fc2a5b4fcebccd7bd046cfe858cae37e9ad96565beb7c378b4f8b16ddfd180192400d1219f7a518dcb9f72e8c997f9f5a2d9257535e18bf014612886abc542aaaef8e6c32aa6c7c0e6682b9b2545f98447a6c04bc9c541ba6fef20ebab632533fb82c7f6231abbb0fcb72cee0c3cc795c1a5256efdb3f67ec43fd8907c8ac0b583314f43cdd530e28f60063170510eb7482a80c2802bab1ca0237993b4d0db07d0a503579b1a0ee2431d8102fe86c00c1b3c6755a06747e64ec39bb15d0256fb30f99c70570bc400efee1c081d90eaa5f2bdeb4637fe99fff4e6e99539479278a5a6be84202651fb238bb820f485ffa22bf3a1ffec52949a3d8bc58f234c0eb797d53125d6fa0b3ea8bcbedc4bd418395c287a79c25e238333e118b0c955a7bb1d10f0df3f1923fa8722dc6093a8daaf5c6addbda5c6ad5a6a48c1ebe703bedf6ac75519fd620b89476adf2b484e51fda323ffb0fff06df12e45fc9f26b8d579522c5187a35c673d41d304c78254e86c960f425b3e4d561f43d98d64ac17e8d372b56f0a5c3c51a6b0968ac90348607b7a7d0ecf34457e2dacb613d30972584beac22abbd0b5984a2f09fbb3e90edbecf7473e9a6c3ea735d775ee940f714fb890877fe71314cef3513160c399c41c117154e1c745e4147b25ad30222f3fa2dca495bac54a81ee20dcda43095ddf52daa0ebdd821d88f39265ed15e467af3f7638ba8e2cf735ad14de34321f7cd65cc2098d1609805132a37464ac81cb2f0462ce20d759d7dfb07f2d1666aa614a8d5256ab14b7fd977fada294c1fc05320ee2f657d9946b864b0b47442b8f62eee53ac4524d75adcf103124f93b3590a3e44e27fe63ce7dcd6c3e47ee2e456a1a276052c782003f76c52c35f340d4a9126e0c7d7730d1c59fdb21aec6b2470ca61d9bac983a94ebe83c7607e91d269e45f30f74513039660c165485c8513928f3069ff2bb1df481126008295ff5a7170e32d77fcf3d61a527ff93fcf453fac0c717116dc5f67dab1983933339c1ed4e5a899f52c098bfac86c693eb2bdea0832df6eaf725683af0f59e9e54467df7ea28d7338fa443689c2c7b36aff6f0046b37bb5aa2a0002e944f2bebd869f58f21d3c19dcb95fd7d0544522281906cba12b5d4f720b9670f5871dfb56606bb9fe203c32309152f44de5f92a3295ab5c681f4d42ae6a857b5f7001088971cc35edb71a68d1ff578147fb8fdc8fde3c57719b8ed30769268262c9140902f509ef7ab01c544814396c11953715c5f1263d48d73b1ca775b34d69872ea356a70b2a95abb75785301b22806e76173d0d7045564e043962374123029d3fd34aa726777e1fe7c68cc4432c140e85fb1db2e17880bff7ad8e6b21a7bbefb37337d7a690012b99a99d6ccc042b9fcb04429bdf2d525aed6041c618fccf52aa47359ff0ee822db79d1bd21e148e0893fcda84ffa5706c615de7ace3ebfa7436242ac9e8b0f85baf04bd22287233363327d2d493d8f533de542e2ad6d335129cf87cfc1b29bf9b582799cdb7eb1814692ac8fa900096f44de641ed6974cddc1e208904f4f2d65c16b0cd564c54efb9414eebcc93c30252843b00a25ff0875a25c722d9a6590a61e1bbb514dfc4005ed106da6960af04228642bef95fb8468990113e1110e79068c66b81240ffa06ce38e3189960025984fe649da90876fe71718967d0c1ca509493e6b9497328ffd86124512d8c7d182196ecf305e547238161495b51c02b09a6a0be8501793e00b8a2ce60a2fc165b6204547220161ac2ae662c82d46e4812b18be5a554c9af5d91b8f2a4bab3827db397b7c9ccb16625b5091591dadf71155499d95adb83fd3d796e75f4700894bc69ccc5e11d8a0323cb6f665a6ff368bd9ecdd48037b5d19ca27cdbaa3ae6235c9e0a089aef5167fa72fd4f6f2fda0fa3246886e08524f3369490891ff9053aa65211c1dace593699e178ffd58a2586e03f6c60f460793045cc7c4ee029a5478567b153c64c85d44b1e59286745235ed04055b7d311eead9e3fb4c3a7ea6d7906deaa74d506a06e6a08d6c155e4ce4db973edcf63f42b4f718e4d0167a3283265df679a50dfccd6f114e264195b1c072e3576de002c71f7dc5b96263a828f080345c34733394fe2c52f5cf8766bcd92c112ba8a858e43968839c6a439f31ac49616ebee1ce678cc4c9d64029acb3232a1647a237c0cf9c574abb127c772525f300c0228457b823eedf1eda54d9b000ac056136a32ae21b5a2eed0b102399c45c2abfe0f9a9834852346e9b17b9a286951133c26dab803df708d6ed7d36fd44a7b05824f32c4701f676cb9ba5207a9fd955557cfe403408c6ccc084ad368631bbabf939a8bcb34af42e1c4f94afc5264e3dd8e4a217d379de9b5482122f846ba531d2697a43d85bb8abc603dc79bdc44d51d8e78cb225b8f28ac57c28ee8a8d0a03daeee71c3e4b2aa975570da0dfc3394479a1dae2fa4cc34c31abdcd790a202ab47735d860e5b7806d6dd5374a692071c9b1456c423355b1fd127591d66d2616c07657338d044108fac22d75fbbe6b5929fda437900e77a4adc1b62f27484b5337506d2961531d46d6f40d79879e5c06d0cb8729beba83f78fbf4d4849b15b6cc4aa858a49c8e364091a52867082aef74e90a46364489116db398e6c2e1da61ce8cb05f38b1e299579a2ffb1b2e0ea9e15dedc2ab6c1ae98d6e2ad2b5b9c6567621b38ec6f066458db3363bac6d021b9889414d2419cd051bebd6f34311fae02eee6283a72e53210e604b851fc07eadfbba4071dc930bb4f1a467f36ccd68296e7df69472458f471a0ab2c4db46f89100c9da34eebf3297f27e636998055819a459b60693304f0ea8deb8203f0d8db60806b4b46c60d83f7343014bfa5c470fe1c3e874c0db19e5d88bf675960242699048fda4b5fdd76d056fb29d19d2d244ac1c34d840466008b8712da114c2e7681ca1651999a583078ddfc2e8f0990a1a2c918ffc078a17fb2548835b815db736e264e2f14cedf511d2bad5446a03418c4e33cac8adb30942f7bddd4599f60be0b960c4711ec5193d547a16a72041110f7a03d2458adf5af9f857c2f482c655cbb7acc4de60d24a953288d359d560c93ccb8972eac06c6bf173b70390a5d9b70c23f14c0e13e5255bf7ebed827264783ef610bd7cb8ee8982809d59887dfca6cd8eeb6c46d88b1c4c17aeb7f95b0cf2948a3a6286f839b360b44213032ebe4395f298fbcdea1d1eea533ae0e7a49aa2cf987171088cb8297405771f8b09cea998d8d9509aaa89dd94ab44b4e500131c46348f2019d3011870d26c6d637cdd0c26be5de727d29d19ac4a644df541c6c592bf8ffeeb27f52d89ee5b23479f82a016b530f8541f4cd537dc4c91a0c253cf234e57e82bd180fe84cdf58224f040c8e42c188743d9953d542f0320dfba2ebb4f55c0435a865099869ca541af1106118e1c22866e21230ed3f5fd3c479fa88d22166005796aff189b26e7b13a61f0504e25c5cfb92f598dd9b50cadd672703b7598d44074cff67e7cf627e708b0710e698ce3e358d8d3c816e0bb600f4244531cef326a23373ec0aa0f5dda54566d189b1ddb779690b54edf5c9b455625299e7274552c92fc3d3e1d4aaeb000a81348ae79d8e34d9b887d2b286d7a8c5861f80806df6dc2e029d0e7af5e19802bf8b41d001ec41ed915a91aff45c5f568c4f6b07074648a68219bc27b02948d02cf7cdd9974446b5bf03490dcefa71d93e69281ea9da5b92f3922bdb3d2c237a304cd5f6c4bfcae19a8edf3e470929c07d28564f050f0c79a39adf5c54ca43592a196c7f0cad9dd00096817565f9e32382b203e1fac1e9df8492e241c8958bda546ef6f96f96142576010eb45fc2c1b4db37cae71f09e7d7c289c7587924247cc8e60f4e65d456f39d933d2e70ccf0759d180886d6f297e2823ddc06eb3aff2c5a8001ab9b400daf581c3f322d2b7bfc52fa9e41490b647f30cb6b296602bfb2fdc25b263c0633078119926093821326520423ebf27459c2c251b0db871f5e888ff2f76f36316365dfc75e8966747749d1e9d3e4772a5bc489c865d5d0248f4a3bc6ae9497c424e97870bef0d6bea3927b58f054f0a7cc12385743a17fc7aa0dc3d7f6b6b3b3850330ccdce0268b7d25abf5b01ee9c55dfaf3229c06041e41f7913f943c2e788d354a3e5f86a1341f60c58345657ffa5f1d22d93467279973dc4d841e57f07f03ddadd710a70be2a1b11647a2dc77f2532d355e4dee0d8212c5c0697a8c6f9446812a98ccb88a8620c6677ddc6b529a7cbbfd35fc07828abe01d6b5f9caaf3dd5aa136f7c3cd9b0b4fab52ca268acf3d7bda0e1cfaeae40d19a0156ddfa9e449e59180d67bbf3436ae7b6336f69e8f5de030d1a37389df22a2802e7ff43c0bb91881482cec1c1ea95d864d751e96754670cbade1b5a9ab09cf094671976be2f8a2587e1e423edf4e661f3e8bd594569dbd6c925c605408ee32481859978288d312c445863ad90e187a03e47d2c1bf8d3db0ecc5b20b2ab3ef5485d191626374cd47fc479b82761e0f4e06650fafe9044b58935ddca9c5b01f206ce703619973b14576a2c7324c12f66fd8b24dd42e5cd2fdec3e669c42d4eebc159d94f737428fee17b87f9b7c0dea1c0af42183cee04be0d3fde819f06a7d527faa620066ae40b3da96f48c981c593cf5b144d1658a0968ab2612fec0184ebeaf962f706ff5add2cb3efc04851b61e3e066e0e018c032cdc50481bdc137efc6ac9858c1ce78aa323fbf73e4c1"], 0x11f8}, 0x1, 0x0, 0x0, 0x1}, 0x10008001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='rxrpc_rx_eproto\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) syz_io_uring_setup(0x497, &(0x7f00000006c0)={0x0, 0x79af, 0x1000, 0x8000, 0x400250}, &(0x7f0000000680)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {}, 0xa}}, 0x26) sendmmsg$inet(r5, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) 1.626453875s ago: executing program 5 (id=5468): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32, @ANYBLOB="0000000000000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010100000200"/28], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a000000080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = dup2(r1, r2) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x5f5}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) r11 = socket$inet6(0xa, 0x1, 0x0) r12 = socket(0x15, 0x5, 0x0) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) r13 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r13, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r16], 0x20}}, 0x0) setsockopt$inet6_mreq(r13, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000100000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000064628000fcffffff18120000", @ANYRES32=r4, @ANYBLOB="000000000000000003dc65300500000018330000020000000000000000000000b7080000000000007b8af8ff00000000b70800008f8900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705004d38019c7d63fd5500a5000000186400000a0000000000000090400000852000000200000085100000feffffff181b0000d13c3d947c0ab7d9f53ecd13e4670cf26ddecabb60561611310655bfa92674b6337ccbea5e82019ae574ecee1f0edd27a39e66b8968405f3510cb7e4b92e05c0cb8fe43b9a95b3b6dc8f6b27a5abe4c032b3a302847c464764fe7e7dadbd17b66bd5ea256a53d19cd30e066bf84a4e6024b941379fc435b0ff2f545333d615de49e2c160494c", @ANYRES32=r6, @ANYBLOB="00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x60, 0xc4, &(0x7f0000000440)=""/196, 0x41100, 0x2, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x6, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000740)=[{0x1, 0x1, 0xd}, {0x3, 0x2, 0x2, 0x2}, {0x5, 0x1, 0x3, 0xb}, {0x4, 0x2, 0x10, 0x212620bfb8bd57f8}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0xa438}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.447580178s ago: executing program 5 (id=5473): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000009500000000000000f8b72d788d6a729f108e1fa05d4dad0718469414805f27348d9965af9f2f17f2d4a02bf770"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r4 = socket$inet(0xa, 0x801, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1}, 0x40) bind$tipc(r5, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x1}}, 0x10) r7 = accept4(r4, 0x0, 0x0, 0x0) write$selinux_load(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x109) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x4}, &(0x7f0000000200)=0x90) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000010a850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r8, 0x0, 0x1034}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r9 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$IMSETDEVNAME(r9, 0x80184947, &(0x7f0000000280)={0xd0, 'syz0\x00'}) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x30000000, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000edffff880000000000000016bb9f7477676938a89ec19200"/40], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe2(&(0x7f0000001cc0), 0x800) syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0x2a36, 0x10100, 0x0, 0x20010002}, &(0x7f0000000200), &(0x7f00000001c0)) 1.403612458s ago: executing program 0 (id=5474): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) rt_sigpending(&(0x7f00000002c0), 0x8) 1.388563389s ago: executing program 0 (id=5475): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(0x0, r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 1.362091549s ago: executing program 1 (id=5476): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xffff8001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r6, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) 1.359373089s ago: executing program 0 (id=5477): r0 = socket(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$eJzs3MGLG1UcB/Bf17Xdbt3NqrXagvjQi16GZg9e9BJkC9KA0jZCKwhTd6IhYxIyYSEiVk9e/TvEozdBvOllL/4N3vbisQdxxKS1jUSpSDdSPp9LfvDel997BAZmmDdHr3/5Ub9bZd18EmsnTsTaKCLdTpFiLe76LF557Ycfn796/cblVru9dyWlS61rzVdTStsvfPfuJ1+/+P3kzDvfbH97Kg533jv6Zffnw3OH549+u/Zhr0q9Kg2Gk5Snm8PhJL9ZFmm/V/WzlN4ui7wqUm9QFeOF8W45HI2mKR/sb22OxkVVpXwwTf1imibDNBlPU/5B3hukLMvS1mbwX3S+ul3XdURdPx4no67r+nRsxpl4IrZiOxqxE0/GU/F0nI1n4lw8G8/F+dmsVa8bAAAAAAAAAAAAAAAAAAAAHi3O/wMAAAAAAAAAAAAAAAAAAMDqXb1+43Kr3d67ktJGRPnFQeegM/+dj7e60YsyirgYjfg1Zqf/5+b1pTfbexfTzE58Xt66k7910HlsMd+cfU5gab45z6fF/KnYvD+/G404uzy/uzS/ES+/dF8+i0b89H4Mo4z9+CN7L/9pM6U33mr/JX9hNg8AAAAeBVn609L79yz7u/F5/kGeD6zdbbaQX48L6yvbNndU04/7eVkW44dWnIyH3uKfio2IWF33By/W43+xDIViXqz6ysRxuPenr3olAAAAAAAAAAAA/BvH8Trh0sanj32rAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA7+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYKgAA///20tEU") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(&(0x7f0000000540)='@/$,^\x00', 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500008000000061119c0000000000a6020000bf60cc1fdc9fa86b989a4c47"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) r4 = getpid() fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0, r4}) mount$9p_fd(0x0, &(0x7f0000000840)='./bus\x00', &(0x7f0000000980), 0x404, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@directio}, {@msize={'msize', 0x3d, 0x14000000}}, {@ignoreqv}, {@mmap}, {@access_uid}], [{@fowner_eq}, {@context={'context', 0x3d, 'root'}}, {@dont_hash}, {@fowner_eq}, {@hash}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, '!:!}!)(-/-\''}}]}}) recvmsg$qrtr(r3, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000480)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0x1}], 0x1, 0xe7b, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c0a201"], 0x24}}, 0x0) 1.053850534s ago: executing program 6 (id=5482): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.052895514s ago: executing program 6 (id=5483): r0 = socket$inet(0x10, 0x1, 0xfffeffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dvmrp0\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) unshare(0xc000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000004b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x28, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @val={0xc, 0x99, {0x2, 0x66}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 1.027154414s ago: executing program 6 (id=5484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32, @ANYBLOB="0000000000000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010100000200"/28], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a000000080000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r6 = dup2(r1, r2) r7 = socket$inet(0x2, 0x1, 0x0) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x5f5}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r10}, 0x18) r11 = socket$inet6(0xa, 0x1, 0x0) r12 = socket(0x15, 0x5, 0x0) bind$bt_hci(r12, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) r13 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r13, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r16], 0x20}}, 0x0) setsockopt$inet6_mreq(r13, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000100000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000064628000fcffffff18120000", @ANYRES32=r4, @ANYBLOB="000000000000000003dc65300500000018330000020000000000000000000000b7080000000000007b8af8ff00000000b70800008f8900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705004d38019c7d63fd5500a5000000186400000a0000000000000090400000852000000200000085100000feffffff181b0000d13c3d947c0ab7d9f53ecd13e4670cf26ddecabb60561611310655bfa92674b6337ccbea5e82019ae574ecee1f0edd27a39e66b8968405f3510cb7e4b92e05c0cb8fe43b9a95b3b6dc8f6b27a5abe4c032b3a302847c464764fe7e7dadbd17b66bd5ea256a53d19cd30e066bf84a4e6024b941379fc435b0ff2f545333d615de49e2c160494c", @ANYRES32=r6, @ANYBLOB="00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x60, 0xc4, &(0x7f0000000440)=""/196, 0x41100, 0x2, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x6, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000740)=[{0x1, 0x1, 0xd}, {0x3, 0x2, 0x2, 0x2}, {0x5, 0x1, 0x3, 0xb}, {0x4, 0x2, 0x10, 0x212620bfb8bd57f8}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0xa438}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 932.869616ms ago: executing program 6 (id=5485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x0, @multicast1}, 'batadv_slave_1\x00'}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 911.527726ms ago: executing program 3 (id=5486): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) set_tid_address(0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) setreuid(0x0, r3) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 870.162226ms ago: executing program 6 (id=5487): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x140, 0x0, 0xd6e}}) 869.229367ms ago: executing program 6 (id=5488): r0 = socket(0x10, 0x3, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x10000000000000, 0xffffff6a) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mq_open(&(0x7f0000000540)='@/$,^\x00', 0x2, 0x1, &(0x7f00000006c0)={0x605, 0x7fffffff, 0x0, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = getpid() fcntl$lock(r2, 0x24, &(0x7f0000000000)={0x1, 0x2, 0x0, 0x0, r3}) mount$9p_fd(0x0, &(0x7f0000000840)='./bus\x00', &(0x7f0000000980), 0x404, &(0x7f0000000f40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@directio}, {@msize={'msize', 0x3d, 0x14000000}}, {@ignoreqv}, {@mmap}, {@access_uid}], [{@fowner_eq}, {@context={'context', 0x3d, 'root'}}, {@dont_hash}, {@fowner_eq}, {@hash}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_role={'subj_role', 0x3d, '!:!}!)(-/-\''}}]}}) recvmsg$qrtr(r2, &(0x7f0000000380)={&(0x7f0000000080), 0xc, &(0x7f0000000100)=[{&(0x7f0000003680)=""/4096, 0x1000}, {&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000480)=""/140, 0x8c}], 0x3, &(0x7f0000000600)=[{0x90, 0x0, 0x0, ""/128}], 0x90, 0x2000}, 0x38, 0x40000040) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r7, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r7, 0x0, 0x0) syz_clone3(&(0x7f0000000580)={0x400, 0x0, 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) statfs(&(0x7f0000000200)='.\x00', 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0x1}], 0x1, 0xe7b, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="c0a201"], 0x24}}, 0x0) 832.573057ms ago: executing program 3 (id=5489): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 812.566257ms ago: executing program 3 (id=5490): io_setup(0x2, &(0x7f0000002400)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', 0x0}) r0 = io_uring_setup(0x60ad, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {0x0}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x7, 0x0) 678.26921ms ago: executing program 3 (id=5491): io_setup(0x2, &(0x7f0000002400)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', 0x0}) r0 = io_uring_setup(0x60ad, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x7, 0x0) 363.351355ms ago: executing program 5 (id=5492): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e00), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000dc0), 0x10, &(0x7f0000000e80)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@updpolicy={0x1a4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x100000, 0x800000000000000, 0x0, 0x0, 0x9, 0x8000000000000001, 0x40}, {0x0, 0x3, 0x0, 0x3}, 0x0, 0x2000000, 0x2, 0x1, 0x0, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @sec_ctx={0xd8, 0x8, {0xd4, 0x8, 0x1, 0xc5, 0xcc, "b7c18e56945eb1fb3fdbdc78c6dd5c396ddaa7fdb0814822b45ccc8b26750f59fdf0e8f0742a0217e7e5a10d2a1b0c2c70a9796e77756366434f9820e40cfc72d0b33e6e4a5834082382273ee92cfb356b47268b02db2654847e04aaad0d8535e4704b6c9f9b35d21e746d80a49e27dd34eb43fb816e7c593506eb0f5de4330e27f485e21fe48d7bf2dcec95d5baa7eebbba3bbd86bca97faf729f30626fb1477520c7e4b9f1f20b9038a06801cc0e58cce3c0e18f6384194580a02ed192c00b1a5a1fcb2442f3eb9e816e6b"}}, @mark={0xc, 0x15, {0x35075c, 0x7fff}}]}, 0x1a4}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) socket$inet(0x2, 0x4, 0xc4e4) truncate(&(0x7f0000001480)='./bus\x00', 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 356.121035ms ago: executing program 0 (id=5493): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x9}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x7, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x4480) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x20, &(0x7f0000000380)={0x0}, 0x1) 310.663185ms ago: executing program 1 (id=5494): r0 = socket$inet(0x10, 0x1, 0xfffeffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dvmrp0\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) unshare(0xc000000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000004b704000000000000850000000300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x28, r2, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @val={0xc, 0x99, {0x2, 0x66}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 309.954445ms ago: executing program 3 (id=5495): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x2704, &(0x7f00000003c0)={0x0, 0x19, 0x2c84, 0x0, 0x136}, &(0x7f0000ff0000), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_open_dev$MSR(&(0x7f0000000040), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) mmap(&(0x7f00003bc000/0x1000)=nil, 0x1000, 0xa, 0x4c831, r2, 0x3bda6000) 306.051755ms ago: executing program 1 (id=5496): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000001000000000000", @ANYRES32, @ANYBLOB="0000000000000000000004000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010100000200"/28], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000008000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = dup2(r1, r2) r6 = socket$inet(0x2, 0x1, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x5f5}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x18) r10 = socket$inet6(0xa, 0x1, 0x0) r11 = socket(0x15, 0x5, 0x0) bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0x3, 0x3}, 0x6) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r15], 0x20}}, 0x0) setsockopt$inet6_mreq(r12, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x30, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000001000100000000000100000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000064628000fcffffff18120000", @ANYRES32=r4, @ANYBLOB="000000000000000003dc65300500000018330000020000000000000000000000b7080000000000007b8af8ff00000000b70800008f8900007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705004d38019c7d63fd5500a5000000186400000a0000000000000090400000852000000200000085100000feffffff181b0000d13c3d947c0ab7d9f53ecd13e4670cf26ddecabb60561611310655bfa92674b6337ccbea5e82019ae574ecee1f0edd27a39e66b8968405f3510cb7e4b92e05c0cb8fe43b9a95b3b6dc8f6b27a5abe4c032b3a302847c464764fe7e7dadbd17b66bd5ea256a53d19cd30e066bf84a4e6024b941379fc435b0ff2f545333d615de49e2c160494c", @ANYRES32=r5, @ANYBLOB="00000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x60, 0xc4, &(0x7f0000000440)=""/196, 0x41100, 0x2, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540)={0x1, 0x6, 0xfffffff9, 0x4}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000740)=[{0x1, 0x1, 0xd}, {0x3, 0x2, 0x2, 0x2}, {0x5, 0x1, 0x3, 0xb}, {0x4, 0x2, 0x10, 0x212620bfb8bd57f8}, {0x2, 0x4, 0x10, 0x2}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0xa438}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 237.949806ms ago: executing program 3 (id=5497): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x6}, 0x18) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x56a, 0x300, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0xf0, 0x76, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x18, {0x9, 0x21, 0x800, 0xfb, 0x1, {0x22, 0x2d4}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc6, 0x6, 0xfd}}}}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x310, 0x2, 0x12, 0x71, 0x20, 0x5}, 0x4b, &(0x7f0000000580)={0x5, 0xf, 0x4b, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x7, "b9896e8972dd48e7dc455b1f128de8cd"}, @ext_cap={0x7, 0x10, 0x2, 0xa, 0x3, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "937437b7fb46eb6243a56d5597b6f8ef"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "60e188cd24f8f43aebbcb171a4812909"}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x480a}}, {0xee, &(0x7f0000000680)=@string={0xee, 0x3, "918e74a24326c7e970ff860b2b52b9379b7684d422cf012eae6140be1b7442fc1543f97613d3dc14927961e019471682d78d9e19c689e72d590194a06216c2715b71607cbb556e8ee06e4ff246783eceaf68cee04bb1da90ecaf28ecbde13f50ca2252910540136aa26c1fbe2f0b9d5e94c9f821f31ace2a10152e3e26bb2589780c861d80e0daccbf30b7032dff9e56976077eefe70294a933334c322fa2db28b4e31997fa8b3ba5eaedaf0910b07fbc2eab888ea2b26a9483f89bab994a7b85ef9001fd3471ebc6db6c8603df397aa908bc82db8cb67fe503c55e64efd4440d4c2cdd95ec0a0093ad10dff"}}, {0x7c, &(0x7f00000007c0)=@string={0x7c, 0x3, "159a6ac2ed88e81bb47d85fead9a96680f728cdd32ab8eb84ee8082c29e7676ef8c9a14a5d30d095322a18015597c6aecd0df1427bddaa3a980be0cbe8f0e3aa57b36bc4d9db43538829a0a3c144008227936fd4e527806262d703023f2b8ef7ac793cbba4afcac84aaa8212987c1af61ed946ec70a88a829976"}}, {0x83, &(0x7f0000000a00)=@string={0x83, 0x3, "ff0d5558a792fd993f3f32d8c987d6455f07ceab205d2a1016ec366d621f4c770e7e86c61f3083e6bfc84b2c557ce9f9db23f325f773c3a3880f2488986f4ffcd1f8aac8c1bba48840fa7534fa6005a8017fb15c468b518a1b9f8ab4baed6170e3e1fe7c7fb29d8d5fba9c130dda2050b0da2f9e5ee5c8d8b7daabde582b462b1c"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x780c}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x44e}}, {0xa4, &(0x7f0000000ac0)=@string={0xa4, 0x3, "a751a0bfc155c9651a1e566b9e876807fb172e35bf95e8cbdc1e8d5ca6c3ed5d64c6fd4755569001653f2d40ad70be08a24bee57808b4ce7d5b13349d9acd736a185a174fc6d0e19d719cc19e1c1bc1d6c4fbd63828e1fca4f55d5d4cbd017917af3fb16ee9f57ecc2589206667fdfe0f983692c83a78f13a01f4c20df09add2fd209435088a8411aa8d99842590a8e96efb411b8ebe63550fba91a5944a9961aa03"}}]}) 237.023317ms ago: executing program 0 (id=5498): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000101000/0x2000)=nil, 0x2000, 0xa, 0x2010, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x6fb4, &(0x7f0000000040)={0x0, 0x10008b46, 0x10400, 0x3, 0x104}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0xa, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r3}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000003680)='sched_switch\x00'}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x6}, 0x18) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x350, 0xffffffff, 0xffffffff, 0x350, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x6, 0x35}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'ip6tnl0\x00'}, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0xa1, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x80, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000240)='sched_migrate_task\x00', r4}, 0x18) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r7 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) preadv(r7, &(0x7f0000000080)=[{&(0x7f0000000000)=""/21, 0x15}], 0x1, 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r9, 0xc0502100, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r11}, 0x10) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000080)={[{@discard}, {@noload}]}, 0x64, 0x526, &(0x7f0000000a40)="$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") write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x3ffff) sendfile(r9, r8, 0x0, 0x7ffff000) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) 166.786668ms ago: executing program 1 (id=5499): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x140, 0x0, 0xd6e}}) 72.105859ms ago: executing program 1 (id=5500): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) set_tid_address(0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x26) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, 0x0) setreuid(0x0, r3) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=5501): io_setup(0x2, &(0x7f0000002400)) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'syztnl2\x00', 0x0}) r0 = io_uring_setup(0x60ad, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000002700)={0x3, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0x108}, {0x0}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x178}, 0x18) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_getres(0x7, 0x0) kernel console output (not intermixed with test programs): syz.5.5015 [ 405.678325][T18937] ,cpuset=/,mems_allowed=0 [ 405.850061][T18937] CPU: 0 UID: 0 PID: 18937 Comm: syz.6.5017 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 405.850086][T18937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.850164][T18937] Call Trace: [ 405.850172][T18937] [ 405.850180][T18937] __dump_stack+0x1d/0x30 [ 405.850200][T18937] dump_stack_lvl+0xe8/0x140 [ 405.850218][T18937] dump_stack+0x15/0x1b [ 405.850287][T18937] warn_alloc+0x12b/0x1a0 [ 405.850325][T18937] ? should_failslab+0x8c/0xb0 [ 405.850357][T18937] __vmalloc_node_range_noprof+0x497/0xe00 [ 405.850482][T18937] ? selinux_capable+0x1f9/0x270 [ 405.850519][T18937] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 405.850591][T18937] __vmalloc_noprof+0x83/0xc0 [ 405.850626][T18937] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 405.850781][T18937] bpf_prog_alloc_no_stats+0x47/0x390 [ 405.850862][T18937] ? bpf_prog_alloc+0x2a/0x150 [ 405.850935][T18937] bpf_prog_alloc+0x3c/0x150 [ 405.850963][T18937] bpf_prog_load+0x514/0x1070 [ 405.851008][T18937] ? security_bpf+0x2b/0x90 [ 405.851051][T18937] __sys_bpf+0x51d/0x790 [ 405.851138][T18937] __x64_sys_bpf+0x41/0x50 [ 405.851163][T18937] x64_sys_call+0x2478/0x2fb0 [ 405.851187][T18937] do_syscall_64+0xd2/0x200 [ 405.851207][T18937] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 405.851276][T18937] ? clear_bhb_loop+0x40/0x90 [ 405.851376][T18937] ? clear_bhb_loop+0x40/0x90 [ 405.851400][T18937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.851421][T18937] RIP: 0033:0x7f297efae929 [ 405.851439][T18937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.851457][T18937] RSP: 002b:00007f297d617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.851546][T18937] RAX: ffffffffffffffda RBX: 00007f297f1d5fa0 RCX: 00007f297efae929 [ 405.851620][T18937] RDX: 0000000000000094 RSI: 0000200000000680 RDI: 0000000000000005 [ 405.851631][T18937] RBP: 00007f297d617090 R08: 0000000000000000 R09: 0000000000000000 [ 405.851641][T18937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.851723][T18937] R13: 0000000000000001 R14: 00007f297f1d5fa0 R15: 00007ffc86f27568 [ 405.851745][T18937] [ 405.851762][T18937] Mem-Info: [ 406.080209][T18937] active_anon:24233 inactive_anon:5 isolated_anon:0 [ 406.080209][T18937] active_file:15638 inactive_file:13856 isolated_file:0 [ 406.080209][T18937] unevictable:0 dirty:677 writeback:0 [ 406.080209][T18937] slab_reclaimable:3492 slab_unreclaimable:109295 [ 406.080209][T18937] mapped:34680 shmem:20751 pagetables:1531 [ 406.080209][T18937] sec_pagetables:0 bounce:0 [ 406.080209][T18937] kernel_misc_reclaimable:0 [ 406.080209][T18937] free:1757485 free_pcp:6434 free_cma:0 [ 406.126222][T18937] Node 0 active_anon:96952kB inactive_anon:20kB active_file:62552kB inactive_file:55476kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138776kB dirty:2804kB writeback:0kB shmem:82932kB writeback_tmp:0kB kernel_stack:4384kB pagetables:6128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 406.156082][T18937] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 406.185564][T18937] lowmem_reserve[]: 0 2882 7860 7860 [ 406.190919][T18937] Node 0 DMA32 free:2947828kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 406.221975][T18937] lowmem_reserve[]: 0 0 4978 4978 [ 406.227053][T18937] Node 0 Normal free:4066684kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96952kB inactive_anon:20kB active_file:62552kB inactive_file:55476kB unevictable:0kB writepending:2804kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:22128kB local_pcp:10144kB free_cma:0kB [ 406.260107][T18937] lowmem_reserve[]: 0 0 0 0 [ 406.264956][T18937] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 406.277825][T18937] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 5*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947828kB [ 406.294693][T18937] Node 0 Normal: 377*4kB (UE) 118*8kB (UME) 774*16kB (UE) 962*32kB (UME) 681*64kB (UME) 444*128kB (UME) 313*256kB (UME) 205*512kB (UM) 202*1024kB (UME) 93*2048kB (UM) 815*4096kB (UM) = 4066676kB [ 406.314844][T18937] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 406.324195][T18937] 50268 total pagecache pages [ 406.328881][T18937] 8 pages in swap cache [ 406.333118][T18937] Free swap = 124960kB [ 406.337952][T18937] Total swap = 124996kB [ 406.342318][T18937] 2097051 pages RAM [ 406.346219][T18937] 0 pages HighMem/MovableOnly [ 406.350915][T18937] 80812 pages reserved [ 406.449205][T18946] loop5: detected capacity change from 0 to 1024 [ 406.486366][T18950] loop6: detected capacity change from 0 to 2048 [ 406.517781][T18952] loop1: detected capacity change from 0 to 1024 [ 406.524553][T18952] EXT4-fs: Ignoring removed nobh option [ 406.532152][T18952] EXT4-fs: Ignoring removed bh option [ 406.539536][T18946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.556847][T18950] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 406.579398][T18952] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.611267][T14884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.633191][ T29] kauditd_printk_skb: 398 callbacks suppressed [ 406.633203][ T29] audit: type=1400 audit(1751032082.331:46967): avc: denied { map } for pid=18949 comm="syz.6.5022" path="/283/file2/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 406.663648][ T29] audit: type=1400 audit(1751032082.331:46968): avc: denied { write } for pid=18949 comm="syz.6.5022" path="/283/file2/cgroup.controllers" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 406.694237][T18952] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt. [ 406.712854][T18962] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5024'. [ 406.724707][T18950] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 406.739955][T18952] EXT4-fs (loop1): Remounting filesystem read-only [ 406.746774][T18950] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1848 with error 28 [ 406.759273][T18950] EXT4-fs (loop6): This should not happen!! Data will be lost [ 406.759273][T18950] [ 406.768980][T18950] EXT4-fs (loop6): Total free blocks count 0 [ 406.775073][T18950] EXT4-fs (loop6): Free/Dirty block details [ 406.780987][T18950] EXT4-fs (loop6): free_blocks=2415919104 [ 406.786815][T18950] EXT4-fs (loop6): dirty_blocks=1856 [ 406.792130][T18950] EXT4-fs (loop6): Block reservation details [ 406.798182][T18950] EXT4-fs (loop6): i_reserved_data_blocks=116 [ 406.812488][ T29] audit: type=1400 audit(1751032082.509:46969): avc: denied { create } for pid=18951 comm="syz.1.5023" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 406.877364][T18967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.891641][T18967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.930474][ T29] audit: type=1400 audit(1751032082.612:46970): avc: denied { map } for pid=18968 comm="syz.5.5026" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 406.954940][ T29] audit: type=1400 audit(1751032082.612:46971): avc: denied { read write } for pid=18968 comm="syz.5.5026" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=62260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 407.045034][ T29] audit: type=1400 audit(1751032082.677:46972): avc: denied { ioctl } for pid=18951 comm="syz.1.5023" path="/428/file1/file1" dev="loop1" ino=15 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 407.069834][ T29] audit: type=1400 audit(1751032082.696:46973): avc: denied { mounton } for pid=18970 comm="syz.0.5027" path="/173/bus" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 407.103943][ T1462] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 407.185029][T18976] netlink: 256 bytes leftover after parsing attributes in process `syz.6.5029'. [ 408.219212][ T29] audit: type=1400 audit(1751032082.986:46974): avc: denied { create } for pid=18970 comm="syz.0.5027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 408.239239][ T29] audit: type=1400 audit(1751032082.986:46975): avc: denied { sys_admin } for pid=18970 comm="syz.0.5027" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 408.261064][ T29] audit: type=1400 audit(1751032083.856:46976): avc: denied { mount } for pid=18975 comm="syz.6.5029" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 408.842591][T18989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.851398][T18989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.913816][T12057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.002349][T18995] loop5: detected capacity change from 0 to 1024 [ 409.020663][T18995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.048792][T19002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5034'. [ 409.079603][T18995] SET target dimension over the limit! [ 409.086026][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5034'. [ 409.106836][T14884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.150351][T19012] loop5: detected capacity change from 0 to 512 [ 409.169550][T19012] EXT4-fs (loop5): too many log groups per flexible block group [ 409.177341][T19012] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 409.184308][T19012] EXT4-fs (loop5): mount failed [ 409.196014][T19019] loop1: detected capacity change from 0 to 512 [ 409.202988][T19019] ext4: Unknown parameter 'subj_user' [ 409.446544][T19029] loop0: detected capacity change from 0 to 512 [ 409.458312][T19029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.472687][T19029] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 409.597103][T19042] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 409.786661][T19047] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5051'. [ 409.845449][T19059] IPVS: Unknown mcast interface: pimreg1 [ 409.851535][T19058] IPVS: Unknown mcast interface: pimreg1 [ 409.874647][T19061] netlink: 'syz.5.5054': attribute type 1 has an invalid length. [ 409.889122][T19063] random: crng reseeded on system resumption [ 410.001931][T19067] Process accounting resumed [ 410.083491][T19079] loop6: detected capacity change from 0 to 128 [ 410.139064][T19083] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5064'. [ 410.150718][T19083] tipc: Failed to remove unknown binding: 66,1,1/0:1572387445/1572387447 [ 410.160036][T19083] tipc: Failed to remove unknown binding: 66,1,1/0:1572387445/1572387447 [ 410.168679][T19083] tipc: Failed to remove unknown binding: 66,1,1/0:1572387445/1572387447 [ 410.329629][ T1462] FAT-fs (loop6): error, invalid FAT chain (i_pos 548, last_block 8) [ 410.337843][ T1462] FAT-fs (loop6): Filesystem has been set read-only [ 410.346597][ T1462] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 410.368637][T16179] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.658411][T19102] loop0: detected capacity change from 0 to 164 [ 410.673553][T19102] iso9660: Unknown parameter 'ÿÿ0x00000000000000000x0000000000000003' [ 411.015214][ T1462] FAT-fs (loop6): error, corrupted file size (i_pos 548, 522) [ 411.022879][ T1462] FAT-fs (loop6): Filesystem has been set read-only [ 411.160974][T19126] FAULT_INJECTION: forcing a failure. [ 411.160974][T19126] name failslab, interval 1, probability 0, space 0, times 0 [ 411.174320][T19126] CPU: 0 UID: 0 PID: 19126 Comm: syz.0.5080 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 411.174350][T19126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.174365][T19126] Call Trace: [ 411.174372][T19126] [ 411.174379][T19126] __dump_stack+0x1d/0x30 [ 411.174403][T19126] dump_stack_lvl+0xe8/0x140 [ 411.174427][T19126] dump_stack+0x15/0x1b [ 411.174447][T19126] should_fail_ex+0x265/0x280 [ 411.174486][T19126] should_failslab+0x8c/0xb0 [ 411.174507][T19126] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 411.174601][T19126] ? sidtab_sid2str_get+0xa0/0x130 [ 411.174621][T19126] ? skb_put+0xa9/0xf0 [ 411.174648][T19126] kmemdup_noprof+0x2b/0x70 [ 411.174730][T19126] sidtab_sid2str_get+0xa0/0x130 [ 411.174758][T19126] security_sid_to_context_core+0x1eb/0x2e0 [ 411.174794][T19126] security_sid_to_context+0x27/0x40 [ 411.174879][T19126] avc_audit_post_callback+0x9d/0x520 [ 411.174912][T19126] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 411.174945][T19126] common_lsm_audit+0x1bb/0x230 [ 411.174968][T19126] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 411.175093][T19126] slow_avc_audit+0x104/0x140 [ 411.175132][T19126] avc_has_perm+0x128/0x150 [ 411.175171][T19126] selinux_socket_sendmsg+0x175/0x1b0 [ 411.175239][T19126] security_socket_sendmsg+0x48/0x80 [ 411.175294][T19126] __sock_sendmsg+0x30/0x180 [ 411.175326][T19126] ____sys_sendmsg+0x31e/0x4e0 [ 411.175373][T19126] ___sys_sendmsg+0x17b/0x1d0 [ 411.175442][T19126] __x64_sys_sendmsg+0xd4/0x160 [ 411.175487][T19126] x64_sys_call+0x2999/0x2fb0 [ 411.175508][T19126] do_syscall_64+0xd2/0x200 [ 411.175542][T19126] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 411.175645][T19126] ? clear_bhb_loop+0x40/0x90 [ 411.175699][T19126] ? clear_bhb_loop+0x40/0x90 [ 411.175758][T19126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.175855][T19126] RIP: 0033:0x7ff1bc39e929 [ 411.175884][T19126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.175925][T19126] RSP: 002b:00007ff1baa07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.175950][T19126] RAX: ffffffffffffffda RBX: 00007ff1bc5c5fa0 RCX: 00007ff1bc39e929 [ 411.175966][T19126] RDX: 0000000000000000 RSI: 0000200000001f80 RDI: 0000000000000005 [ 411.175982][T19126] RBP: 00007ff1baa07090 R08: 0000000000000000 R09: 0000000000000000 [ 411.175997][T19126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.176008][T19126] R13: 0000000000000000 R14: 00007ff1bc5c5fa0 R15: 00007fff93b43378 [ 411.176027][T19126] [ 411.499489][T19129] vlan0: entered promiscuous mode [ 411.624621][T19135] 9pnet_fd: Insufficient options for proto=fd [ 411.789652][T19147] SELinux: syz.5.5083 (19147) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 411.836748][T19153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5091'. [ 411.853916][T19153] team_slave_0: entered promiscuous mode [ 411.854001][T19153] team_slave_1: entered promiscuous mode [ 411.854045][T19153] macvtap1: entered promiscuous mode [ 411.854055][T19153] team0: entered promiscuous mode [ 411.854353][T19153] macvtap1: entered allmulticast mode [ 411.854367][T19153] team0: entered allmulticast mode [ 411.854377][T19153] team_slave_0: entered allmulticast mode [ 411.854387][T19153] team_slave_1: entered allmulticast mode [ 411.855108][T19153] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 411.885281][T19152] loop0: detected capacity change from 0 to 1024 [ 411.890555][T19152] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 411.890582][T19152] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 411.890687][T19152] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 411.891366][T19152] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.5090: unexpected bad inode w/o EXT4_IGET_BAD [ 411.891684][T19152] EXT4-fs (loop0): no journal found [ 411.891698][T19152] EXT4-fs (loop0): can't get journal size [ 411.892294][T19152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 411.892690][T19152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.936805][T19156] loop0: detected capacity change from 0 to 512 [ 412.064424][T19158] FAULT_INJECTION: forcing a failure. [ 412.064424][T19158] name failslab, interval 1, probability 0, space 0, times 0 [ 412.064454][T19158] CPU: 1 UID: 0 PID: 19158 Comm: syz.3.5093 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 412.064497][T19158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.064585][T19158] Call Trace: [ 412.064592][T19158] [ 412.064600][T19158] __dump_stack+0x1d/0x30 [ 412.064625][T19158] dump_stack_lvl+0xe8/0x140 [ 412.064643][T19158] dump_stack+0x15/0x1b [ 412.064662][T19158] should_fail_ex+0x265/0x280 [ 412.064701][T19158] should_failslab+0x8c/0xb0 [ 412.064726][T19158] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 412.064770][T19158] ? kasprintf+0x83/0xb0 [ 412.064798][T19158] kvasprintf+0x8a/0x110 [ 412.064822][T19158] ? obj_cgroup_charge_account+0x122/0x1a0 [ 412.064933][T19158] kasprintf+0x83/0xb0 [ 412.064962][T19158] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 412.065028][T19158] nf_tables_set_alloc_name+0xaa/0x4b0 [ 412.065118][T19158] ? nla_strdup+0x78/0xc0 [ 412.065191][T19158] nf_tables_newset+0xe24/0x14e0 [ 412.065319][T19158] nfnetlink_rcv+0xb99/0x1690 [ 412.065437][T19158] netlink_unicast+0x5a1/0x670 [ 412.065562][T19158] netlink_sendmsg+0x58b/0x6b0 [ 412.065644][T19158] ? __pfx_netlink_sendmsg+0x10/0x10 [ 412.065697][T19158] __sock_sendmsg+0x142/0x180 [ 412.065731][T19158] ____sys_sendmsg+0x31e/0x4e0 [ 412.065831][T19158] ___sys_sendmsg+0x17b/0x1d0 [ 412.065899][T19158] __x64_sys_sendmsg+0xd4/0x160 [ 412.066020][T19158] x64_sys_call+0x2999/0x2fb0 [ 412.066052][T19158] do_syscall_64+0xd2/0x200 [ 412.066075][T19158] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 412.066187][T19158] ? clear_bhb_loop+0x40/0x90 [ 412.066229][T19158] ? clear_bhb_loop+0x40/0x90 [ 412.066260][T19158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.066289][T19158] RIP: 0033:0x7f1f018ce929 [ 412.066312][T19158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.066335][T19158] RSP: 002b:00007f1efff37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 412.066383][T19158] RAX: ffffffffffffffda RBX: 00007f1f01af5fa0 RCX: 00007f1f018ce929 [ 412.066401][T19158] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 412.066419][T19158] RBP: 00007f1efff37090 R08: 0000000000000000 R09: 0000000000000000 [ 412.066439][T19158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 412.066528][T19158] R13: 0000000000000000 R14: 00007f1f01af5fa0 R15: 00007ffc51776bb8 [ 412.066556][T19158] [ 412.179010][T19156] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 412.179175][T19156] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 412.538773][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 412.538789][ T29] audit: type=1400 audit(1751032087.869:47346): avc: denied { write } for pid=19176 comm="syz.6.5098" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 412.540466][ T29] audit: type=1400 audit(1751032087.869:47347): avc: denied { create } for pid=19176 comm="syz.6.5098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 412.714184][T19180] loop6: detected capacity change from 0 to 8192 [ 412.788396][ T29] audit: type=1326 audit(1751032088.103:47348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.6.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 412.788433][ T29] audit: type=1326 audit(1751032088.103:47349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.6.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 412.790908][ T29] audit: type=1326 audit(1751032088.103:47350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.6.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 412.791007][ T29] audit: type=1326 audit(1751032088.103:47351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.6.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 412.791036][ T29] audit: type=1326 audit(1751032088.103:47352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.6.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 412.791120][ T29] audit: type=1326 audit(1751032088.103:47353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.6.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 412.791151][ T29] audit: type=1326 audit(1751032088.103:47354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.6.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 412.791179][ T29] audit: type=1326 audit(1751032088.103:47355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19178 comm="syz.6.5099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 412.859176][T16179] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.924088][T19188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=19188 comm=syz.6.5099 [ 413.108312][T19190] loop0: detected capacity change from 0 to 1024 [ 413.129085][T19190] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 413.139528][T19190] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 413.155195][T19190] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 413.189187][T19190] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.5102: unexpected bad inode w/o EXT4_IGET_BAD [ 413.215195][T19190] EXT4-fs (loop0): no journal found [ 413.220556][T19190] EXT4-fs (loop0): can't get journal size [ 413.244328][T19190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 413.268959][T19190] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.421180][T19213] loop1: detected capacity change from 0 to 2048 [ 413.428422][T19213] EXT4-fs: dax option not supported [ 413.514306][T19216] loop3: detected capacity change from 0 to 8192 [ 413.618097][T19219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=19219 comm=syz.3.5112 [ 413.806171][T19222] loop5: detected capacity change from 0 to 512 [ 413.819955][T19222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.833023][T19222] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 413.957620][T19227] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 414.428905][T19238] FAULT_INJECTION: forcing a failure. [ 414.428905][T19238] name failslab, interval 1, probability 0, space 0, times 0 [ 414.442303][T19238] CPU: 0 UID: 0 PID: 19238 Comm: syz.3.5120 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 414.442334][T19238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.442348][T19238] Call Trace: [ 414.442355][T19238] [ 414.442432][T19238] __dump_stack+0x1d/0x30 [ 414.442454][T19238] dump_stack_lvl+0xe8/0x140 [ 414.442516][T19238] dump_stack+0x15/0x1b [ 414.442534][T19238] should_fail_ex+0x265/0x280 [ 414.442569][T19238] ? register_netdevice+0x1e8/0xf00 [ 414.442607][T19238] should_failslab+0x8c/0xb0 [ 414.442687][T19238] __kmalloc_cache_noprof+0x4c/0x320 [ 414.442781][T19238] register_netdevice+0x1e8/0xf00 [ 414.442823][T19238] bond_newlink+0x47/0xa0 [ 414.442843][T19238] ? __pfx_bond_newlink+0x10/0x10 [ 414.442945][T19238] rtnl_newlink_create+0x1b9/0x620 [ 414.442979][T19238] ? __schedule+0x6a8/0xb30 [ 414.443012][T19238] rtnl_newlink+0xf29/0x12d0 [ 414.443124][T19238] ? __kfree_skb+0x109/0x150 [ 414.443151][T19238] ? __memcg_slab_free_hook+0x135/0x230 [ 414.443252][T19238] ? __kfree_skb+0x109/0x150 [ 414.443284][T19238] ? __rcu_read_unlock+0x4f/0x70 [ 414.443326][T19238] ? avc_has_perm_noaudit+0x1b1/0x200 [ 414.443402][T19238] ? selinux_capable+0x1f9/0x270 [ 414.443438][T19238] ? security_capable+0x83/0x90 [ 414.443463][T19238] ? ns_capable+0x7d/0xb0 [ 414.443531][T19238] ? __pfx_rtnl_newlink+0x10/0x10 [ 414.443612][T19238] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 414.443642][T19238] netlink_rcv_skb+0x120/0x220 [ 414.443671][T19238] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 414.443700][T19238] rtnetlink_rcv+0x1c/0x30 [ 414.443734][T19238] netlink_unicast+0x5a1/0x670 [ 414.443802][T19238] netlink_sendmsg+0x58b/0x6b0 [ 414.443827][T19238] ? __pfx_netlink_sendmsg+0x10/0x10 [ 414.443850][T19238] __sock_sendmsg+0x142/0x180 [ 414.443953][T19238] ____sys_sendmsg+0x31e/0x4e0 [ 414.443986][T19238] ___sys_sendmsg+0x17b/0x1d0 [ 414.444048][T19238] __x64_sys_sendmsg+0xd4/0x160 [ 414.444089][T19238] x64_sys_call+0x2999/0x2fb0 [ 414.444109][T19238] do_syscall_64+0xd2/0x200 [ 414.444129][T19238] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 414.444212][T19238] ? clear_bhb_loop+0x40/0x90 [ 414.444231][T19238] ? clear_bhb_loop+0x40/0x90 [ 414.444301][T19238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.444334][T19238] RIP: 0033:0x7f1f018ce929 [ 414.444362][T19238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.444378][T19238] RSP: 002b:00007f1efff37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 414.444394][T19238] RAX: ffffffffffffffda RBX: 00007f1f01af5fa0 RCX: 00007f1f018ce929 [ 414.444406][T19238] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 414.444420][T19238] RBP: 00007f1efff37090 R08: 0000000000000000 R09: 0000000000000000 [ 414.444435][T19238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 414.444484][T19238] R13: 0000000000000000 R14: 00007f1f01af5fa0 R15: 00007ffc51776bb8 [ 414.444506][T19238] [ 414.457471][T19234] loop0: detected capacity change from 0 to 1024 [ 414.761220][T19243] FAULT_INJECTION: forcing a failure. [ 414.761220][T19243] name failslab, interval 1, probability 0, space 0, times 0 [ 414.773908][T19243] CPU: 1 UID: 0 PID: 19243 Comm: syz.6.5121 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 414.773984][T19243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.774044][T19243] Call Trace: [ 414.774053][T19243] [ 414.774064][T19243] __dump_stack+0x1d/0x30 [ 414.774091][T19243] dump_stack_lvl+0xe8/0x140 [ 414.774117][T19243] dump_stack+0x15/0x1b [ 414.774138][T19243] should_fail_ex+0x265/0x280 [ 414.774178][T19243] should_failslab+0x8c/0xb0 [ 414.774228][T19243] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 414.774268][T19243] ? kasprintf+0x83/0xb0 [ 414.774299][T19243] kvasprintf+0x8a/0x110 [ 414.774338][T19243] kasprintf+0x83/0xb0 [ 414.774397][T19243] alloc_bprm+0x12d/0x350 [ 414.774441][T19243] do_execveat_common+0x12e/0x750 [ 414.774513][T19243] ? getname_flags+0x154/0x3b0 [ 414.774543][T19243] __x64_sys_execveat+0x73/0x90 [ 414.774586][T19243] x64_sys_call+0x2dae/0x2fb0 [ 414.774613][T19243] do_syscall_64+0xd2/0x200 [ 414.774654][T19243] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 414.774688][T19243] ? clear_bhb_loop+0x40/0x90 [ 414.774716][T19243] ? clear_bhb_loop+0x40/0x90 [ 414.774771][T19243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.774798][T19243] RIP: 0033:0x7f297efae929 [ 414.774817][T19243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.774841][T19243] RSP: 002b:00007f297d617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 414.774863][T19243] RAX: ffffffffffffffda RBX: 00007f297f1d5fa0 RCX: 00007f297efae929 [ 414.774881][T19243] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 414.774920][T19243] RBP: 00007f297d617090 R08: 0000000000001000 R09: 0000000000000000 [ 414.774935][T19243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.774956][T19243] R13: 0000000000000000 R14: 00007f297f1d5fa0 R15: 00007ffc86f27568 [ 414.774982][T19243] [ 414.978131][T14884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.994965][T19234] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 415.004916][T19234] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 415.015858][T19234] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 415.028611][T19234] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.5118: unexpected bad inode w/o EXT4_IGET_BAD [ 415.042255][T19234] EXT4-fs (loop0): no journal found [ 415.047552][T19234] EXT4-fs (loop0): can't get journal size [ 415.054359][T19234] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 415.067275][T19234] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.090522][T19245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5123'. [ 415.148317][T19246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5123'. [ 415.157871][T19245] macvtap2: entered promiscuous mode [ 415.163326][T19245] macvtap2: entered allmulticast mode [ 415.173062][T19245] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 415.208362][T19254] loop6: detected capacity change from 0 to 8192 [ 415.339410][T19273] loop5: detected capacity change from 0 to 512 [ 415.354779][T19273] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 415.364004][T19268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=19268 comm=syz.6.5124 [ 415.391467][T19273] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.5133: iget: bogus i_mode (5) [ 415.412188][T19273] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.5133: couldn't read orphan inode 15 (err -117) [ 415.436070][T19273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.461585][T19273] ext2 filesystem being mounted at /313 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.501050][T14884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.587929][T19284] loop5: detected capacity change from 0 to 1024 [ 415.604647][T19284] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 415.614632][T19284] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 415.632373][T19284] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 415.644368][T19284] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #5: comm syz.5.5136: unexpected bad inode w/o EXT4_IGET_BAD [ 415.666768][T19284] EXT4-fs (loop5): no journal found [ 415.672090][T19284] EXT4-fs (loop5): can't get journal size [ 415.678625][T19284] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 415.691768][T19284] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.778618][T19299] netlink: 'syz.1.5140': attribute type 5 has an invalid length. [ 415.815877][T19301] Dead loop on virtual device ip6_vti0, fix it urgently! [ 415.969486][T19312] netlink: 'syz.5.5145': attribute type 4 has an invalid length. [ 416.005800][T19314] loop6: detected capacity change from 0 to 512 [ 416.012849][T19314] ext4: Unknown parameter 'dont_appraise' [ 416.034294][T19315] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 416.034294][T19315] The task syz.3.5142 (19315) triggered the difference, watch for misbehavior. [ 416.325195][T19328] loop0: detected capacity change from 0 to 1024 [ 416.347666][T19328] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 416.358256][T19328] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 416.376408][T19328] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 416.387158][T19328] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.5151: unexpected bad inode w/o EXT4_IGET_BAD [ 416.408629][T19333] loop6: detected capacity change from 0 to 512 [ 416.408659][T19334] loop5: detected capacity change from 0 to 512 [ 416.422367][T19328] EXT4-fs (loop0): no journal found [ 416.427603][T19328] EXT4-fs (loop0): can't get journal size [ 416.431663][T19333] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 416.437308][T19328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 416.461234][T19334] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 416.469209][T19334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 416.500671][T19334] System zones: 0-1, 15-15, 18-18, 34-34 [ 416.503326][T19333] EXT4-fs (loop6): 1 truncate cleaned up [ 416.506530][T19334] EXT4-fs (loop5): orphan cleanup on readonly fs [ 416.518796][T19334] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 416.534019][T19334] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 416.541120][T19334] EXT4-fs (loop5): 1 truncate cleaned up [ 416.554935][T19333] FAULT_INJECTION: forcing a failure. [ 416.554935][T19333] name failslab, interval 1, probability 0, space 0, times 0 [ 416.567680][T19333] CPU: 0 UID: 0 PID: 19333 Comm: syz.6.5153 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 416.567704][T19333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.567740][T19333] Call Trace: [ 416.567745][T19333] [ 416.567751][T19333] __dump_stack+0x1d/0x30 [ 416.567771][T19333] dump_stack_lvl+0xe8/0x140 [ 416.567835][T19333] dump_stack+0x15/0x1b [ 416.567850][T19333] should_fail_ex+0x265/0x280 [ 416.567878][T19333] should_failslab+0x8c/0xb0 [ 416.567899][T19333] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 416.567995][T19333] ? sidtab_sid2str_get+0xa0/0x130 [ 416.568016][T19333] ? skb_put+0xa9/0xf0 [ 416.568102][T19333] kmemdup_noprof+0x2b/0x70 [ 416.568124][T19333] sidtab_sid2str_get+0xa0/0x130 [ 416.568145][T19333] security_sid_to_context_core+0x1eb/0x2e0 [ 416.568185][T19333] security_sid_to_context+0x27/0x40 [ 416.568276][T19333] avc_audit_post_callback+0x9d/0x520 [ 416.568301][T19333] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 416.568327][T19333] common_lsm_audit+0x1bb/0x230 [ 416.568419][T19333] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 416.568511][T19333] ? avc_denied+0xe4/0x100 [ 416.568559][T19333] slow_avc_audit+0x104/0x140 [ 416.568586][T19333] avc_has_perm+0x128/0x150 [ 416.568612][T19333] selinux_perf_event_open+0xd4/0xe0 [ 416.568631][T19333] security_perf_event_open+0x34/0x70 [ 416.568715][T19333] find_get_context+0x33a/0x540 [ 416.568812][T19333] __se_sys_perf_event_open+0x79b/0x11c0 [ 416.568838][T19333] ? __rcu_read_unlock+0x4f/0x70 [ 416.568865][T19333] __x64_sys_perf_event_open+0x67/0x80 [ 416.568891][T19333] x64_sys_call+0x27ec/0x2fb0 [ 416.568985][T19333] do_syscall_64+0xd2/0x200 [ 416.569001][T19333] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 416.569024][T19333] ? clear_bhb_loop+0x40/0x90 [ 416.569044][T19333] ? clear_bhb_loop+0x40/0x90 [ 416.569112][T19333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.569131][T19333] RIP: 0033:0x7f297efae929 [ 416.569144][T19333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.569160][T19333] RSP: 002b:00007f297d617038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 416.569176][T19333] RAX: ffffffffffffffda RBX: 00007f297f1d5fa0 RCX: 00007f297efae929 [ 416.569187][T19333] RDX: 0000000000000001 RSI: ffffffffffffffff RDI: 0000200000000140 [ 416.569198][T19333] RBP: 00007f297d617090 R08: 0000000000000002 R09: 0000000000000000 [ 416.569279][T19333] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000002 [ 416.569290][T19333] R13: 0000000000000000 R14: 00007f297f1d5fa0 R15: 00007ffc86f27568 [ 416.569385][T19333] [ 416.913010][T19342] loop3: detected capacity change from 0 to 1024 [ 417.103373][T19348] loop6: detected capacity change from 0 to 128 [ 417.137589][T19352] loop0: detected capacity change from 0 to 1024 [ 417.164800][T19352] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 417.175372][T19352] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 417.186653][T19352] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 417.197191][T19352] EXT4-fs (loop0): external journal device major/minor numbers have changed [ 417.205925][T19352] EXT4-fs (loop0): filesystem has both journal inode and journal device! [ 417.394142][T19366] loop0: detected capacity change from 0 to 1024 [ 417.402362][T19366] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 417.412779][T19366] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 417.422994][T19366] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 417.434699][T19366] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.5164: unexpected bad inode w/o EXT4_IGET_BAD [ 417.448410][T19366] EXT4-fs (loop0): no journal found [ 417.454496][T19366] EXT4-fs (loop0): can't get journal size [ 417.578982][T19373] loop0: detected capacity change from 0 to 512 [ 417.604142][T19373] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 417.898681][ T29] kauditd_printk_skb: 966 callbacks suppressed [ 417.898701][ T29] audit: type=1326 audit(1751032092.874:48321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19345 comm="syz.3.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f018c58e7 code=0x7ffc0000 [ 417.928652][ T29] audit: type=1326 audit(1751032092.874:48322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19345 comm="syz.3.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f0186ab19 code=0x7ffc0000 [ 417.952168][ T29] audit: type=1326 audit(1751032092.874:48323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19345 comm="syz.3.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1f018ce929 code=0x7ffc0000 [ 417.975830][ T29] audit: type=1326 audit(1751032092.884:48324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19345 comm="syz.3.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f018c58e7 code=0x7ffc0000 [ 417.999497][ T29] audit: type=1326 audit(1751032092.884:48325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19345 comm="syz.3.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f0186ab19 code=0x7ffc0000 [ 418.023050][ T29] audit: type=1326 audit(1751032092.884:48326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19345 comm="syz.3.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1f018ce929 code=0x7ffc0000 [ 418.046659][ T29] audit: type=1326 audit(1751032092.893:48327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19345 comm="syz.3.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f018c58e7 code=0x7ffc0000 [ 418.070320][ T29] audit: type=1326 audit(1751032092.893:48328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19345 comm="syz.3.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f0186ab19 code=0x7ffc0000 [ 418.093982][ T29] audit: type=1326 audit(1751032092.893:48329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19345 comm="syz.3.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f1f018ce929 code=0x7ffc0000 [ 418.131207][ T29] audit: type=1326 audit(1751032092.902:48330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19345 comm="syz.3.5156" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f018c58e7 code=0x7ffc0000 [ 418.325429][T19395] netlink: 332 bytes leftover after parsing attributes in process `syz.3.5174'. [ 418.334612][T19395] netlink: 'syz.3.5174': attribute type 9 has an invalid length. [ 418.342577][T19395] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5174'. [ 418.351826][T19395] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5174'. [ 418.498593][T19399] loop1: detected capacity change from 0 to 1024 [ 418.551005][T19399] SET target dimension over the limit! [ 418.673015][T19411] loop5: detected capacity change from 0 to 512 [ 418.698292][T19411] ext4 filesystem being mounted at /319/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 418.747016][T19411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.751541][T19412] siw: device registration error -23 [ 418.766934][T19411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.887442][T19417] loop1: detected capacity change from 0 to 512 [ 419.330127][T19422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.354895][ T8358] usb usb6-port1: attempt power cycle [ 419.376836][T19422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.447066][T19424] loop5: detected capacity change from 0 to 2048 [ 419.481136][T19424] EXT4-fs: Ignoring removed mblk_io_submit option [ 419.579083][T19427] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5183: bg 0: block 234: padding at end of block bitmap is not set [ 419.610403][T19427] EXT4-fs (loop5): Remounting filesystem read-only [ 419.767622][T19434] FAULT_INJECTION: forcing a failure. [ 419.767622][T19434] name failslab, interval 1, probability 0, space 0, times 0 [ 419.780377][T19434] CPU: 1 UID: 0 PID: 19434 Comm: syz.5.5186 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 419.780411][T19434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.780427][T19434] Call Trace: [ 419.780440][T19434] [ 419.780449][T19434] __dump_stack+0x1d/0x30 [ 419.780476][T19434] dump_stack_lvl+0xe8/0x140 [ 419.780499][T19434] dump_stack+0x15/0x1b [ 419.780519][T19434] should_fail_ex+0x265/0x280 [ 419.780548][T19434] should_failslab+0x8c/0xb0 [ 419.780628][T19434] kmem_cache_alloc_noprof+0x50/0x310 [ 419.780654][T19434] ? skb_clone+0x151/0x1f0 [ 419.780672][T19434] skb_clone+0x151/0x1f0 [ 419.780688][T19434] __netlink_deliver_tap+0x2c9/0x500 [ 419.780766][T19434] netlink_unicast+0x64c/0x670 [ 419.780900][T19434] netlink_sendmsg+0x58b/0x6b0 [ 419.780947][T19434] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.780973][T19434] __sock_sendmsg+0x142/0x180 [ 419.781006][T19434] ____sys_sendmsg+0x31e/0x4e0 [ 419.781128][T19434] ___sys_sendmsg+0x17b/0x1d0 [ 419.781217][T19434] __x64_sys_sendmsg+0xd4/0x160 [ 419.781268][T19434] x64_sys_call+0x2999/0x2fb0 [ 419.781290][T19434] do_syscall_64+0xd2/0x200 [ 419.781318][T19434] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 419.781392][T19434] ? clear_bhb_loop+0x40/0x90 [ 419.781419][T19434] ? clear_bhb_loop+0x40/0x90 [ 419.781519][T19434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.781549][T19434] RIP: 0033:0x7f3ec3b6e929 [ 419.781569][T19434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.781663][T19434] RSP: 002b:00007f3ec21d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.781688][T19434] RAX: ffffffffffffffda RBX: 00007f3ec3d95fa0 RCX: 00007f3ec3b6e929 [ 419.781782][T19434] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 419.781798][T19434] RBP: 00007f3ec21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 419.781824][T19434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.781840][T19434] R13: 0000000000000000 R14: 00007f3ec3d95fa0 R15: 00007ffcbe072448 [ 419.781909][T19434] [ 420.071390][T19441] loop3: detected capacity change from 0 to 1024 [ 420.217617][T19446] SET target dimension over the limit! [ 420.755293][T19451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5191'. [ 421.017901][T19465] loop3: detected capacity change from 0 to 512 [ 421.024954][T19465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 421.037555][T19465] EXT4-fs (loop3): 1 truncate cleaned up [ 421.427933][ T8358] usb usb6-port1: unable to enumerate USB device [ 421.514602][T19483] FAULT_INJECTION: forcing a failure. [ 421.514602][T19483] name failslab, interval 1, probability 0, space 0, times 0 [ 421.527365][T19483] CPU: 1 UID: 0 PID: 19483 Comm: syz.0.5204 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 421.527394][T19483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.527405][T19483] Call Trace: [ 421.527411][T19483] [ 421.527418][T19483] __dump_stack+0x1d/0x30 [ 421.527441][T19483] dump_stack_lvl+0xe8/0x140 [ 421.527504][T19483] dump_stack+0x15/0x1b [ 421.527520][T19483] should_fail_ex+0x265/0x280 [ 421.527549][T19483] should_failslab+0x8c/0xb0 [ 421.527577][T19483] kmem_cache_alloc_noprof+0x50/0x310 [ 421.527605][T19483] ? p9_client_prepare_req+0xef/0x820 [ 421.527656][T19483] p9_client_prepare_req+0xef/0x820 [ 421.527691][T19483] ? parse_opts+0x2a0/0x2d0 [ 421.527708][T19483] ? kfree+0xd9/0x320 [ 421.527760][T19483] ? __list_add_valid_or_report+0x38/0xe0 [ 421.527787][T19483] p9_client_rpc+0xdf/0x6c0 [ 421.527927][T19483] ? p9_pollwait+0xb1/0xe0 [ 421.527949][T19483] ? pipe_poll+0x222/0x250 [ 421.527975][T19483] ? p9_conn_create+0x2eb/0x320 [ 421.527992][T19483] ? p9_fd_create+0x26a/0x280 [ 421.528016][T19483] p9_client_create+0x743/0xbc0 [ 421.528137][T19483] v9fs_session_init+0xf7/0xde0 [ 421.528162][T19483] ? obj_cgroup_charge_account+0x122/0x1a0 [ 421.528198][T19483] ? __rcu_read_unlock+0x4f/0x70 [ 421.528223][T19483] ? should_fail_ex+0xdb/0x280 [ 421.528277][T19483] ? v9fs_mount+0x51/0x590 [ 421.528378][T19483] ? should_failslab+0x8c/0xb0 [ 421.528408][T19483] ? __kmalloc_cache_noprof+0x189/0x320 [ 421.528436][T19483] v9fs_mount+0x67/0x590 [ 421.528464][T19483] ? __pfx_v9fs_mount+0x10/0x10 [ 421.528525][T19483] legacy_get_tree+0x78/0xd0 [ 421.528595][T19483] vfs_get_tree+0x54/0x1d0 [ 421.528649][T19483] do_new_mount+0x207/0x680 [ 421.528752][T19483] path_mount+0x4a4/0xb20 [ 421.528839][T19483] ? user_path_at+0x109/0x130 [ 421.528869][T19483] __se_sys_mount+0x28f/0x2e0 [ 421.528918][T19483] ? fput+0x8f/0xc0 [ 421.529009][T19483] __x64_sys_mount+0x67/0x80 [ 421.529030][T19483] x64_sys_call+0xd36/0x2fb0 [ 421.529056][T19483] do_syscall_64+0xd2/0x200 [ 421.529155][T19483] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 421.529182][T19483] ? clear_bhb_loop+0x40/0x90 [ 421.529208][T19483] ? clear_bhb_loop+0x40/0x90 [ 421.529234][T19483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.529277][T19483] RIP: 0033:0x7ff1bc39e929 [ 421.529291][T19483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.529309][T19483] RSP: 002b:00007ff1baa07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 421.529331][T19483] RAX: ffffffffffffffda RBX: 00007ff1bc5c5fa0 RCX: 00007ff1bc39e929 [ 421.529343][T19483] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 421.529355][T19483] RBP: 00007ff1baa07090 R08: 0000200000000240 R09: 0000000000000000 [ 421.529395][T19483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 421.529409][T19483] R13: 0000000000000000 R14: 00007ff1bc5c5fa0 R15: 00007fff93b43378 [ 421.529433][T19483] [ 421.854755][T19485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.864577][T19485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.007105][T19489] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5207'. [ 422.016457][T19489] netlink: 'syz.5.5207': attribute type 4 has an invalid length. [ 422.063963][T19497] loop3: detected capacity change from 0 to 512 [ 422.077784][T19497] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 422.098514][T19497] EXT4-fs (loop3): 1 truncate cleaned up [ 422.139173][T19510] FAULT_INJECTION: forcing a failure. [ 422.139173][T19510] name failslab, interval 1, probability 0, space 0, times 0 [ 422.151891][T19510] CPU: 1 UID: 0 PID: 19510 Comm: syz.1.5214 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 422.151978][T19510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.151992][T19510] Call Trace: [ 422.152000][T19510] [ 422.152008][T19510] __dump_stack+0x1d/0x30 [ 422.152032][T19510] dump_stack_lvl+0xe8/0x140 [ 422.152080][T19510] dump_stack+0x15/0x1b [ 422.152094][T19510] should_fail_ex+0x265/0x280 [ 422.152128][T19510] should_failslab+0x8c/0xb0 [ 422.152155][T19510] kmem_cache_alloc_node_noprof+0x57/0x320 [ 422.152224][T19510] ? __alloc_skb+0x101/0x320 [ 422.152256][T19510] __alloc_skb+0x101/0x320 [ 422.152284][T19510] ? audit_log_start+0x365/0x6c0 [ 422.152346][T19510] audit_log_start+0x380/0x6c0 [ 422.152464][T19510] audit_seccomp+0x48/0x100 [ 422.152556][T19510] ? __seccomp_filter+0x68c/0x10d0 [ 422.152584][T19510] __seccomp_filter+0x69d/0x10d0 [ 422.152625][T19510] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 422.152666][T19510] ? vfs_write+0x75e/0x8e0 [ 422.152702][T19510] ? __rcu_read_unlock+0x4f/0x70 [ 422.152795][T19510] ? __fget_files+0x184/0x1c0 [ 422.152894][T19510] __secure_computing+0x82/0x150 [ 422.152918][T19510] syscall_trace_enter+0xcf/0x1e0 [ 422.152943][T19510] do_syscall_64+0xac/0x200 [ 422.152957][T19510] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 422.153020][T19510] ? clear_bhb_loop+0x40/0x90 [ 422.153040][T19510] ? clear_bhb_loop+0x40/0x90 [ 422.153124][T19510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.153146][T19510] RIP: 0033:0x7fddbd30e929 [ 422.153161][T19510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.153176][T19510] RSP: 002b:00007fddbb977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000082 [ 422.153194][T19510] RAX: ffffffffffffffda RBX: 00007fddbd535fa0 RCX: 00007fddbd30e929 [ 422.153207][T19510] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 422.153222][T19510] RBP: 00007fddbb977090 R08: 0000000000000000 R09: 0000000000000000 [ 422.153234][T19510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.153246][T19510] R13: 0000000000000000 R14: 00007fddbd535fa0 R15: 00007ffca00c0868 [ 422.153266][T19510] [ 422.421863][T19517] tmpfs: Bad value for 'mpol' [ 422.422829][T19520] FAULT_INJECTION: forcing a failure. [ 422.422829][T19520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.430914][T19517] $Hÿ: renamed from bond0 (while UP) [ 422.440472][T19520] CPU: 0 UID: 0 PID: 19520 Comm: syz.0.5219 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 422.440505][T19520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.440520][T19520] Call Trace: [ 422.440546][T19520] [ 422.440555][T19520] __dump_stack+0x1d/0x30 [ 422.440580][T19520] dump_stack_lvl+0xe8/0x140 [ 422.440604][T19520] dump_stack+0x15/0x1b [ 422.440623][T19520] should_fail_ex+0x265/0x280 [ 422.440762][T19520] should_fail+0xb/0x20 [ 422.440846][T19520] should_fail_usercopy+0x1a/0x20 [ 422.440892][T19520] _copy_from_user+0x1c/0xb0 [ 422.440917][T19520] ___sys_sendmsg+0xc1/0x1d0 [ 422.441035][T19520] __x64_sys_sendmsg+0xd4/0x160 [ 422.441083][T19520] x64_sys_call+0x2999/0x2fb0 [ 422.441110][T19520] do_syscall_64+0xd2/0x200 [ 422.441134][T19520] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 422.441249][T19520] ? clear_bhb_loop+0x40/0x90 [ 422.441278][T19520] ? clear_bhb_loop+0x40/0x90 [ 422.441307][T19520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.441415][T19520] RIP: 0033:0x7ff1bc39e929 [ 422.441433][T19520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.441457][T19520] RSP: 002b:00007ff1baa07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.441480][T19520] RAX: ffffffffffffffda RBX: 00007ff1bc5c5fa0 RCX: 00007ff1bc39e929 [ 422.441497][T19520] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 422.441584][T19520] RBP: 00007ff1baa07090 R08: 0000000000000000 R09: 0000000000000000 [ 422.441594][T19520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.441606][T19520] R13: 0000000000000000 R14: 00007ff1bc5c5fa0 R15: 00007fff93b43378 [ 422.441631][T19520] [ 422.500105][T19524] IPv6: Can't replace route, no match found [ 422.546720][T19521] loop3: detected capacity change from 0 to 8192 [ 422.638226][T19517] $Hÿ: entered promiscuous mode [ 422.643302][T19517] bond_slave_0: entered promiscuous mode [ 422.649315][T19517] bond_slave_1: entered promiscuous mode [ 422.808857][T19539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=19539 comm=syz.3.5216 [ 422.823115][T19537] infiniband syz2: set down [ 422.827726][T19537] infiniband syz2: added veth0_to_bond [ 422.858310][T19537] RDS/IB: syz2: added [ 422.868492][T19537] smc: adding ib device syz2 with port count 1 [ 422.883969][T19537] smc: ib device syz2 port 1 has pnetid [ 422.995396][T19565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.026662][T19565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.045110][T19563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=19563 comm=syz.0.5225 [ 423.273686][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 423.273703][ T29] audit: type=1326 audit(1751032097.907:48735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.5.5232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec3b6e929 code=0x7ffc0000 [ 423.342253][ T29] audit: type=1326 audit(1751032097.917:48736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 423.366629][ T29] audit: type=1326 audit(1751032097.917:48737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19536 comm="syz.6.5224" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 423.390820][ T29] audit: type=1326 audit(1751032097.954:48738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.5.5232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ec3b6e929 code=0x7ffc0000 [ 423.416550][ T29] audit: type=1326 audit(1751032098.048:48739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19568 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bc39e929 code=0x7ffc0000 [ 423.443198][ T29] audit: type=1326 audit(1751032098.048:48740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19568 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bc39e929 code=0x7ffc0000 [ 423.467588][ T29] audit: type=1326 audit(1751032098.048:48741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19568 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1bc39e929 code=0x7ffc0000 [ 423.491709][ T29] audit: type=1326 audit(1751032098.048:48742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19568 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bc39e929 code=0x7ffc0000 [ 423.516285][ T29] audit: type=1326 audit(1751032098.048:48743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19568 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1bc39e929 code=0x7ffc0000 [ 423.540463][ T29] audit: type=1326 audit(1751032098.048:48744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19568 comm="syz.0.5234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1bc39e929 code=0x7ffc0000 [ 423.583674][T19578] FAULT_INJECTION: forcing a failure. [ 423.583674][T19578] name failslab, interval 1, probability 0, space 0, times 0 [ 423.596360][T19578] CPU: 0 UID: 0 PID: 19578 Comm: syz.6.5238 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 423.596508][T19578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 423.596524][T19578] Call Trace: [ 423.596533][T19578] [ 423.596542][T19578] __dump_stack+0x1d/0x30 [ 423.596583][T19578] dump_stack_lvl+0xe8/0x140 [ 423.596602][T19578] dump_stack+0x15/0x1b [ 423.596619][T19578] should_fail_ex+0x265/0x280 [ 423.596659][T19578] should_failslab+0x8c/0xb0 [ 423.596690][T19578] __kvmalloc_node_noprof+0x123/0x4e0 [ 423.596745][T19578] ? traverse+0x9d/0x3a0 [ 423.596777][T19578] traverse+0x9d/0x3a0 [ 423.596811][T19578] seq_read_iter+0x853/0x940 [ 423.596845][T19578] ? 0xffffffff81000000 [ 423.596889][T19578] ? __rcu_read_unlock+0x4f/0x70 [ 423.596916][T19578] ? get_pid_task+0x96/0xd0 [ 423.596973][T19578] kernfs_fop_read_iter+0xc4/0x300 [ 423.597006][T19578] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 423.597036][T19578] vfs_read+0x5cd/0x6f0 [ 423.597131][T19578] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 423.597164][T19578] __x64_sys_pread64+0xfd/0x150 [ 423.597185][T19578] x64_sys_call+0x296d/0x2fb0 [ 423.597221][T19578] do_syscall_64+0xd2/0x200 [ 423.597244][T19578] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 423.597309][T19578] ? clear_bhb_loop+0x40/0x90 [ 423.597330][T19578] ? clear_bhb_loop+0x40/0x90 [ 423.597355][T19578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.597503][T19578] RIP: 0033:0x7f297efae929 [ 423.597520][T19578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 423.597539][T19578] RSP: 002b:00007f297d617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 423.597557][T19578] RAX: ffffffffffffffda RBX: 00007f297f1d5fa0 RCX: 00007f297efae929 [ 423.597577][T19578] RDX: 0000000000001000 RSI: 0000200000001840 RDI: 0000000000000005 [ 423.597593][T19578] RBP: 00007f297d617090 R08: 0000000000000000 R09: 0000000000000000 [ 423.597618][T19578] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 423.597629][T19578] R13: 0000000000000000 R14: 00007f297f1d5fa0 R15: 00007ffc86f27568 [ 423.597672][T19578] [ 423.822765][T19580] loop3: detected capacity change from 0 to 1024 [ 423.830353][T19580] EXT4-fs: inline encryption not supported [ 423.839938][T19580] EXT4-fs: Ignoring removed bh option [ 423.868911][T19580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5237'. [ 423.901615][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5243'. [ 424.012425][T19603] FAULT_INJECTION: forcing a failure. [ 424.012425][T19603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.026226][T19603] CPU: 0 UID: 0 PID: 19603 Comm: syz.3.5245 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 424.026259][T19603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.026274][T19603] Call Trace: [ 424.026282][T19603] [ 424.026353][T19603] __dump_stack+0x1d/0x30 [ 424.026377][T19603] dump_stack_lvl+0xe8/0x140 [ 424.026399][T19603] dump_stack+0x15/0x1b [ 424.026430][T19603] should_fail_ex+0x265/0x280 [ 424.026534][T19603] should_fail+0xb/0x20 [ 424.026558][T19603] should_fail_usercopy+0x1a/0x20 [ 424.026680][T19603] _copy_from_user+0x1c/0xb0 [ 424.026703][T19603] ___sys_sendmsg+0xc1/0x1d0 [ 424.026751][T19603] __x64_sys_sendmsg+0xd4/0x160 [ 424.026788][T19603] x64_sys_call+0x2999/0x2fb0 [ 424.026827][T19603] do_syscall_64+0xd2/0x200 [ 424.026842][T19603] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 424.026866][T19603] ? clear_bhb_loop+0x40/0x90 [ 424.026952][T19603] ? clear_bhb_loop+0x40/0x90 [ 424.027021][T19603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.027040][T19603] RIP: 0033:0x7f1f018ce929 [ 424.027053][T19603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.027067][T19603] RSP: 002b:00007f1efff37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.027086][T19603] RAX: ffffffffffffffda RBX: 00007f1f01af5fa0 RCX: 00007f1f018ce929 [ 424.027099][T19603] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 424.027112][T19603] RBP: 00007f1efff37090 R08: 0000000000000000 R09: 0000000000000000 [ 424.027167][T19603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.027179][T19603] R13: 0000000000000000 R14: 00007f1f01af5fa0 R15: 00007ffc51776bb8 [ 424.027197][T19603] [ 424.243197][T19619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.258399][T19619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.804249][T19626] loop6: detected capacity change from 0 to 512 [ 424.819034][T19626] ext4 filesystem being mounted at /318/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 424.927232][T19638] loop5: detected capacity change from 0 to 1024 [ 424.987579][T19638] SET target dimension over the limit! [ 425.085748][T19666] loop5: detected capacity change from 0 to 1024 [ 425.092635][T19666] EXT4-fs: inline encryption not supported [ 425.100304][T19666] EXT4-fs: Ignoring removed bh option [ 425.131479][T19666] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5265'. [ 425.218807][T19671] loop5: detected capacity change from 0 to 1024 [ 425.225836][T19671] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 425.235633][T19671] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 425.245348][T19671] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 425.255829][T19671] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #5: comm syz.5.5266: unexpected bad inode w/o EXT4_IGET_BAD [ 425.269229][T19671] EXT4-fs (loop5): no journal found [ 425.274489][T19671] EXT4-fs (loop5): can't get journal size [ 425.326495][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a9a0200: rx timeout, send abort [ 425.334747][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a9a0200: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 425.348430][ C0] vcan0: j1939_tp_rxtimer: 0xffff88815d5d5c00: rx timeout, send abort [ 425.357884][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88815d5d5c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 425.357903][T19678] loop5: detected capacity change from 0 to 512 [ 425.358435][T19678] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 425.401741][T19678] EXT4-fs (loop5): 1 truncate cleaned up [ 425.413631][T19681] loop3: detected capacity change from 0 to 1024 [ 425.421197][T19681] EXT4-fs: Ignoring removed i_version option [ 425.427899][T19681] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 425.428216][T19678] FAULT_INJECTION: forcing a failure. [ 425.428216][T19678] name failslab, interval 1, probability 0, space 0, times 0 [ 425.450893][T19678] CPU: 1 UID: 0 PID: 19678 Comm: syz.5.5268 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 425.450922][T19678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.450991][T19678] Call Trace: [ 425.450996][T19678] [ 425.451003][T19678] __dump_stack+0x1d/0x30 [ 425.451023][T19678] dump_stack_lvl+0xe8/0x140 [ 425.451043][T19683] loop1: detected capacity change from 0 to 256 [ 425.451045][T19678] dump_stack+0x15/0x1b [ 425.451115][T19678] should_fail_ex+0x265/0x280 [ 425.451156][T19678] should_failslab+0x8c/0xb0 [ 425.451185][T19678] kmem_cache_alloc_noprof+0x50/0x310 [ 425.451271][T19678] ? ext4_mb_new_blocks+0x2ce/0x2050 [ 425.451294][T19678] ? __mark_inode_dirty+0x43c/0x760 [ 425.451322][T19678] ext4_mb_new_blocks+0x2ce/0x2050 [ 425.451343][T19678] ? ext4_ind_map_blocks+0x814/0x14f0 [ 425.451401][T19678] ? ext4_get_branch+0x321/0x3a0 [ 425.451437][T19678] ext4_ind_map_blocks+0xb4c/0x14f0 [ 425.451545][T19678] ext4_map_blocks+0x5d2/0xd70 [ 425.451577][T19678] ext4_iomap_begin+0x93a/0xe00 [ 425.451670][T19678] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 425.451695][T19678] iomap_iter+0x338/0x730 [ 425.451725][T19678] ? should_failslab+0x8c/0xb0 [ 425.451825][T19678] __iomap_dio_rw+0x708/0x1250 [ 425.451930][T19678] ? ext4_xattr_security_get+0x32/0x40 [ 425.451964][T19678] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 425.452010][T19678] ? ext4_journal_check_start+0x11a/0x1b0 [ 425.452104][T19678] iomap_dio_rw+0x40/0x90 [ 425.452139][T19678] ext4_file_write_iter+0xad9/0xf00 [ 425.452207][T19678] do_iter_readv_writev+0x421/0x4c0 [ 425.452236][T19678] vfs_writev+0x2df/0x8b0 [ 425.452344][T19678] __se_sys_pwritev2+0xfc/0x1c0 [ 425.452433][T19678] __x64_sys_pwritev2+0x67/0x80 [ 425.452459][T19678] x64_sys_call+0x1cea/0x2fb0 [ 425.452502][T19678] do_syscall_64+0xd2/0x200 [ 425.452527][T19678] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 425.452563][T19678] ? clear_bhb_loop+0x40/0x90 [ 425.452645][T19678] ? clear_bhb_loop+0x40/0x90 [ 425.452674][T19678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.452701][T19678] RIP: 0033:0x7f3ec3b6e929 [ 425.452721][T19678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.452789][T19678] RSP: 002b:00007f3ec21d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 425.452813][T19678] RAX: ffffffffffffffda RBX: 00007f3ec3d95fa0 RCX: 00007f3ec3b6e929 [ 425.452829][T19678] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 425.452845][T19678] RBP: 00007f3ec21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 425.452861][T19678] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000001 [ 425.452928][T19678] R13: 0000000000000000 R14: 00007f3ec3d95fa0 R15: 00007ffcbe072448 [ 425.452952][T19678] [ 425.471215][T19681] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.5270: Invalid block bitmap block 0 in block_group 0 [ 425.483580][T19683] FAULT_INJECTION: forcing a failure. [ 425.483580][T19683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.507140][T19681] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.5270: Failed to acquire dquot type 0 [ 425.510447][T19683] CPU: 0 UID: 0 PID: 19683 Comm: syz.1.5269 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 425.510532][T19683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.510612][T19683] Call Trace: [ 425.510620][T19683] [ 425.510629][T19683] __dump_stack+0x1d/0x30 [ 425.510654][T19683] dump_stack_lvl+0xe8/0x140 [ 425.510677][T19683] dump_stack+0x15/0x1b [ 425.510744][T19683] should_fail_ex+0x265/0x280 [ 425.510795][T19683] should_fail+0xb/0x20 [ 425.510827][T19683] should_fail_usercopy+0x1a/0x20 [ 425.510866][T19683] copy_folio_from_iter_atomic+0x278/0x1170 [ 425.510898][T19683] ? fat_write_begin+0x4f/0xe0 [ 425.510958][T19683] ? __pfx_fat_get_block+0x10/0x10 [ 425.510990][T19683] generic_perform_write+0x2c2/0x490 [ 425.511062][T19683] __generic_file_write_iter+0xec/0x120 [ 425.511088][T19683] ? __pfx_generic_file_write_iter+0x10/0x10 [ 425.511113][T19683] generic_file_write_iter+0x8d/0x2f0 [ 425.511194][T19683] ? _parse_integer+0x27/0x40 [ 425.511261][T19683] ? kstrtoull+0x111/0x140 [ 425.511346][T19683] ? kstrtouint+0x76/0xc0 [ 425.511377][T19683] ? kstrtouint_from_user+0x9f/0xf0 [ 425.511445][T19683] ? 0xffffffff81000000 [ 425.511461][T19683] ? __rcu_read_unlock+0x4f/0x70 [ 425.511566][T19683] ? avc_policy_seqno+0x15/0x30 [ 425.511599][T19683] ? selinux_file_permission+0x1e4/0x320 [ 425.511634][T19683] ? __pfx_generic_file_write_iter+0x10/0x10 [ 425.511688][T19683] vfs_write+0x4a0/0x8e0 [ 425.511794][T19683] __x64_sys_pwrite64+0xfd/0x150 [ 425.511822][T19683] x64_sys_call+0xe45/0x2fb0 [ 425.511851][T19683] do_syscall_64+0xd2/0x200 [ 425.511931][T19683] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 425.511964][T19683] ? clear_bhb_loop+0x40/0x90 [ 425.511991][T19683] ? clear_bhb_loop+0x40/0x90 [ 425.512074][T19683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.512101][T19683] RIP: 0033:0x7fddbd30e929 [ 425.512119][T19683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.512143][T19683] RSP: 002b:00007fddbb977038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 425.512203][T19683] RAX: ffffffffffffffda RBX: 00007fddbd535fa0 RCX: 00007fddbd30e929 [ 425.512219][T19683] RDX: 00000000fffffe97 RSI: 00002000000003c0 RDI: 0000000000000004 [ 425.512234][T19683] RBP: 00007fddbb977090 R08: 0000000000000000 R09: 0000000000000000 [ 425.512249][T19683] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 425.512268][T19683] R13: 0000000000000000 R14: 00007fddbd535fa0 R15: 00007ffca00c0868 [ 425.512297][T19683] [ 426.021165][T19681] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.5270: Freeing blocks not in datazone - block = 0, count = 4096 [ 426.041975][T19681] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.5270: Invalid inode bitmap blk 0 in block_group 0 [ 426.054824][T19681] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 426.063935][ T290] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 426.079528][T19681] EXT4-fs (loop3): 1 orphan inode deleted [ 426.085474][T19688] loop5: detected capacity change from 0 to 1024 [ 426.130579][ T290] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:5: Failed to release dquot type 0 [ 426.203128][T19704] loop1: detected capacity change from 0 to 1024 [ 426.221414][T19688] SET target dimension over the limit! [ 426.228863][T19704] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 426.239272][T19704] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 426.248708][T19704] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 426.263575][T19710] loop3: detected capacity change from 0 to 512 [ 426.273016][T19704] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #5: comm syz.1.5276: unexpected bad inode w/o EXT4_IGET_BAD [ 426.293070][T19704] EXT4-fs (loop1): no journal found [ 426.298416][T19704] EXT4-fs (loop1): can't get journal size [ 426.316675][T19710] ext4 filesystem being mounted at /78/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 426.329114][T19715] loop6: detected capacity change from 0 to 164 [ 426.339041][T19715] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 426.358131][T19715] FAULT_INJECTION: forcing a failure. [ 426.358131][T19715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.371336][T19715] CPU: 0 UID: 0 PID: 19715 Comm: syz.6.5281 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 426.371362][T19715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 426.371374][T19715] Call Trace: [ 426.371380][T19715] [ 426.371386][T19715] __dump_stack+0x1d/0x30 [ 426.371409][T19715] dump_stack_lvl+0xe8/0x140 [ 426.371499][T19715] dump_stack+0x15/0x1b [ 426.371565][T19715] should_fail_ex+0x265/0x280 [ 426.371595][T19715] should_fail+0xb/0x20 [ 426.371628][T19715] should_fail_usercopy+0x1a/0x20 [ 426.371679][T19715] strncpy_from_user+0x25/0x230 [ 426.371707][T19715] ? kmem_cache_alloc_noprof+0x186/0x310 [ 426.371782][T19715] ? getname_flags+0x80/0x3b0 [ 426.371809][T19715] getname_flags+0xae/0x3b0 [ 426.371846][T19715] user_path_at+0x28/0x130 [ 426.371877][T19715] do_utimes+0xd9/0x210 [ 426.371901][T19715] __x64_sys_futimesat+0xd2/0x1a0 [ 426.371930][T19715] x64_sys_call+0x11da/0x2fb0 [ 426.372011][T19715] do_syscall_64+0xd2/0x200 [ 426.372031][T19715] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 426.372066][T19715] ? clear_bhb_loop+0x40/0x90 [ 426.372088][T19715] ? clear_bhb_loop+0x40/0x90 [ 426.372111][T19715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.372193][T19715] RIP: 0033:0x7f297efae929 [ 426.372209][T19715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.372236][T19715] RSP: 002b:00007f297d617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 426.372273][T19715] RAX: ffffffffffffffda RBX: 00007f297f1d5fa0 RCX: 00007f297efae929 [ 426.372288][T19715] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 426.372388][T19715] RBP: 00007f297d617090 R08: 0000000000000000 R09: 0000000000000000 [ 426.372401][T19715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.372417][T19715] R13: 0000000000000000 R14: 00007f297f1d5fa0 R15: 00007ffc86f27568 [ 426.372444][T19715] [ 426.808372][T19733] loop5: detected capacity change from 0 to 8192 [ 426.966562][T19734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=19734 comm=syz.5.5285 [ 427.384152][T19749] loop3: detected capacity change from 0 to 8192 [ 427.412398][T19754] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 427.436217][T19749] loop3: p1 < > p3 p4 < > [ 427.440816][T19749] loop3: partition table partially beyond EOD, truncated [ 427.450473][T19749] loop3: p1 start 131074 is beyond EOD, truncated [ 427.456977][T19749] loop3: p3 start 64768 is beyond EOD, truncated [ 427.466546][T19756] loop1: detected capacity change from 0 to 512 [ 427.473648][T19756] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 427.485599][T19756] EXT4-fs (loop1): 1 truncate cleaned up [ 427.720915][T19774] loop3: detected capacity change from 0 to 512 [ 427.729934][T19774] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 427.742173][T19774] EXT4-fs (loop3): 1 truncate cleaned up [ 427.794776][T19782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.811340][T19782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.816019][T19785] loop5: detected capacity change from 0 to 512 [ 427.824767][T19786] loop6: detected capacity change from 0 to 512 [ 427.827685][T19785] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 427.833405][T19786] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 427.844969][T19785] EXT4-fs (loop5): 1 truncate cleaned up [ 427.853302][T19786] EXT4-fs (loop6): 1 truncate cleaned up [ 427.921626][T19794] netlink: 'syz.5.5310': attribute type 10 has an invalid length. [ 427.933221][T19794] batman_adv: batadv0: Adding interface: team0 [ 427.940039][T19794] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.965965][T19794] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 427.997395][T19800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 428.001508][T19794] netlink: 'syz.5.5310': attribute type 10 has an invalid length. [ 428.006767][T19800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 428.013737][T19794] netlink: 2 bytes leftover after parsing attributes in process `syz.5.5310'. [ 428.031425][T19794] 8021q: adding VLAN 0 to HW filter on device team0 [ 428.039178][T19794] batman_adv: batadv0: Interface activated: team0 [ 428.045898][T19794] batman_adv: batadv0: Interface deactivated: team0 [ 428.052584][T19794] batman_adv: batadv0: Removing interface: team0 [ 428.060354][T19794] bridge0: port 3(team0) entered blocking state [ 428.066670][T19794] bridge0: port 3(team0) entered disabled state [ 428.121111][T19810] loop5: detected capacity change from 0 to 512 [ 428.128465][T19810] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 428.142231][T19810] EXT4-fs (loop5): 1 truncate cleaned up [ 428.177653][T19817] loop5: detected capacity change from 0 to 256 [ 428.184963][T19817] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 428.196483][T19817] FAULT_INJECTION: forcing a failure. [ 428.196483][T19817] name failslab, interval 1, probability 0, space 0, times 0 [ 428.209242][T19817] CPU: 0 UID: 0 PID: 19817 Comm: syz.5.5317 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 428.209266][T19817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 428.209315][T19817] Call Trace: [ 428.209320][T19817] [ 428.209327][T19817] __dump_stack+0x1d/0x30 [ 428.209345][T19817] dump_stack_lvl+0xe8/0x140 [ 428.209361][T19817] dump_stack+0x15/0x1b [ 428.209376][T19817] should_fail_ex+0x265/0x280 [ 428.209431][T19817] should_failslab+0x8c/0xb0 [ 428.209451][T19817] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 428.209474][T19817] ? fat_alloc_inode+0x38/0xc0 [ 428.209499][T19817] ? __pfx_fat_alloc_inode+0x10/0x10 [ 428.209573][T19817] fat_alloc_inode+0x38/0xc0 [ 428.209596][T19817] ? __pfx_fat_alloc_inode+0x10/0x10 [ 428.209620][T19817] alloc_inode+0x40/0x170 [ 428.209687][T19817] new_inode+0x1d/0xe0 [ 428.209704][T19817] fat_build_inode+0x169/0x290 [ 428.209772][T19817] vfat_lookup+0x15c/0x2d0 [ 428.209829][T19817] lookup_one_qstr_excl_raw+0xc4/0x1b0 [ 428.209873][T19817] do_unlinkat+0x175/0x4c0 [ 428.209903][T19817] __x64_sys_unlinkat+0x97/0xb0 [ 428.209972][T19817] x64_sys_call+0x2438/0x2fb0 [ 428.209990][T19817] do_syscall_64+0xd2/0x200 [ 428.210005][T19817] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 428.210027][T19817] ? clear_bhb_loop+0x40/0x90 [ 428.210110][T19817] ? clear_bhb_loop+0x40/0x90 [ 428.210128][T19817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.210163][T19817] RIP: 0033:0x7f3ec3b6e929 [ 428.210199][T19817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 428.210221][T19817] RSP: 002b:00007f3ec21d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 428.210240][T19817] RAX: ffffffffffffffda RBX: 00007f3ec3d95fa0 RCX: 00007f3ec3b6e929 [ 428.210250][T19817] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 428.210261][T19817] RBP: 00007f3ec21d7090 R08: 0000000000000000 R09: 0000000000000000 [ 428.210332][T19817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.210345][T19817] R13: 0000000000000000 R14: 00007f3ec3d95fa0 R15: 00007ffcbe072448 [ 428.210435][T19817] [ 428.526237][T19821] loop1: detected capacity change from 0 to 1024 [ 428.532971][T19821] EXT4-fs: inline encryption not supported [ 428.538907][T19821] EXT4-fs: Ignoring removed bh option [ 428.551018][T19821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5319'. [ 428.571792][T12057] EXT4-fs unmount: 54 callbacks suppressed [ 428.571806][T12057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.685185][T19832] loop1: detected capacity change from 0 to 8192 [ 428.691731][T19833] loop3: detected capacity change from 0 to 8192 [ 428.751614][ T29] kauditd_printk_skb: 950 callbacks suppressed [ 428.751631][ T29] audit: type=1326 audit(1751032103.034:49691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 428.781541][ T29] audit: type=1326 audit(1751032103.034:49692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 428.805175][ T29] audit: type=1326 audit(1751032103.034:49693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 428.828801][ T29] audit: type=1326 audit(1751032103.034:49694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 428.840179][T19834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=19834 comm=syz.1.5321 [ 428.852412][ T29] audit: type=1326 audit(1751032103.034:49695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 428.852442][ T29] audit: type=1326 audit(1751032103.034:49696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 428.852520][ T29] audit: type=1326 audit(1751032103.034:49697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 428.852591][ T29] audit: type=1326 audit(1751032103.034:49698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 428.852619][ T29] audit: type=1326 audit(1751032103.034:49699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 428.852645][ T29] audit: type=1326 audit(1751032103.034:49700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19828 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 428.955538][T19839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=19839 comm=syz.3.5323 [ 429.046267][T19841] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 429.062305][T19841] vxcan3: entered allmulticast mode [ 429.307048][T19858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5331'. [ 429.792707][T19871] loop0: detected capacity change from 0 to 512 [ 429.799364][T19871] EXT4-fs: Ignoring removed mblk_io_submit option [ 429.806046][T19871] EXT4-fs: Ignoring removed bh option [ 429.831258][T19870] loop1: detected capacity change from 0 to 1024 [ 429.882019][T19871] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 429.921893][T19871] EXT4-fs (loop0): 1 truncate cleaned up [ 429.929026][T19871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 429.948996][T19870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.996114][T19870] SET target dimension over the limit! [ 430.017666][T12057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.018972][T19884] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5339'. [ 430.038415][T19884] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5339'. [ 430.047570][T19884] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5339'. [ 430.056927][T19884] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5339'. [ 430.075073][T19889] loop1: detected capacity change from 0 to 512 [ 430.083065][T19889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 430.094330][T19889] EXT4-fs (loop1): 1 truncate cleaned up [ 430.100490][T19889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.132940][T12057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.229972][T19898] loop1: detected capacity change from 0 to 8192 [ 430.281131][T19899] loop5: detected capacity change from 0 to 8192 [ 430.354141][T16179] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.408112][T19900] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=19900 comm=syz.1.5342 [ 430.493245][T19906] FAULT_INJECTION: forcing a failure. [ 430.493245][T19906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 430.506507][T19906] CPU: 0 UID: 0 PID: 19906 Comm: syz.0.5345 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 430.506561][T19906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 430.506575][T19906] Call Trace: [ 430.506581][T19906] [ 430.506589][T19906] __dump_stack+0x1d/0x30 [ 430.506611][T19906] dump_stack_lvl+0xe8/0x140 [ 430.506691][T19906] dump_stack+0x15/0x1b [ 430.506710][T19906] should_fail_ex+0x265/0x280 [ 430.506869][T19906] should_fail_alloc_page+0xf2/0x100 [ 430.506947][T19906] __alloc_frozen_pages_noprof+0xff/0x360 [ 430.507050][T19906] alloc_pages_mpol+0xb3/0x250 [ 430.507078][T19906] folio_alloc_mpol_noprof+0x39/0x80 [ 430.507173][T19906] shmem_get_folio_gfp+0x3cf/0xd60 [ 430.507210][T19906] shmem_write_begin+0xa8/0x190 [ 430.507240][T19906] generic_perform_write+0x184/0x490 [ 430.507264][T19906] shmem_file_write_iter+0xc5/0xf0 [ 430.507316][T19906] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 430.507334][T19906] vfs_write+0x4a0/0x8e0 [ 430.507369][T19906] ksys_write+0xda/0x1a0 [ 430.507399][T19906] __x64_sys_write+0x40/0x50 [ 430.507502][T19906] x64_sys_call+0x2cdd/0x2fb0 [ 430.507521][T19906] do_syscall_64+0xd2/0x200 [ 430.507536][T19906] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 430.507560][T19906] ? clear_bhb_loop+0x40/0x90 [ 430.507653][T19906] ? clear_bhb_loop+0x40/0x90 [ 430.507680][T19906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.507699][T19906] RIP: 0033:0x7ff1bc39d3df [ 430.507712][T19906] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 430.507734][T19906] RSP: 002b:00007ff1ba9c4df0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 430.507751][T19906] RAX: ffffffffffffffda RBX: 0000000000010000 RCX: 00007ff1bc39d3df [ 430.507762][T19906] RDX: 0000000000010000 RSI: 00007ff1b25a5000 RDI: 0000000000000008 [ 430.507772][T19906] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000239 [ 430.507787][T19906] R10: 00000000000003ae R11: 0000000000000293 R12: 0000000000000008 [ 430.507798][T19906] R13: 00007ff1ba9c4ef0 R14: 00007ff1ba9c4eb0 R15: 00007ff1b25a5000 [ 430.507816][T19906] [ 430.740674][T19908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=19908 comm=syz.5.5344 [ 431.774471][T19934] loop1: detected capacity change from 0 to 512 [ 431.995543][T19936] loop6: detected capacity change from 0 to 512 [ 432.003877][T19936] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 432.027244][T19934] EXT4-fs error (device loop1): __ext4_iget:5379: inode #4: block 193290: comm syz.1.5356: invalid block [ 432.041832][T19932] loop3: detected capacity change from 0 to 1024 [ 432.050245][T19936] EXT4-fs (loop6): 1 truncate cleaned up [ 432.066293][T19936] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.085987][T19934] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.5356: Bad quota inode: 4, type: 1 [ 432.111025][T19932] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.129882][T19934] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 432.177334][T19944] loop0: detected capacity change from 0 to 1024 [ 432.189233][T14659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.198503][T19934] EXT4-fs (loop1): mount failed [ 432.210050][T19944] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 432.219864][T19944] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 432.232996][T19944] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 432.243869][T19944] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.5360: unexpected bad inode w/o EXT4_IGET_BAD [ 432.269675][T18575] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.282150][T19944] EXT4-fs (loop0): no journal found [ 432.287408][T19944] EXT4-fs (loop0): can't get journal size [ 432.295728][T19934] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5356'. [ 432.299798][T19944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 432.318884][T19944] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.343696][T19953] FAULT_INJECTION: forcing a failure. [ 432.343696][T19953] name failslab, interval 1, probability 0, space 0, times 0 [ 432.356769][T19944] vti0: entered promiscuous mode [ 432.362482][T19953] CPU: 0 UID: 0 PID: 19953 Comm: syz.6.5361 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 432.362542][T19953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.362555][T19953] Call Trace: [ 432.362562][T19953] [ 432.362569][T19953] __dump_stack+0x1d/0x30 [ 432.362593][T19953] dump_stack_lvl+0xe8/0x140 [ 432.362615][T19953] dump_stack+0x15/0x1b [ 432.362638][T19953] should_fail_ex+0x265/0x280 [ 432.362748][T19953] should_failslab+0x8c/0xb0 [ 432.362769][T19953] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 432.362850][T19953] ? kstrdup_const+0x3e/0x50 [ 432.362874][T19953] kstrdup+0x3e/0xd0 [ 432.362895][T19953] kstrdup_const+0x3e/0x50 [ 432.362988][T19953] wakeup_source_register+0x52/0x240 [ 432.363009][T19953] device_wakeup_enable+0x86/0x170 [ 432.363031][T19953] device_set_wakeup_enable+0x25/0xa0 [ 432.363053][T19953] usb_hcd_submit_urb+0xb10/0x1200 [ 432.363114][T19953] usb_submit_urb+0xb14/0xc10 [ 432.363149][T19953] usbfs_start_wait_urb+0x95/0x1c0 [ 432.363190][T19953] do_proc_control+0x628/0x8b0 [ 432.363211][T19953] proc_control_compat+0xae/0xe0 [ 432.363293][T19953] usbdev_ioctl+0xee1/0x1710 [ 432.363320][T19953] ? __pfx_usbdev_ioctl+0x10/0x10 [ 432.363346][T19953] __se_sys_ioctl+0xce/0x140 [ 432.363375][T19953] __x64_sys_ioctl+0x43/0x50 [ 432.363464][T19953] x64_sys_call+0x19a8/0x2fb0 [ 432.363483][T19953] do_syscall_64+0xd2/0x200 [ 432.363516][T19953] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 432.363541][T19953] ? clear_bhb_loop+0x40/0x90 [ 432.363640][T19953] ? clear_bhb_loop+0x40/0x90 [ 432.363661][T19953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.363680][T19953] RIP: 0033:0x7f297efae929 [ 432.363740][T19953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.363758][T19953] RSP: 002b:00007f297d617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.363776][T19953] RAX: ffffffffffffffda RBX: 00007f297f1d5fa0 RCX: 00007f297efae929 [ 432.363787][T19953] RDX: 0000200000000040 RSI: 00000000c0105500 RDI: 0000000000000006 [ 432.363799][T19953] RBP: 00007f297d617090 R08: 0000000000000000 R09: 0000000000000000 [ 432.363810][T19953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.363821][T19953] R13: 0000000000000000 R14: 00007f297f1d5fa0 R15: 00007ffc86f27568 [ 432.363882][T19953] [ 432.426344][T19963] loop3: detected capacity change from 0 to 1024 [ 432.607701][T19963] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 432.618148][T19963] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 432.629378][T19963] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 432.640403][T19963] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.5365: unexpected bad inode w/o EXT4_IGET_BAD [ 432.657201][T19963] EXT4-fs (loop3): no journal found [ 432.662437][T19963] EXT4-fs (loop3): can't get journal size [ 432.674078][T19963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 432.707889][T19963] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.747106][T19976] loop1: detected capacity change from 0 to 512 [ 432.754450][T19980] loop0: detected capacity change from 0 to 512 [ 432.769889][T19976] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 432.779910][T19982] loop6: detected capacity change from 0 to 1024 [ 432.786724][T19980] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 432.795483][T19984] loop5: detected capacity change from 0 to 1024 [ 432.804947][T19982] EXT4-fs: Ignoring removed nobh option [ 432.810659][T19982] EXT4-fs: Ignoring removed bh option [ 432.815537][T19984] EXT4-fs: Ignoring removed nobh option [ 432.821696][T19984] EXT4-fs: Ignoring removed bh option [ 432.828351][T19976] EXT4-fs (loop1): 1 truncate cleaned up [ 432.828457][T19980] EXT4-fs (loop0): orphan cleanup on readonly fs [ 432.837433][T19982] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.841033][T19976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.857234][T19984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 432.867689][T19980] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.5369: iget: bad i_size value: 360287970189639680 [ 432.893098][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5373'. [ 432.901277][T19980] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.5369: couldn't read orphan inode 15 (err -117) [ 432.902164][T19982] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5373'. [ 432.917018][T19980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 432.939187][T19982] geneve2: entered promiscuous mode [ 432.944550][T19982] geneve2: entered allmulticast mode [ 432.960731][T16179] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.962777][T19995] hub 2-0:1.0: USB hub found [ 432.975226][T19995] hub 2-0:1.0: 8 ports detected [ 432.984322][T12057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.006826][T14884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.020035][T14659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.070775][T20008] loop6: detected capacity change from 0 to 1024 [ 433.081555][T20008] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.095600][T20008] FAULT_INJECTION: forcing a failure. [ 433.095600][T20008] name failslab, interval 1, probability 0, space 0, times 0 [ 433.109288][T20008] CPU: 0 UID: 0 PID: 20008 Comm: syz.6.5381 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 433.109341][T20008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.109381][T20008] Call Trace: [ 433.109387][T20008] [ 433.109398][T20008] __dump_stack+0x1d/0x30 [ 433.109425][T20008] dump_stack_lvl+0xe8/0x140 [ 433.109449][T20008] dump_stack+0x15/0x1b [ 433.109471][T20008] should_fail_ex+0x265/0x280 [ 433.109510][T20008] should_failslab+0x8c/0xb0 [ 433.109584][T20008] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 433.109637][T20008] ? __d_alloc+0x3d/0x350 [ 433.109668][T20008] __d_alloc+0x3d/0x350 [ 433.109695][T20008] ? avc_has_perm_noaudit+0x1b1/0x200 [ 433.109756][T20008] d_alloc_parallel+0x53/0xc40 [ 433.109786][T20008] ? selinux_inode_permission+0x532/0x620 [ 433.109814][T20008] ? make_vfsuid+0x49/0xa0 [ 433.109884][T20008] ? lockref_get_not_dead+0x120/0x1c0 [ 433.109948][T20008] ? __rcu_read_unlock+0x4f/0x70 [ 433.109978][T20008] __lookup_slow+0x8c/0x250 [ 433.110012][T20008] lookup_slow+0x3c/0x60 [ 433.110085][T20008] walk_component+0x1ec/0x220 [ 433.110111][T20008] path_lookupat+0xfe/0x2a0 [ 433.110188][T20008] filename_lookup+0x147/0x340 [ 433.110228][T20008] vfs_statx+0x9d/0x390 [ 433.110275][T20008] __se_sys_newlstat+0x69/0x280 [ 433.110312][T20008] ? __rcu_read_unlock+0x4f/0x70 [ 433.110361][T20008] ? bpf_trace_run2+0x124/0x1c0 [ 433.110392][T20008] ? ksys_write+0x192/0x1a0 [ 433.110477][T20008] __x64_sys_newlstat+0x31/0x40 [ 433.110507][T20008] x64_sys_call+0x1c47/0x2fb0 [ 433.110532][T20008] do_syscall_64+0xd2/0x200 [ 433.110621][T20008] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 433.110677][T20008] ? clear_bhb_loop+0x40/0x90 [ 433.110702][T20008] ? clear_bhb_loop+0x40/0x90 [ 433.110729][T20008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.110754][T20008] RIP: 0033:0x7f297efae929 [ 433.110772][T20008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.110826][T20008] RSP: 002b:00007f297d617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 433.110849][T20008] RAX: ffffffffffffffda RBX: 00007f297f1d5fa0 RCX: 00007f297efae929 [ 433.110864][T20008] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000200000000380 [ 433.110886][T20008] RBP: 00007f297d617090 R08: 0000000000000000 R09: 0000000000000000 [ 433.110900][T20008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.110915][T20008] R13: 0000000000000000 R14: 00007f297f1d5fa0 R15: 00007ffc86f27568 [ 433.110937][T20008] [ 433.364453][T20013] loop0: detected capacity change from 0 to 8192 [ 433.411995][T20016] loop5: detected capacity change from 0 to 8192 [ 433.421809][T14659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.484670][T20017] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=20017 comm=syz.0.5380 [ 433.543095][T20025] loop6: detected capacity change from 0 to 1024 [ 433.556596][T20025] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 433.566501][T20025] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 433.576416][T20027] loop1: detected capacity change from 0 to 1024 [ 433.576721][T20025] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 433.593726][T20025] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.5385: unexpected bad inode w/o EXT4_IGET_BAD [ 433.606016][T20021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=20021 comm=syz.5.5382 [ 433.607144][T20025] EXT4-fs (loop6): no journal found [ 433.624958][T20025] EXT4-fs (loop6): can't get journal size [ 433.639374][T20025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.652795][T20025] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.653543][T20027] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.713696][T20027] SET target dimension over the limit! [ 433.748149][T12057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.784787][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5390'. [ 433.962929][T20063] loop1: detected capacity change from 0 to 1024 [ 433.979537][T20063] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 433.990062][T20063] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 434.007139][T20063] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 434.018730][T20063] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #5: comm syz.1.5397: unexpected bad inode w/o EXT4_IGET_BAD [ 434.043643][T20068] FAULT_INJECTION: forcing a failure. [ 434.043643][T20068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.057516][T20068] CPU: 0 UID: 0 PID: 20068 Comm: syz.0.5398 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 434.057625][T20068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.057639][T20068] Call Trace: [ 434.057646][T20068] [ 434.057654][T20068] __dump_stack+0x1d/0x30 [ 434.057677][T20068] dump_stack_lvl+0xe8/0x140 [ 434.057697][T20068] dump_stack+0x15/0x1b [ 434.057750][T20068] should_fail_ex+0x265/0x280 [ 434.057783][T20068] should_fail+0xb/0x20 [ 434.057869][T20068] should_fail_usercopy+0x1a/0x20 [ 434.057901][T20068] strncpy_from_user+0x25/0x230 [ 434.057942][T20068] path_setxattrat+0xeb/0x310 [ 434.058032][T20068] __x64_sys_fsetxattr+0x6b/0x80 [ 434.058073][T20068] x64_sys_call+0x2f7c/0x2fb0 [ 434.058098][T20068] do_syscall_64+0xd2/0x200 [ 434.058122][T20068] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 434.058152][T20068] ? clear_bhb_loop+0x40/0x90 [ 434.058277][T20068] ? clear_bhb_loop+0x40/0x90 [ 434.058300][T20068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.058324][T20068] RIP: 0033:0x7ff1bc39e929 [ 434.058409][T20068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.058430][T20068] RSP: 002b:00007ff1baa07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 434.058450][T20068] RAX: ffffffffffffffda RBX: 00007ff1bc5c5fa0 RCX: 00007ff1bc39e929 [ 434.058464][T20068] RDX: 00002000000002c0 RSI: 0000200000000000 RDI: 0000000000000006 [ 434.058551][T20068] RBP: 00007ff1baa07090 R08: 0000000000000000 R09: 0000000000000000 [ 434.058565][T20068] R10: 000000000000fe44 R11: 0000000000000246 R12: 0000000000000001 [ 434.058579][T20068] R13: 0000000000000000 R14: 00007ff1bc5c5fa0 R15: 00007fff93b43378 [ 434.058602][T20068] [ 434.060515][T20063] EXT4-fs (loop1): no journal found [ 434.169925][ T29] kauditd_printk_skb: 674 callbacks suppressed [ 434.169963][ T29] audit: type=1400 audit(2000000002.890:50375): avc: denied { add_name } for pid=20064 comm="syz.3.5399" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 434.189869][T20063] EXT4-fs (loop1): can't get journal size [ 434.197625][ T29] audit: type=1400 audit(2000000002.890:50376): avc: denied { create } for pid=20064 comm="syz.3.5399" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 434.231380][T20063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.237726][ T29] audit: type=1400 audit(2000000002.890:50377): avc: denied { write } for pid=20064 comm="syz.3.5399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 434.479085][T20063] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.520597][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5401'. [ 434.529588][ T29] audit: type=1400 audit(2000000003.292:50378): avc: denied { connect } for pid=20078 comm="syz.5.5401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 434.529968][T20080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5401'. [ 434.549680][ T29] audit: type=1400 audit(2000000003.292:50379): avc: denied { bind } for pid=20078 comm="syz.5.5401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 434.553819][T20077] vlan2: entered allmulticast mode [ 434.584738][T20077] dummy0: entered allmulticast mode [ 434.632824][ T29] audit: type=1326 audit(2000000003.404:50380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.1.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 434.657229][ T29] audit: type=1326 audit(2000000003.404:50381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.1.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 434.657256][ T29] audit: type=1326 audit(2000000003.404:50382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.1.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 434.657280][ T29] audit: type=1326 audit(2000000003.404:50383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.1.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 434.730512][ T29] audit: type=1326 audit(2000000003.404:50384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20087 comm="syz.1.5407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddbd30e929 code=0x7ffc0000 [ 434.900548][T20100] loop3: detected capacity change from 0 to 8192 [ 435.060750][T20113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=20113 comm=syz.3.5409 [ 435.751671][T20129] loop1: detected capacity change from 0 to 1024 [ 435.764828][T20133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.774115][T20129] EXT4-fs: Ignoring removed nobh option [ 435.777989][T20133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.779764][T20129] EXT4-fs: Ignoring removed nobh option [ 435.793532][T20129] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 435.804491][T20129] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.5422: inode #4294967295: comm syz.1.5422: iget: illegal inode # [ 435.821230][T20129] EXT4-fs (loop1): no journal found [ 435.826462][T20129] EXT4-fs (loop1): can't get journal size [ 435.833025][T20129] EXT4-fs (loop1): failed to initialize system zone (-22) [ 435.841772][T20129] EXT4-fs (loop1): mount failed [ 435.961478][T20146] FAULT_INJECTION: forcing a failure. [ 435.961478][T20146] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.964534][T20144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.974686][T20146] CPU: 1 UID: 0 PID: 20146 Comm: syz.6.5428 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 435.974834][T20146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.974846][T20146] Call Trace: [ 435.974852][T20146] [ 435.974857][T20146] __dump_stack+0x1d/0x30 [ 435.974880][T20146] dump_stack_lvl+0xe8/0x140 [ 435.974970][T20146] dump_stack+0x15/0x1b [ 435.975059][T20146] should_fail_ex+0x265/0x280 [ 435.975105][T20146] should_fail+0xb/0x20 [ 435.975142][T20146] should_fail_usercopy+0x1a/0x20 [ 435.975248][T20146] _copy_from_iter+0xcf/0xe40 [ 435.975372][T20146] ? __build_skb_around+0x1a0/0x200 [ 435.975418][T20146] ? __alloc_skb+0x223/0x320 [ 435.975459][T20146] netlink_sendmsg+0x471/0x6b0 [ 435.975557][T20146] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.975582][T20146] __sock_sendmsg+0x142/0x180 [ 435.975613][T20146] ____sys_sendmsg+0x31e/0x4e0 [ 435.975705][T20146] ___sys_sendmsg+0x17b/0x1d0 [ 435.975770][T20146] __x64_sys_sendmsg+0xd4/0x160 [ 435.975820][T20146] x64_sys_call+0x2999/0x2fb0 [ 435.975922][T20146] do_syscall_64+0xd2/0x200 [ 435.975943][T20146] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 435.975978][T20146] ? clear_bhb_loop+0x40/0x90 [ 435.976063][T20146] ? clear_bhb_loop+0x40/0x90 [ 435.976099][T20146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.976124][T20146] RIP: 0033:0x7f297efae929 [ 435.976144][T20146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.976167][T20146] RSP: 002b:00007f297d617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.976190][T20146] RAX: ffffffffffffffda RBX: 00007f297f1d5fa0 RCX: 00007f297efae929 [ 435.976228][T20146] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 435.976244][T20146] RBP: 00007f297d617090 R08: 0000000000000000 R09: 0000000000000000 [ 435.976260][T20146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.976276][T20146] R13: 0000000000000000 R14: 00007f297f1d5fa0 R15: 00007ffc86f27568 [ 435.976300][T20146] [ 436.046698][T20148] loop6: detected capacity change from 0 to 8192 [ 436.055404][T20148] netlink: 'syz.6.5429': attribute type 39 has an invalid length. [ 436.057756][T20144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.357666][T20164] loop5: detected capacity change from 0 to 512 [ 436.376862][T20164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.416243][T20167] loop3: detected capacity change from 0 to 8192 [ 436.423176][T20164] ext4 filesystem being mounted at /375/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 436.618594][T20180] FAULT_INJECTION: forcing a failure. [ 436.618594][T20180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 436.632244][T20180] CPU: 0 UID: 0 PID: 20180 Comm: syz.6.5439 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 436.632275][T20180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.632288][T20180] Call Trace: [ 436.632295][T20180] [ 436.632302][T20180] __dump_stack+0x1d/0x30 [ 436.632374][T20180] dump_stack_lvl+0xe8/0x140 [ 436.632395][T20180] dump_stack+0x15/0x1b [ 436.632414][T20180] should_fail_ex+0x265/0x280 [ 436.632448][T20180] should_fail+0xb/0x20 [ 436.632535][T20180] should_fail_usercopy+0x1a/0x20 [ 436.632629][T20180] _copy_from_iter+0xcf/0xe40 [ 436.632665][T20180] ? __build_skb_around+0x1a0/0x200 [ 436.632758][T20180] ? __alloc_skb+0x223/0x320 [ 436.632813][T20180] netlink_sendmsg+0x471/0x6b0 [ 436.632904][T20180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.632925][T20180] __sock_sendmsg+0x142/0x180 [ 436.633004][T20180] ____sys_sendmsg+0x31e/0x4e0 [ 436.633037][T20180] ___sys_sendmsg+0x17b/0x1d0 [ 436.633081][T20180] __x64_sys_sendmsg+0xd4/0x160 [ 436.633154][T20180] x64_sys_call+0x2999/0x2fb0 [ 436.633172][T20180] do_syscall_64+0xd2/0x200 [ 436.633188][T20180] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 436.633217][T20180] ? clear_bhb_loop+0x40/0x90 [ 436.633303][T20180] ? clear_bhb_loop+0x40/0x90 [ 436.633328][T20180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.633370][T20180] RIP: 0033:0x7f297efae929 [ 436.633387][T20180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.633451][T20180] RSP: 002b:00007f297d617038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.633472][T20180] RAX: ffffffffffffffda RBX: 00007f297f1d5fa0 RCX: 00007f297efae929 [ 436.633484][T20180] RDX: 00000000200009d4 RSI: 00002000000012c0 RDI: 0000000000000004 [ 436.633507][T20180] RBP: 00007f297d617090 R08: 0000000000000000 R09: 0000000000000000 [ 436.633517][T20180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.633528][T20180] R13: 0000000000000000 R14: 00007f297f1d5fa0 R15: 00007ffc86f27568 [ 436.633628][T20180] [ 436.868426][T20184] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=20184 comm=syz.3.5432 [ 437.000777][T20191] loop6: detected capacity change from 0 to 512 [ 437.015063][T20191] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.028472][T20191] ext4 filesystem being mounted at /354/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 437.261367][T14884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.263084][T20201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.279006][T20201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.362968][T20212] loop0: detected capacity change from 0 to 1024 [ 437.370273][T20212] EXT4-fs: Ignoring removed nobh option [ 437.375854][T20212] EXT4-fs: Ignoring removed bh option [ 437.390810][T20212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.407408][T20216] loop5: detected capacity change from 0 to 512 [ 437.414716][T20216] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 437.414877][T20212] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.5448: error while reading EA inode 32 err=-116 [ 437.427927][T20216] EXT4-fs (loop5): 1 truncate cleaned up [ 437.438756][T20212] EXT4-fs (loop0): Remounting filesystem read-only [ 437.443942][T20216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.463785][T20212] EXT4-fs warning (device loop0): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.0.5448: cleanup dec ref error -30 [ 437.476969][T20212] EXT4-fs warning (device loop0): ext4_xattr_block_set:2190: inode #18: comm syz.0.5448: dec ref error=-30 [ 437.479211][T14884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.512341][T16179] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.539728][T20223] ALSA: seq fatal error: cannot create timer (-22) [ 437.565597][T20219] SELinux: failed to load policy [ 437.627345][T20233] loop5: detected capacity change from 0 to 1024 [ 437.729114][T20235] loop1: detected capacity change from 0 to 8192 [ 437.803999][T20233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 437.850186][T20233] SET target dimension over the limit! [ 438.167814][T14884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.274026][T14659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.330128][T20243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=20243 comm=syz.1.5454 [ 438.381733][T20258] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5461'. [ 438.583049][T20270] loop5: detected capacity change from 0 to 1024 [ 438.619305][T20270] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.653036][T20279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.680731][T20279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.692447][T20270] SET target dimension over the limit! [ 438.732247][T14884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.795180][T20296] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5475'. [ 438.828992][T20297] loop5: detected capacity change from 0 to 2048 [ 438.854485][T20297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.921842][T20304] loop0: detected capacity change from 0 to 8192 [ 439.025908][T20308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=20308 comm=syz.0.5477 [ 439.072789][T20314] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5481'. [ 439.162242][T20322] loop6: detected capacity change from 0 to 1024 [ 439.186871][T20322] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.225851][T20322] SET target dimension over the limit! [ 439.246348][T14659] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.408043][T20339] loop6: detected capacity change from 0 to 8192 [ 439.526765][ T29] kauditd_printk_skb: 520 callbacks suppressed [ 439.526782][ T29] audit: type=1326 audit(2000000007.978:50905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.6.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 439.559137][ T29] audit: type=1326 audit(2000000007.978:50906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20345 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f018ce929 code=0x7ffc0000 [ 439.567759][T20344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=20344 comm=syz.6.5488 [ 439.583413][ T29] audit: type=1326 audit(2000000007.978:50907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20345 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f018ce929 code=0x7ffc0000 [ 439.620066][ T29] audit: type=1326 audit(2000000007.978:50908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20345 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f1f018ce929 code=0x7ffc0000 [ 439.644461][ T29] audit: type=1326 audit(2000000007.978:50909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20345 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f018ce929 code=0x7ffc0000 [ 439.668876][ T29] audit: type=1326 audit(2000000007.978:50910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20345 comm="syz.3.5491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f018ce929 code=0x7ffc0000 [ 439.693253][ T29] audit: type=1326 audit(2000000008.016:50911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.6.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 439.717466][ T29] audit: type=1326 audit(2000000008.016:50912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.6.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 439.741751][ T29] audit: type=1326 audit(2000000008.016:50913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.6.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 439.766089][ T29] audit: type=1326 audit(2000000008.016:50914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20334 comm="syz.6.5488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297efae929 code=0x7ffc0000 [ 439.803012][T14884] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.887218][T20359] loop1: detected capacity change from 0 to 1024 [ 439.902506][T20359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.951147][T20367] loop0: detected capacity change from 0 to 128 [ 439.967996][T20359] SET target dimension over the limit! [ 439.993385][T20365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.012417][T12057] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.037201][T20365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.180720][T20367] ================================================================== [ 440.188869][T20367] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 440.196819][T20367] [ 440.199156][T20367] write to 0xffff88810734f214 of 4 bytes by task 20369 on cpu 0: [ 440.206883][T20367] xas_set_mark+0x12b/0x140 [ 440.211408][T20367] __folio_start_writeback+0x1dd/0x440 [ 440.216899][T20367] mpage_writepages+0xd18/0x1250 [ 440.221860][T20367] fat_writepages+0x24/0x30 [ 440.226397][T20367] do_writepages+0x1c6/0x310 [ 440.231000][T20367] file_write_and_wait_range+0x156/0x2c0 [ 440.236656][T20367] __generic_file_fsync+0x46/0x140 [ 440.241811][T20367] fat_file_fsync+0x49/0x100 [ 440.246432][T20367] vfs_fsync_range+0x10a/0x130 [ 440.251239][T20367] generic_file_write_iter+0x1b8/0x2f0 [ 440.256736][T20367] iter_file_splice_write+0x5ef/0x970 [ 440.262134][T20367] direct_splice_actor+0x153/0x2a0 [ 440.267279][T20367] splice_direct_to_actor+0x30f/0x680 [ 440.272687][T20367] do_splice_direct+0xda/0x150 [ 440.277491][T20367] do_sendfile+0x380/0x650 [ 440.281930][T20367] __x64_sys_sendfile64+0x105/0x150 [ 440.287144][T20367] x64_sys_call+0xb39/0x2fb0 [ 440.291757][T20367] do_syscall_64+0xd2/0x200 [ 440.296282][T20367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.302212][T20367] [ 440.304549][T20367] read to 0xffff88810734f214 of 4 bytes by task 20367 on cpu 1: [ 440.312211][T20367] __writeback_single_inode+0x1f9/0x7c0 [ 440.317802][T20367] writeback_single_inode+0x167/0x3e0 [ 440.323218][T20367] sync_inode_metadata+0x5b/0x90 [ 440.328192][T20367] __generic_file_fsync+0xf8/0x140 [ 440.333343][T20367] fat_file_fsync+0x49/0x100 [ 440.337960][T20367] vfs_fsync_range+0x10a/0x130 [ 440.342756][T20367] generic_file_write_iter+0x1b8/0x2f0 [ 440.348232][T20367] iter_file_splice_write+0x5ef/0x970 [ 440.353651][T20367] direct_splice_actor+0x153/0x2a0 [ 440.358803][T20367] splice_direct_to_actor+0x30f/0x680 [ 440.364202][T20367] do_splice_direct+0xda/0x150 [ 440.369003][T20367] do_sendfile+0x380/0x650 [ 440.373460][T20367] __x64_sys_sendfile64+0x105/0x150 [ 440.378667][T20367] x64_sys_call+0xb39/0x2fb0 [ 440.383274][T20367] do_syscall_64+0xd2/0x200 [ 440.387800][T20367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.393726][T20367] [ 440.396071][T20367] value changed: 0x0a000021 -> 0x04000021 [ 440.401811][T20367] [ 440.404147][T20367] Reported by Kernel Concurrency Sanitizer on: [ 440.410303][T20367] CPU: 1 UID: 0 PID: 20367 Comm: syz.0.5498 Not tainted 6.16.0-rc3-syzkaller-00121-gf02769e7f272 #0 PREEMPT(voluntary) [ 440.422836][T20367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.432918][T20367] ================================================================== [ 442.113684][ T8346] usb usb6-port1: attempt power cycle [ 444.060223][ T8346] usb usb6-port1: unable to enumerate USB device