last executing test programs: 2m8.600690175s ago: executing program 1 (id=4072): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x7041, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000000), 0x4) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) 2m8.109531172s ago: executing program 1 (id=4078): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x7041, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000000), 0x4) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) 2m7.794746297s ago: executing program 1 (id=4082): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}, [], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m7.575652s ago: executing program 1 (id=4085): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x9}, 0x18) r1 = add_key$keyring(0x0, &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r1) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe27, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x2, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6952}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x2004, &(0x7f0000000680)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) memfd_create(0x0, 0x4) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000d00)={0x8, {"0f0546ae6e36c69bb1d165b58f3d3ecead067d71facb44feb6f4a1847c7d2c8a21cac202d0a4d7f78cabe404d14df3d75991efb2c68b1edcc8807f3ab9a0d3293af78c6f0c3e568c985ba804510a2b80365f4bc64ca05a2b40e6e0159960e5b2cbb7ce5095cd02394345bb3c52b1789ca4cd314a038336f64de523ef626d2bafe125b1d603442af5587f59a4ec2074f365b8a6136afd0514c03ce1b165dbe7162f076db0ee61df3e03c0478a7874bdb440bb94f8611219fae83be04a502ab5fdd70d01a4c2389a0a5b1207d9f6408cff9ca1079326d69a3910850b18fb592390a1e64783448689d841722ac790e2361e83d72c3f6ac3c7bc8ef30278c2e1ef6f7a6f4eb17fd0d212ea43bb92f9687277930656b26c733fc9bc08e93c07d6d439269500fc328987e720e87106917add3214822000271fcfcf282fbd809ef0d5554e20080d12779cd0425fc2fa985a96570b9dfa76b5b990a9884f9d0bbec0b34269c781fd73460e8f5039247d5a2799b2dd1f99b29ca3116490ca0c43ce0449515dda40ebb70b7696ee68318ea1d0e3c172f2c64880cf09df5cf2a56ea7fc18c5493295b680f780ae26e68e37e6d54c37c77207fc0fe0f5eb1bed59d3f27cb9dcd8d33514d751259abe0a0c63765f49c0f0b823687b039f9eba139a0f8827e577514a31790210a210ba68b431c96816e48502ff332bddb59b1b32431a61302ddb401a52685d45dbb067ec53f11c0a72168db37477c863d7f0a9b1eeeae7de47b9983e742aa816f7e5854612796e553b534d16fbde9d863a677762687459683ed7ebfbbfbdff4f38cbf1be6e2adabf53e732691a2f381b305e09b9897a292b66a65c514b68ad7c55427bed042c49fc8f6149e6397cc9b845c483f1bea0fa87b1bb7ca0216957739a9e0f74cede91c2dba2e24c8d0776d5e83f166da3ea2f74f91eb8ff61d286d75ca23a05f6f778d37d4f2594f9e257da22c19506fb2898cc8718ee95c29dca111a3830d72aab856a185da90a1e39980e477280e2fa6ed0a10e2be5a28f27ada5f8f81d14b88630fc1a4a2ff85d9b770724624c9b1a190db17f46ebf2b3ee940a1cb95c63bdbc8e1ee56e96d512b47b773fc3ec4736a41bd2084a248f5737b0636e3302b08be42a74dde35aa0d19a014250076a905e0dd291e6dc3994993f64265e7bdaa22af8569086c2af173b2981c70bc6bef436310bca2fcd57801a99000b2e1ba1c44c83e29ca3f9acb204b8dbec45114a642a0c031d36b5f74ae36c06519f66adf4f84f1bd8bac63d9da149882642c3cdccf46cce661729c2eb5aa07e12a62a9ed8673b45c5cc05bbb275178c1781e4f1d710b4b82c16e616a6926c29656a72fbb983564f327e653888485e40db75aa023c1af9b0cebc7538eaf5d5450ea536dbb2709b3eb462801eaceb0ff6b68455eac2825f8349c2637cc5aede93f8b64a48dbd200ee5ae846b8f2efc2cf8af538a6b537b03848fabd42cce9ea05a012fecdf8abac036592f90348f7d33a4f0129479cc0130b0feb2e2e8b1ad3aaa3530a701fc22876e9756bdf39c7c41d1ac27aae1dbc8b29846bc7dc0280986f5c7872b212e5533c7ee1bc80cbf8e3fdd8fbd7cd90af34612a553b3721ddaccfd2d1ca575ddd98623e7083cbf22880f240b817c9156952b85ab0a5c2fd5aa198c0f234813cf6ce2c214d4a93dd1b92bbaf71afe428539167ab6b2957071b2393e159fcd2f60459b1478d5fcd50235b256e2aed64b95a7edd01edfb0559f19fd1db7a841fd11aacbb8b719ec2c6f16baa2d4dbba47e9ca01038d31b7f807e72e65259bf5ae1bafb320198e7f876a705b9b5ba4b5143036acc7573d7dc7a8fb9d4e9c2250fd061bc1b50a5a3c7600681f94d1293e1c8667c4e1290789b926fa47833481e3dff22f10f265a1b268b2792dbcf069fa58a38d0d9f52f605e93275cce39d31ede6cda4ba90ef3029cefb6fb10ae1f65bae9b7012644c8064bd803a8476b0bfd885874daa83e0db0dc08bbdeee20da3c5bb56ab02a481baa1864318ca751bc92b9f30ec0e23f1c5fbdfd27dc69a486b028b86e02995beea4caad771b9ee9cb127430ab362e0aa418db5bbff610d9f2a460fd030776e7fc84aab0bc29acc5d4d7e25c09765798c82b98a7a37ac6149e4751133de912d3b534891d66707e5158ec940cbae265dc3d8ecef5980a8967374a966b96722848e8af8e8be3d06a2328b505d599539c4bdbab5f25d9d0954994c5622ac9118bd7c6de8ebc354b909e83ed455263a431b093af2486a2665bfc8833e1c05ea63ad289d7e0d56aba8a91194e7b788b272ac23ce7534e56f6e6c47179d4151c1293a4cb35ce85dabc9b22aded5d6696ba66b93dcc4e43ab3df84894529a486b80ea946c3b3cf6db6582422a4a5c1edee199a0b4fbe3df294fa669cc6bb0767e37444d07f9623d969638e21739c30e0caa807a186f70c39174f399c198a224640d608446dc39b9078fc9e2a44a013e966545e76bc877d230af6965dc9dec4caec2d0073d8a28f3483b3bb849208348e26a0a601e4811a5af2120ef003c14e89d218dd0059495e9192bebe3640a419ac448b9b6a8b5ffb1e6083f95118c6e5f5377558a46e10551c4abab10ceb3967dd6859dfc7688a47f28e079dd5a286be2f273dc04cb1330a3f889b9b4bbe3159bbb91a7d2b9824d88db237045dc6b927fe3589c9e991962e3082ae0a9ea804a36d2376338489396d507d309aeb58eb5c4e2e4ccf732d95ebde824714167d251bd397ba744af93c76488b63488e2d0d594eeb7d6c800128e0a3cf7897987aad78ac12745384fa3e81838a7455847d2227a0f32ef49806348736cd8e0ff9649f117fe0d4b6e3422e4f498f6afa41fff006ceec0ae6191842da95fd70126f89690fb0c9102ed67fa884fcfb2e0c16971d9f24a7bc5f905e9f689c04d0beb02756dc01ecc2c32e9e1f055e02a05de88c40745a23b30b63b5266bcdb93cd146cf3e978d5aa0f1db5df88a8cb8bc04a571fc7d466e959523100a50af0a731d1c9ee3425c4574f1a929a08c8ad82f1f0ff524eab0ee4da8f82480d3058464698fae1402cd27fa37849f93e3bb39e73746f4dab13475e0e2916d650cc2197728d9cfbe0186913945fa6566001234321fa744992b063744d301b9068311f13474ed75d4960bb197913af5460e40123bbfaf35cc0f49c54cb116d1e29c2d5d4c9f245a538b83475ec2d15cea6f4b16421755130925c98e8a1b8a97118c05a1a38daee7b1ede4d8860625c756456f80641cd91a80d0f3251de09e6c9381fe60794f7fa2c80e59ccbf6dd6876ac87fdb4e7cc83a49ad1cd7f51720e229af7e4a90ca92989039daae8239c7eb225966c45f9aab2593f983aa6b24da8ded2d1e40743096bdb68aa3e714a779a42a5552b1096320eded7d247522855ae288322f4996655fa41ed13f4c79a834582faf43998db5725694093a3270aea594e4b02e75fae422805ca8199e55b84b2ba5678ac9a74ccb508ddd28c46186072d7f9598adcf8dddd89e54d420b4707b3691843548f5824b969dc2cb958b8132c1237680fe1cda67b3d92932b008d13a404f43096de837f81fa6a1a9c016d1e06748c8f1823a58847a3edccd83f2d504b71d5a1778fa31aaac4100d9624506174eb80a04d8180c8786932ce3678892eaccfe270c62b5fdcc91da78f188b157641b1ea1860deb37e1674bc99de19ed8595f31732ee934d2ca929f6f15e5949b520ab5b856e6d6bf14143544c293c941948312ea284c4c8ac7b44cdb326046a4f6090cb66a336fb98a87b9ef59e738511369e7e634cf978ee1902868f4e247ed5d6ab3ed58707ac474b0ee1163eb345bfcae2f6178da8aa0561f0da316af3378c8558c4461fde6c3ebbe92ea22adc60abfa7b9fa7dc7bcdf82f2c35f3311c9bc950c09a71899b285205f995afac5dd0010c6a4deb0682553cf32651daf13a29a4eaf5d015c8086c1f7a6213d32e316113746775afd3391d1ad2d9535140267049e0b4a2f5b4bfde7a78f425cb270f3800b5d5d081c3097c7425385dcf230289f64dd592b745901ea58101d5dc0504b82b45e8a59c7d815305afa8d1558280d197f7aeb4724d276e3ca7c7084479bfbba62a8401538caf3afd994f52869d07457be2805114aa18bcc3d9fb2a6a7f1ce2d3c60d18c91a8b037f3d424d6c75efe69334d096620d58a3a2781d9f317872c0fc88fc42ab1a81b25ea08ba61cbdf001ed9e9db3da1ed1b115e1ca9a18a3b46ad2cf2aadf056b6117a1d92bc75f552310ed37d9d944142d0c8391d3f29bbcca0e04b4ab4d30964f24dbc468d39d6b6472a4f586d354bb4c47e42bda8ebbf4cbfdb5e406d7db03cd521275835a0194692d3eb6ec0008ccb17fba4b727965c872e23b2f9f7f7840de398e35520de24df236412ed3edf6291b0f8b1b7cb89d0b0162efb41062996c80fa0a0eb1c71dd7222bf9fd177bebf230a9aa89d74aa94afd01d08cd4f2b01f0411901b7d59e69ca203091aa244fd50c78b266cc1e89fe2636f24ac5f1173f0af485e0808b42f594932384b02578a7ce0919f4fadb2b8562757c874b0384f65b854dcb6f0efd8ac127e0a8e381b0188672f3a1f5d7cf58510a491fcc3f379ee67e2d5aae7dc01c0d04cb639b905127524fb9f5bc885ae97a6467ad51e1ea8eba31eacabfad8e4e39a2768c8a203cdab6ac3d5b9d5dcced1b76120c456ffbddf5ba266e1cef13def7d9443323868d5c1c7b910b55fa5f7c79f18c4f8b169c7c5ac34627d9ab59b3f7517ee34d6a8192ac60e9927904cc3bf5e02fcf60d94462b8cda31f0391bcc4f9550123cc56ce3202e78a02b4bf4ba33e86972715814bf8dd3ddc73fceeb4d004f9b1d1abc204ebe06aba0d2683fcaea1cad605622ce85951809debc39c418c881d83c7dd7c36a85eaf7687b55c9146aebfd90c2a4ca3f9fbd4b8c1c54f5dac57fa6d2a3bbd50ac64972c14d3b388bc45685265aa370d6053830b43f37b74d79eccedca70e0e9505baa57298419fcddfee1cad87b65aadc2ad28cfc4228fd4ad00e983844b4ee43325ca90769f025000e362a72ce353abd8c144dc902b91abdee0914afbf208dcc8f0b9bf0083492c849caa86ee114dd446d969823c7caf0b2ae88c50aec1f58df4d22fc646702662553d89dc9982074e685fa1c301fb3da83831f2f873c9524f926360f61c7ee510984d5b441914a060a07240fe23754d89235127105e7160e160fd8e1939a934b3cff28abaac9a24611cf784e0f2d05a7dbd106ddc443418e790a493255b64d6cf2a3b618c4cd0613ffb7fe4f61a4273a04696e5faa84e80cc603957d553670e40d7c74033a7a67bf41ee7e99e4e9721c53dd76fafc8afa0c1ad806e9d8617d7a9b0d9017b2bb8720f345e08bd8b5c60e907022667bfef40d79e543c687d76eae60c04c95e43cc9ab49c87f281816677be727efdf0ef47f4ec12f80b642a0d2126cc73728e0eef7bf744abc654a6ec851a0cc142d43ff333b3093278c55ab22b46a17163617ecd6ae131037ecbc11f550a0c8c96527e9d5fb2a92c355ba8deca0f6f9952b75f738731ab44da42b50dacd49e2c809d8c71fa62286983064dd96d15283c261fd1c849268da5600bb3ff346438d7d0cf9154b35f371b80ac813fa409dbc01d53d9d88a34647ad6835e773116647a4dae51a9b3815e741000421efcb798a0095752ccfe0e904e0097a43ea40e8062e46aefd7e529faca88bc068e620bd1eb47b5c2872545e9b76f1ad75a30903b89158f52e", 0x1000}}, 0x1006) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2, 0x15, 0x1, 0x7, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_address={0x5, 0x7, 0xff, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty, 0x401}}]}, 0x38}}, 0x90) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, r5}) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 2m6.90574126s ago: executing program 1 (id=4092): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}, [], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x6}, {}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2m2.903871698s ago: executing program 1 (id=4121): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x7041, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000000), 0x4) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) 2m2.903328998s ago: executing program 32 (id=4121): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x7041, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000000), 0x4) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) 1m56.827828537s ago: executing program 3 (id=4177): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m55.942204469s ago: executing program 3 (id=4187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffffa8, &(0x7f0000000000)=0x1002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, 0x0, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0x1f8, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @algo_auth={0xc0, 0x1, {{'md5\x00'}, 0x3c0, "fd03480f2e2ebb04183ebca2d78f40b20e8473b935f6cf6f3d2c402e34b339e1b0cd2b29cd33e8f258cf85e6c1348f664a094fe82198b2247fe438734b6b8a3542814e02b742120e6f30979c39395eff53a948009f9c5b73cc002ca5e0e93d1a1730a1593d11d326b04cf06a436e84581a4f7369563bd6ab"}}]}, 0x1f8}}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x2000000000000000}, 0x40000c0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(0xffffffffffffffff, 0xc0603d0f, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 1m55.692220193s ago: executing program 3 (id=4190): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x7041, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000000), 0x4) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) 1m55.342506939s ago: executing program 3 (id=4195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef41605b990d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a2790cbf3e1c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b5f5b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) 1m55.155906431s ago: executing program 3 (id=4198): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x7041, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000000), 0x4) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) 1m54.56376877s ago: executing program 3 (id=4203): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m54.526369381s ago: executing program 33 (id=4203): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r7 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m51.231588868s ago: executing program 6 (id=4204): symlinkat(0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$eJzs3T9rJGUYAPBnNrN/1GJTWInggBZWx+Vamw1yB2Iqjy1OCw3eHUh2Fe4g4h+cu0rsbCz9BILgB7GxsxRsBTsjBEZmdia7m4ybjWQjmt+vSN688zzzPvPOJJkmT957cXpwP4uHTz//JQaDJDqjfsRREtvRicaTWDL6OgCA/7Kjoojfi5mWwz9/tSJ3sMG6AIDNOef3fy2tPt4rI364utoAgM24e+/tN3f39m6/lWWDuDP98nCcRET5eXZ892F8EJN4EDdjGMcR1YtCN6q3hXJ4pyiKPM1K2/HKND8cl5nTd3+sz7/7W0SVvxPD2K6mTt42qvw39m7vZDML+XlZx7P1+qMy/1YM4/mT5KX8Wy35Me7Fqy8v1H8jhvHT+/FRTOJ+VcQ8/4udLHu9+OaPz94pyyvzk/xw3K/i5oqtZvH8iu8RAAAAAAAAAAAAAAAAAAAAAAD/Pzfq3jn9qPr3lFN1/52t4/KLbmSNeX+fDzt50x8oaU407w8UnaIo8iK+bfrr3MyyrKgD5/190nghrRsLAgAAAAAAAAAAAAAAAAAAwDX3+JNPD/YnkwePLmXQdANII+LPuxH/9DyjhZmXYnVwv15zfzLp1MPlmHRxJraamCRiZRnlRVzStpw3eOZMzfXgu+/PBidPZjcujbYTDs5ftNu+1gUHH3dn+9ga0zxdB/tJ+x72T4oflDcuTt+4XrSv3o1TM72/q7B5FNe7nF7roeGFt6X3XDXIV8REsur74rVfZ2UvXMVSTK/a1db0bj1YSD/1bKz1PMdgln72Z0WiWwcAAAAAAAAAAAAAAAAAAGzU/K9/Ww4+XZnaKfobKwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtT8//+vM0iXk9fI6sWjx//WtQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9/BUAAP//gxtVEw==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1m51.059869521s ago: executing program 6 (id=4227): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r5, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r6, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x7041, 0x0) write$UHID_DESTROY(r7, &(0x7f0000000000), 0x4) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r8, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r8, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) 1m49.655718381s ago: executing program 6 (id=4240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x9}, 0x18) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d96c5e8aa4617cc54c5e67060a92661f84e698d1fe3cee10a85882cbecb29f2a22535ac50e64d95ecbab66f54373b94475e05b79a0a61bc2ae1e", 0x12d, r1) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe27, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x2, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6952}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x2004, &(0x7f0000000680)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) memfd_create(0x0, 0x4) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2, 0x15, 0x1, 0x7, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_address={0x5, 0x7, 0xff, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty, 0x401}}]}, 0x38}}, 0x90) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, r5}) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1m49.654872771s ago: executing program 34 (id=4240): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x3c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x9}, 0x18) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="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", 0x12d, r1) perf_event_open(&(0x7f0000000140)={0x2, 0xfffffffffffffe27, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x5, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x2, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6952}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) io_setup(0x2004, &(0x7f0000000680)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) memfd_create(0x0, 0x4) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x2, 0x15, 0x1, 0x7, 0x7, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_address={0x5, 0x7, 0xff, 0xa0, 0x0, @in6={0xa, 0x4e22, 0x0, @empty, 0x401}}]}, 0x38}}, 0x90) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, r5}) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 2.496158264s ago: executing program 2 (id=5089): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) migrate_pages(0x0, 0xfc, 0x0, &(0x7f0000000240)=0x1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) close(r0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x3b1800, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x90, r5, 0x100, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x78, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40b5}, 0x20000000) 2.283190447s ago: executing program 7 (id=5092): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x20) 2.259100817s ago: executing program 2 (id=5093): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_setup(0x8, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) io_setup(0x4c4f7c6b, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) alarm(0x81) io_submit(0x0, 0x0, 0x0) 2.230590298s ago: executing program 7 (id=5095): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 2.183061778s ago: executing program 7 (id=5097): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x655c, 0x2, 0x1ffffffe, 0x9, 0x800}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.136455829s ago: executing program 2 (id=5100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r5, 0x0, 0x7f, 0xe) write(r4, 0x0, 0x0) r8 = dup2(r3, r3) sendmmsg$unix(r8, &(0x7f0000008380), 0x400000000000174, 0x4008890) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000084ed13010000001903000000000000000000000000000000000000e73f4ac9b26e790a0900afd54b6a844d1a46c00603c1d4e851bf2cbf2d8264d49473480bbbb3d985918ac967f11b40191ccdf7ec387302471df93343c1fab17b5874d16fd0adde2638a9764cb5bca6eda61d2fd80fe1a304c2aaeb8abc313071da5e18d6ac12043b57f737ab14f0a7425b4eaeca"], 0x50) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="186000000fdf046c000000005ab000009500000000000000850000002a000000"], &(0x7f0000000040)='syzkaller\x00', 0x80, 0x82, &(0x7f0000000240)=""/130, 0x40f00, 0x0, '\x00', r11, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2, 0x9, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r13, r9, r9, r2, r14, r9, r2], &(0x7f0000000540)=[{0x5, 0x1, 0xa, 0xc}], 0x10, 0x0, @void, @value}, 0x94) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000095000000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r16, 0x0, 0x10000}, 0x18) r17 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) close_range(r17, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1f, 0x5, &(0x7f0000000780)=ANY=[@ANYRES64], &(0x7f00000007c0)='syzkaller\x00', 0xb, 0x4a, &(0x7f0000000800)=""/74, 0x41000, 0x53, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, r15, 0x1, &(0x7f0000000b00)=[r13, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x3, 0x3, 0x5, 0x8}], 0x10, 0xffffffff, @void, @value}, 0x94) syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x3, 0x203}, &(0x7f0000000380), &(0x7f00000003c0)) 2.004225461s ago: executing program 5 (id=5104): inotify_init() r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dde3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1.985624131s ago: executing program 5 (id=5105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x2000009e, &(0x7f00000005c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10}}, 0xb0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) 1.796429744s ago: executing program 4 (id=5106): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffb}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) ioperm(0x0, 0x2, 0x7e) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x4, {0x43, 0x1001, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4013, &(0x7f0000000200), 0x1, 0x5c0, &(0x7f0000001040)="$eJzs3c9rHFUcAPDv22yStmlNKoLWHgwUbEFNmlhRRLDFevPgj4KngjFJS+m2DckKtlZsof4H+gcI3gQRj0WkqBev3gT/gFIs0ubibWU2s8nW7ibZdrOTdj8fmO7MvN2872T59r15eTMTQN8az/4pReyLiIUUMdpUVo68cHzlfXfvXJ5dvnN5NkWt9sE/KVK+r/H+lL+O5B/eERF//JLiyYH76126eOnsTKUyv5hvT1bPLUwuXbz00plzM6fnT8+fn556deqVIy9PHznclePcExG/TRwvXzv11v4fZr/d+8VP311PcTR25+XNx9Et4zG++jtplv1eX+t2ZQUZyI+n+StO5QIDoiON728wIp6O0RiItS9vNL58r9DggC1VSxE1oE8l+Q99qtEPyM5/G0uxPRKgV24fWxkAuJtWxvaWV/O/vDI2GDvqYwO7llM0D+ukiOjGyFxWx8LzaTRbonkcbqgLPxxY15WrEfFMq/Y/1XNzrD6Kn+V/6Z78L0XEu/lrtv/9B6x//H/b+h/QO53nf2048rz/qCn/P37A+uU/AAAAAAAAdM+NYxHxYqu//5VW5/9Ei/k/IxFxtAv1b/z3v9KtLlQDtHD7WMQbEdGY+7fclP+5sYF8a099PsBgOnWmMn84Ip6IiEMxOJxtT933k9eufB3f//tgu/qb5/9lS1Z/Yy5gHset8vC9n5mbqc487HEDEbevRjxbbpX/abX9Ty3a/6ztX9hkHbXjb/7armzj/Ae2Su2biIMt2/+19jutf3+OyXp/YLLRK7jfZyev/9iufvkPxcna/13r5/9Yar5fz1LndXz+918Pkf+t+/9D6UT9ljONy4Q+LVeri1MRQ+mde/fPVKuL053HDI+jRj7UX6dW8v/Qgdbn/+v1/3dGxJVN1nni57evtSvT/kNxsvyf66j973zlwIdf/9uu/s21/0fqbfqhfI/xP1jfZhO06DgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FFUiojdkUoTq+ul0sRExEhEPBW7SpULS9UXTl345PxcVlZ//n+p8aTf0ZXt1Hj+/1jT9vTadq3x+M69EfHVwM56+cTshcpcwccOAAAAAAAAAAAAAAAAAAAA28VIm+v/MzcHio4O2HLlDd8x3JM4gN7bOP+Bx5X8h/4l/6F/yX/oX/If+tfm83/HlsYB9J72H/qX/If+NVD7/mTRMQAAAAAAAF2z97kbf6aIuPL6zvqSGcrLBguNDNhqR4sOACiMW/xA/+pk6l9KWxgI0HPO8aHf3YyNmvb2F/7pFAAAAAAAAAAAAABArxzc5/p/6FelogMACtP++n93BoDHnUf/QP9yjg+4/h8AAAAAAAAAAAAAtr+li5fOzlQq84sPujL8cB9/FFYaM5y3SzzbbaUc2yKMR2AlUhcyrkcrBf/HBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArPovAAD//xXJ9Vw=") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsmount(r6, 0x0, 0x20) 1.256258242s ago: executing program 7 (id=5108): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xf3a, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000240)={r2, 0x1, r1, 0x6}) 1.184657043s ago: executing program 2 (id=5110): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a030000000000000000000011000000000000"], 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4004040) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000300)=""/152, 0x98}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f00000005c0)=""/41, 0x29}, {&(0x7f0000000600)=""/1, 0x1}], 0x5, 0x8001, 0x5) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000d6572cdca3a30793", @ANYRES32=0x0, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x44005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) close_range(r10, 0xffffffffffffffff, 0x10000000000000) 1.054392185s ago: executing program 4 (id=5112): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_setup(0x7c2, &(0x7f0000000040)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", ' \x00'}, 0x28) sendto$inet6(r3, &(0x7f0000000400)="830b77a3e02d11cf560d377488c7dd5093cf12fd24998a40aea1ce0377d4e973e5af6f5c931d", 0xfdef, 0x4000, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r3, &(0x7f0000000300)=""/19, 0x13, 0x40000041, 0x0, 0x0) io_pgetevents(r2, 0x4, 0x4, &(0x7f00000002c0)=[{}, {}, {}, {}], &(0x7f0000000200), 0x0) ioctl$BTRFS_IOC_DEFRAG(0xffffffffffffffff, 0x50009402, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sync_file_range(r4, 0xe1ee, 0x3ff, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000d0400"/20, @ANYRES32=r6, @ANYBLOB="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"], 0x44}}, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000340)={r1, 0x0, 0x27, 0x0, &(0x7f0000000240)="7a8cae668789c7a46514f426be910bc86a9c7520143c4726e76695960737949ba41f729c340cc1", 0x0, 0xe, 0x0, 0x2d, 0x0, &(0x7f0000000280)="7d4bc0affb46f1b061e90d8529383165f198bb8fb8c10cdf34e693c65d52879a5fca3b938b65e7f1293e1fe304", 0x0, 0x2, 0x0, 0x3000000}, 0x50) fcntl$setpipe(r5, 0x407, 0x3) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f00000012c0)=@newchain={0x1614, 0x64, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x2, 0xffe6}, {0xffe1, 0x8}, {0x1e, 0x3}}, [@f_rsvp6={{0xa}, {0x30, 0x2, [@TCA_RSVP_ACT={0x4}, @TCA_RSVP_DST={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3a}}, @TCA_RSVP_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}]}}, @f_rsvp6={{0xa}, {0x1588, 0x2, [@TCA_RSVP_POLICE={0x854, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0xa3f, 0x2, 0x6, {0x3, 0x2, 0x400, 0x0, 0x401, 0x2}, {0x6, 0x0, 0x691, 0x9, 0x100}, 0x9, 0x6, 0xaab7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x4, 0x401, 0x4, 0x9, 0x8, 0x7, 0x5, 0x2b8f, 0x1, 0x4, 0xffff3bf9, 0x13, 0xab9, 0x7ac, 0x3, 0x6, 0x8, 0x1, 0x8ddaa34d, 0x7f, 0x76, 0x4, 0xb7, 0x7, 0x2, 0x2, 0xe, 0x3, 0x1000, 0x7fffffff, 0x200, 0x7fffffff, 0x101, 0x0, 0x9, 0x4, 0x800, 0x6, 0x45, 0x9a, 0x3, 0xd28, 0x8e, 0xffffffff, 0x9d, 0x1, 0x6, 0x5, 0xfffffffc, 0x80000000, 0x80000000, 0xd6df, 0x5, 0x200, 0x9, 0x3, 0x9, 0xf7, 0x2b, 0xcbe, 0x8, 0x2, 0x7, 0x5, 0x4, 0x7, 0x8e, 0xc, 0x1, 0x5, 0x0, 0x53cf4b3c, 0x8, 0x7, 0x5, 0xfff, 0x7, 0x7, 0xb, 0x3, 0x3, 0x7, 0x40, 0x6, 0xe, 0x8000, 0xa4, 0x1, 0x9, 0x81, 0x7, 0x2, 0x3, 0xfffffff9, 0x30000000, 0x774, 0x5, 0x8, 0x1000, 0x0, 0x6e, 0x9, 0x7, 0x9, 0xd25, 0x20000000, 0x80, 0xcd, 0x7f, 0x9, 0xfffffff1, 0x3, 0x2, 0x4, 0xffffff80, 0xb, 0x1000, 0x3, 0x1, 0x5, 0x6d7c, 0xb0be, 0x3, 0x8, 0x29, 0xc085, 0x83, 0x9, 0x4, 0x55e5, 0x80, 0x0, 0x9, 0x800, 0xda9, 0x1, 0xd, 0x0, 0xce6, 0xfd8, 0x1, 0x1, 0x9, 0xffff, 0xfffffffc, 0x7f, 0x80c, 0xffffff4f, 0x100, 0x4, 0x7ff, 0x8, 0x4, 0xffff39b9, 0x1, 0x6, 0x10, 0x3, 0xb, 0x101, 0x88cb, 0x3, 0x2, 0x4, 0x800002, 0x2, 0x0, 0x3d7, 0x3, 0x8, 0xfff, 0x7, 0x8, 0x2, 0x9, 0xd, 0xb, 0x7, 0xa, 0x4, 0xdc6, 0x0, 0x0, 0x9, 0x80, 0x7, 0x1ff, 0x800, 0x8b, 0x4, 0x1, 0x8e, 0xfffffffb, 0x7, 0x6, 0xe, 0xbcd, 0xe08a, 0x9, 0xe30, 0x8, 0x8, 0x0, 0x100, 0x7, 0xffffb6c8, 0xffff8001, 0x6, 0x2, 0xb, 0x9, 0x8, 0x9, 0xffff, 0xffffff7f, 0x3, 0x400, 0x7d0c, 0x8, 0x5, 0x1, 0xd, 0x2, 0x7, 0x81, 0x2, 0x9, 0x200, 0x0, 0x7, 0x4ac, 0x6, 0x6, 0x10001, 0xb2, 0xff, 0x5, 0x9d, 0x9, 0x8, 0x1000, 0x2, 0x0, 0x5, 0x8c, 0x9, 0xfffffff9, 0x3ff, 0xb, 0x6, 0x4000000, 0x8, 0x4, 0x7ff, 0x8000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x8, 0x5, 0x6, 0x3, 0x0, 0x6, 0x7, 0x4, 0x4, 0x5, 0x80, 0x8, 0x5, 0x1, 0x6, 0x80000000, 0x9378, 0x0, 0x2, 0x6, 0xffff4ae0, 0x1ff, 0x2, 0xc, 0x8, 0x6, 0x38, 0xe7, 0x9, 0x5, 0x8, 0x4, 0x0, 0x0, 0xfffff001, 0x7, 0x8, 0xb28b, 0x32, 0x3, 0x7, 0x6, 0x8, 0x4, 0x1b7d, 0x400, 0x8, 0x6, 0x3, 0xff, 0x400006, 0x9, 0x3, 0x200, 0x5, 0x5, 0x1, 0x1, 0x1ff, 0xb2, 0x200, 0x2, 0x6, 0x4, 0x5, 0x109d, 0x7, 0x101, 0xb48, 0xbb6, 0x2, 0x7, 0x5, 0x0, 0x3fff8, 0x5, 0x3, 0x10000, 0x0, 0x7, 0x254, 0x7fffffff, 0x1, 0x33cc, 0x200, 0x4, 0x6, 0x7, 0x3, 0x7fff, 0x0, 0x4e0000, 0x2, 0x9, 0xf, 0x4, 0x9, 0x4, 0x2a9c, 0x3, 0x1, 0x4, 0x3d, 0xb905, 0x6, 0x8000, 0x9, 0x7fffffff, 0x0, 0x0, 0x5, 0xffffffff, 0x7, 0x4, 0x5, 0xc492, 0x80000001, 0x10001, 0x100, 0x80000000, 0x3ff, 0x9, 0x489, 0x7, 0x2c9, 0x8001, 0x2, 0x43c3, 0x8, 0x4, 0x1, 0x5, 0x1, 0x6e06, 0x2, 0xdd0, 0xa, 0x7c64dca8, 0x4, 0x4, 0x7, 0x8, 0x0, 0x6, 0xf78c, 0x8000, 0x7fffffff, 0xe, 0xfff, 0x0, 0x83, 0x0, 0x9, 0x4, 0x1ff, 0x2, 0x7, 0x68141af1, 0x5, 0x7, 0x3, 0x10000, 0x8, 0xb1b, 0x6, 0x10000, 0x3, 0x0, 0x56a7, 0x3, 0x5, 0xf, 0x4, 0x0, 0xff, 0x4, 0x81, 0x18251add, 0x0, 0x6, 0xa, 0x6, 0x1, 0xfff, 0x4, 0x0, 0x0, 0x9, 0x9, 0x9, 0x1ae, 0x5, 0x1, 0x8c7, 0x2, 0x7, 0x9, 0x1, 0x2, 0xffff, 0x7ff, 0x7ffffffb, 0x100, 0x3, 0x24ea, 0x401, 0xe, 0x31d3, 0x2, 0x401, 0x8, 0x2, 0x2, 0x81, 0xfe, 0x6fa, 0x1, 0x8, 0xa7, 0x83, 0x8, 0x4, 0x7, 0xb, 0x22, 0x3, 0x2, 0x1000, 0xfffffffc, 0x9, 0x2, 0x8, 0x1ff, 0x80000001, 0x8d, 0x3, 0x10, 0xf, 0x5, 0x3, 0xfffffffe, 0x9, 0x10, 0xa, 0xc519, 0x7fff, 0x800, 0xeb68, 0x4, 0x95, 0x10001, 0x800, 0x6, 0xfffffffd, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x7, 0x13a}, {0x8000, 0x81, 0x2}, 0x21, 0xe5, 0x7}}, @TCA_RSVP_POLICE={0xc88, 0x5, [@TCA_POLICE_RATE64={0xc, 0x8, 0x8001}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0xb, 0x0, 0x0, {0x0, 0x2, 0x35, 0xfff7, 0x7ff, 0x4}, {0xb5, 0x2, 0xfff, 0x7b, 0xb, 0x81}, 0xf1, 0x2, 0x9}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0x7, 0x5, 0x6, 0x903, 0x7, 0x1, 0xefc5, 0x4, 0xcb9, 0x6, 0x2, 0x1, 0x3, 0x4, 0x80000000, 0x10, 0x1, 0xc, 0x7fff, 0x6, 0x7, 0x6, 0x6, 0x58, 0x80, 0x200, 0x3, 0x4, 0x443d, 0x9, 0x10, 0x2, 0x2, 0x0, 0x6, 0xe66, 0x8a0, 0x9f, 0x5, 0x0, 0x7, 0x1, 0xfffffffd, 0xf, 0x3, 0x7, 0x8fc5, 0x9a7e, 0x5, 0x3, 0x9, 0xf, 0x86e, 0x5, 0x0, 0x3, 0x800, 0x9, 0x5, 0xfffffffd, 0x2, 0x6, 0x9, 0x46f, 0x14647d88, 0x0, 0x5, 0x4, 0x10, 0x0, 0xfffffff0, 0xdac, 0x10, 0x6, 0x7fff, 0xc, 0x6, 0x1, 0x0, 0x5, 0x34c0, 0x9, 0xf17, 0x3, 0x5, 0x1ff, 0x1, 0x5, 0x5, 0xd, 0x10000, 0xfffffffe, 0x33a, 0x80, 0x7, 0x1da, 0x8, 0xfffffff7, 0x3, 0x2, 0x4, 0x1, 0x3, 0x7fff, 0x0, 0xffff, 0x5, 0x1, 0xfffffffc, 0x8001, 0x4, 0x3, 0x80000001, 0x0, 0x87c, 0x8004, 0xc0000000, 0x40000ee, 0x7, 0x2, 0xd, 0x7, 0x9, 0x3704, 0xa, 0x2, 0xc, 0x9, 0x1b, 0x5, 0xfff, 0x6, 0x7ff, 0x1000, 0xa9, 0x800, 0xffff, 0x100, 0x2, 0xffff8001, 0xfffffff8, 0x7, 0x6, 0x0, 0x200, 0x8, 0x6, 0x0, 0x6, 0x1, 0x836, 0x9, 0x7, 0x7, 0x9, 0xfffffda1, 0x0, 0x2, 0x1, 0xa38, 0x2, 0x9, 0x800, 0x2bbd, 0xffffffff, 0x2, 0x30000000, 0x3, 0x7, 0x0, 0xffffffff, 0xf8d5, 0x7, 0x244, 0x200, 0xfffffffb, 0x8, 0xe572, 0x7, 0x5, 0x6, 0x6, 0x6, 0x0, 0x2f, 0xf6, 0x7, 0x2, 0xaa0, 0x81, 0x10001, 0x1, 0x7, 0x7, 0x6, 0x5, 0x3e0, 0xfffffff4, 0xf5, 0x8, 0x9, 0x10000, 0x3, 0x2, 0x100, 0x7, 0x9, 0x1, 0x4, 0x10, 0x7f42, 0x3, 0x4, 0x90, 0x1, 0x73f7, 0x5, 0x81, 0x3d, 0x10000, 0x5, 0x0, 0xae7, 0x1, 0x1, 0x0, 0x3, 0x4, 0x10000, 0x1, 0x4, 0x35, 0x378b, 0x10, 0x0, 0x80, 0x4, 0x4, 0x80000000, 0xffff7fff, 0x6, 0x9, 0x3bd47bf8, 0xd9, 0xffffff00, 0x9, 0x10000, 0xaf, 0x2, 0x2, 0x0, 0x9, 0x1, 0x0, 0x7]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0x2, 0x80, 0x4, 0x50, 0xc211, 0x4, 0x8000, 0x5, 0x0, 0x1, 0x8, 0xfffffffc, 0x400, 0x6, 0x478, 0x2, 0x85, 0x0, 0xef, 0x401, 0x9, 0x3, 0x10, 0x81, 0x9, 0x1, 0x3, 0x0, 0x20000000, 0x0, 0x15e7, 0x6, 0x1, 0x80, 0x2, 0x6d9, 0x6, 0x800, 0x401, 0x4, 0x3ff, 0xaf, 0x0, 0x4, 0xe59, 0xa89a, 0x80000000, 0x49f3e066, 0x7f, 0x1be3, 0x8, 0x8, 0x4, 0x4, 0x40000, 0x7, 0x3, 0x6, 0x1, 0x9, 0xb2b2, 0x7ff, 0x6, 0xfffffbff, 0x98, 0xffffff00, 0x401, 0x7, 0x4, 0x8, 0x2, 0xc, 0xb, 0x4, 0x2, 0x9, 0xfffffffd, 0x0, 0x11f0, 0x10000, 0x6, 0xffffff81, 0x5, 0x40, 0x6, 0x2, 0x4, 0x3, 0x6, 0x100, 0x7, 0x7fff, 0x9, 0xa, 0x8, 0x9, 0x4, 0x7, 0x6, 0x61700000, 0x6, 0xca31, 0x9, 0x4, 0x7, 0x5, 0x0, 0x2, 0xc, 0xfffffff8, 0x3, 0x45f2, 0x6, 0x1, 0x7fffffff, 0x1, 0xc9, 0xf43, 0x4, 0xf, 0x7fff, 0x6, 0x6, 0x0, 0xfffffffc, 0xf, 0x2, 0x6, 0x9, 0x1, 0xe4, 0x6, 0xa, 0x5cd, 0x80000001, 0x9, 0x200, 0x5, 0x5, 0x5d62, 0xfffffffb, 0x5, 0x8, 0xc, 0x101, 0x1, 0x2, 0x5, 0xa5, 0x7, 0x3ff, 0x7ff, 0x0, 0xe2, 0x10000, 0x5, 0xe1b, 0x8, 0xa6, 0x4, 0x8001, 0x2, 0xa85, 0x7ff, 0x9, 0xa, 0xb, 0x3, 0x198a2caf, 0x86f6, 0x8f, 0x7, 0x2, 0x6, 0xde, 0x0, 0x7fffffff, 0x5, 0x8, 0x200, 0xaa, 0x7, 0x6, 0x10, 0x0, 0xc0000000, 0x7fffffff, 0x8, 0x5, 0x100, 0x6, 0x0, 0x3d4, 0x1, 0x0, 0x6000000, 0x2, 0x6, 0x0, 0x9, 0x80, 0x100, 0x9, 0x0, 0x6, 0x5, 0x9, 0x3, 0x70, 0x400, 0x1, 0x10, 0x200, 0xfffffff9, 0x0, 0x2, 0x298, 0x3, 0x7, 0x4, 0x4, 0x8, 0x4158, 0x3e3, 0x0, 0x8, 0x4, 0x100, 0x3, 0x2, 0x3, 0x7897, 0x7, 0xfffffffc, 0x9, 0xff, 0xfcc99fb2, 0x8, 0x7, 0x7, 0xfffff9ce, 0x7, 0x8, 0x4c3, 0x5, 0x5, 0x261911e4, 0x4, 0x0, 0x7, 0x4, 0x6, 0x3, 0x4]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb, 0x80000001, 0x6, 0xffffffff, 0x6, 0x0, 0xfff, 0x3, 0x2, 0x12000, 0xfffffffd, 0xfffffffb, 0x5ef2, 0x80000001, 0xffffffff, 0x9, 0x8, 0x4, 0xc, 0xf, 0x5, 0x8000, 0x9, 0xb, 0x7f, 0x7ff, 0x3, 0x1, 0x2, 0x0, 0xdaf, 0xe, 0x400, 0xa06e, 0x4, 0x4, 0x9, 0x7, 0x7f9, 0x0, 0x3, 0x400, 0x5, 0x7, 0x1, 0x4, 0x0, 0x2, 0x5, 0x664c, 0x4, 0x1b28, 0x6, 0x9, 0x6e, 0xffffff01, 0x2, 0x0, 0x89b, 0x7, 0x0, 0x6, 0x1, 0xa4, 0xd, 0x10, 0x0, 0x80000000, 0x2, 0x4, 0x4, 0x1, 0x10000, 0x5, 0x5, 0xe, 0x8001, 0x2250, 0x9, 0x3ff, 0x6, 0x8, 0x10000, 0x8, 0xffff935c, 0x9, 0x1c0000, 0x6, 0x4, 0x5, 0xfffffff7, 0x165, 0x1, 0x6, 0xd5b5, 0x100, 0x40, 0xfffffe01, 0xb8, 0xf37, 0x4, 0x0, 0x10001, 0xfffff289, 0x8, 0x7fff, 0x3, 0x9, 0x10001, 0x80000000, 0x7, 0x1, 0x17, 0xf4a, 0x0, 0x6, 0x3, 0x0, 0x4, 0x800, 0x400, 0x3, 0x8, 0x80, 0x3, 0xd6c, 0x4, 0xa, 0x0, 0x605f, 0x101, 0x10000, 0x5da, 0x8001, 0x7, 0x6587, 0x9595, 0x1, 0x9, 0xffff, 0xf2e2, 0x3, 0x267, 0x2, 0x2, 0x5, 0xffff8000, 0x3, 0x4, 0x7f, 0x7, 0x8000, 0x4, 0x3, 0x8000, 0x9, 0x0, 0x98ae, 0x9, 0x10081, 0x1c8d, 0xca03, 0x8, 0x4, 0x554, 0x7, 0x9, 0x8, 0x1, 0x9, 0x3, 0xfffffffd, 0x4, 0x4, 0x400, 0xfffffffb, 0x4687, 0x4, 0x2, 0xb47, 0xe7b4, 0x2, 0x6, 0x1, 0x7b3b0fe5, 0x7, 0x4, 0x6, 0x100, 0x7, 0x10001, 0x3, 0x0, 0x6, 0x3, 0x9, 0x0, 0x7fff, 0x2, 0xda, 0x5, 0x94fd, 0xfffffff7, 0xfffffffb, 0x6, 0x8, 0x3, 0x0, 0x3, 0x6, 0x4, 0x7, 0xec91, 0xff, 0x3, 0x2, 0xfffffffc, 0x1, 0x8efc, 0x8, 0x1009, 0x7, 0x200, 0x6, 0x2, 0x9, 0x9, 0x3, 0x1, 0x5, 0x7, 0x7, 0x7, 0x401, 0x5, 0x100, 0x0, 0xe, 0x6, 0x8, 0x80, 0x10, 0x10001, 0xfffffffc, 0x9, 0x6, 0x3, 0x2, 0x2000, 0xfff, 0x8751, 0x3, 0x4, 0x6, 0x9, 0x4]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x6, 0x6, 0xf5}, {0x8001, 0xa, 0x40}, 0x5d, 0x10, 0xd}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x9, 0x8, 0x40}, {0x10001, 0x3, 0xffff}, 0x2, 0x6c, 0x1}}, @TCA_RSVP_DST={0x14, 0x2, @local}, @TCA_RSVP_PINFO={0x20, 0x4, {{0xb, 0x7, 0x7}, {0x0, 0xa4a88d6, 0x15}, 0x84, 0x85, 0x81}}, @TCA_RSVP_SRC={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}, @f_rsvp={{0x9}, {0x4}}, @f_rsvp={{0x9}, {0x4}}]}, 0x1614}}, 0xc0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x2804, 0x0, 0x0, 0x0, 0x400, 0x10001, 0x1, 0x0, 0x0, 0x0, 0x1c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000001100010000000000007e00000000000a8d5b0621e6d0a53e95c2ad3cb56b67e6c0bfa82100f454eb9655953780ec18661debf0eb9580cb398360a5"], 0x28}}, 0x0) modify_ldt$read(0x0, &(0x7f0000000700)=""/132, 0x84) 1.052824185s ago: executing program 5 (id=5113): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007002abd700000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000200200000004000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000e00000000000000020000000000000000000000000000000000008000000000000000000000000000000000000000002a9900000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200000000000000000014000e00fe8000000000000000000000000000bb"], 0x104}, 0x1, 0x0, 0x0, 0x400c810}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x50) 1.009441745s ago: executing program 5 (id=5114): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) io_setup(0x8, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) io_setup(0x4c4f7c6b, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_submit(0x0, 0x0, 0x0) 823.911208ms ago: executing program 2 (id=5115): inotify_init() r0 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dde3) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYRES64], 0x69) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 780.456909ms ago: executing program 5 (id=5116): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fgetxattr(r0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000740)={'wg2\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000800)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000007c0)={&(0x7f0000001c40)=ANY=[@ANYBLOB="a8020000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="140002007767300000000000000000000000000008000700380a0000"], 0x2a8}, 0x1, 0x0, 0x0, 0x882}, 0x20000850) r2 = io_uring_setup(0x6ca9, &(0x7f00000001c0)={0x0, 0xa99f, 0x2, 0x0, 0x3d9, 0x0, r0}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) symlinkat(0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef41605b990d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a2790cbf3e1c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b5f5b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x50a, &(0x7f0000000200)="$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") r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000080c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000240)={r7, 0x1, 0xffffffffffffffff, 0x6}) tee(r3, 0xffffffffffffffff, 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 736.681279ms ago: executing program 2 (id=5117): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r5, 0x0, 0x7f, 0xe) write(r4, 0x0, 0x0) r8 = dup2(r3, r3) sendmmsg$unix(r8, &(0x7f0000008380), 0x400000000000174, 0x4008890) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000084ed13010000001903000000000000000000000000000000000000e73f4ac9b26e790a0900afd54b6a844d1a46c00603c1d4e851bf2cbf2d8264d49473480bbbb3d985918ac967f11b40191ccdf7ec387302471df93343c1fab17b5874d16fd0adde2638a9764cb5bca6eda61d2fd80fe1a304c2aaeb8abc313071da5e18d6ac12043b57f737ab14f0a7425b4eaeca"], 0x50) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r8, {0x2}}, './file0\x00'}) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="186000000fdf046c000000005ab000009500000000000000850000002a000000"], &(0x7f0000000040)='syzkaller\x00', 0x80, 0x82, &(0x7f0000000240)=""/130, 0x40f00, 0x0, '\x00', r11, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x2, 0x9, 0x2, 0x6}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r13, r9, r9, r2, r14, r9, r2], &(0x7f0000000540)=[{0x5, 0x1, 0xa, 0xc}], 0x10, 0x0, @void, @value}, 0x94) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000095000000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r15, 0x0, 0x10000}, 0x18) r16 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) close_range(r16, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3a, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x3, 0x203}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r17, r18, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0, 0x80002101}) 683.28238ms ago: executing program 5 (id=5120): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000000)=@ethernet={0x0, @dev}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/246, 0xf6}, {&(0x7f0000000340)=""/232, 0xe8}], 0x2, &(0x7f0000000c00)=""/178, 0xb2}, 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000080654d9700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8918, &(0x7f0000000000)={r1}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r4, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000018000"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000440)='f2fs_reserve_new_blocks\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000001500)={0x0, 0x0, 0x6}) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') socket(0x1, 0x803, 0x0) 612.666251ms ago: executing program 4 (id=5121): lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x43, 0x0, 0x0, "a3701be7f447433c821ed07ce7e379ad", "423bc4dc34d09966b378c7af3a321b4acf740a19f22d980875c48ec8d72ca84098e8b48bda5f45b7c2343af2a1a1"}, 0x43, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000140)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=@deltclass={0xe4, 0x29, 0x10, 0x3, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0x3}, {0xe, 0x7}, {0x7, 0x1}}, [@tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_cbs={0x8}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x1ff, 0x4, 0x3}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x1, 0x1}}, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0x8, 0xffff}}]}}, @tclass_kind_options=@c_qfq={{0x8}, {0x1c, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_WEIGHT={0x8, 0x1, 0x3}, @TCA_QFQ_LMAX={0x8, 0x2, 0x9}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x6}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x34, 0x2, [@TCA_HFSC_RSC={0x10, 0x1, {0xfffffff8, 0x8, 0x1a}}, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x0, 0xc73b}}, @TCA_HFSC_RSC={0x10, 0x1, {0x200, 0xd0, 0xfffffff8}}]}}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4040000}, 0x14) (async) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x841) (async) r3 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x8) fchmodat(r4, &(0x7f0000000480)='./file0\x00', 0x10) (async) r5 = fsmount(0xffffffffffffffff, 0x0, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r5) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={&(0x7f0000000500)="0f6a423077f2ada306441480245c52880d84791fbd8cb4752e8191a041eca376fe4945c37756792a62ae7bd707ace7e672ea1cbec51e3cae716e019488a9c44fbde191a0683817ff", &(0x7f0000000580)=""/216, &(0x7f0000000680)="af34fa8f5144339d7f6080bac1cc490f5dbbd9b2c4149d346e3d1e96d4109eaf1e72c0b87a51d0a9ee57c841982292195c485ffd92b0ce5f0fe7808aa02468929b", &(0x7f0000000700)="b81730c28c9879f7e8e3c416a555aa9a1bb27dfbc6b39ee6dd9d82c3627bb83ddc0cf66c090fe9a016149a971d47e041ce2e7c59c06d0c4996b54b9e411871bb9fb4d515654f33a8343064cca4718f6017df", 0x5, r5, 0x4}, 0x38) ioctl$BLKSECTGET(r5, 0x1267, &(0x7f00000007c0)) (async) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000800)=0x4, 0x4) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000840)={r5, 0x2, 0x0, 0x1}) (async) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000880), &(0x7f00000008c0)=0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e22, 0x8, @mcast1, 0x38}}, 0xfff, 0xa, 0x3, 0x598c, 0x8, 0xfffffff7, 0x6}, &(0x7f00000009c0)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000a00)={r7, 0x1}, 0x8) (async) personality(0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) arch_prctl$ARCH_SHSTK_STATUS(0x5005, &(0x7f0000000a40)) setsockopt$inet6_tcp_int(r5, 0x6, 0x4, &(0x7f0000000a80)=0x5, 0x4) (async) r8 = geteuid() (async) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000ac0)={0x0, 0x0, 0x0}, &(0x7f0000000b00)=0xc) fchown(0xffffffffffffffff, r8, r9) (async) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000000b40)) (async) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000bc0)=@get={0x1, &(0x7f0000000b80)=""/9}) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000f40)={&(0x7f0000000c00), 0xc, &(0x7f0000000f00)={&(0x7f0000000c40)={0x2a4, 0xd, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x288, 0x3, 0x0, 0x1, [{0x284, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x70, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x69, 0x1, "f8237145734bb29ab75d1df27d2865e05e9ecd3af916e7a749732ad6d0f33bcf6320a90c091ff0818f564e7086f008ac8a756a07318404f128650b26abfdf8c0e527c573489d6c6e0b41afd924c32af8a64cfc3dc80e20c945eb1ff8b599f23b9b8be84839"}]}, @NFTA_SET_ELEM_USERDATA={0x70, 0x6, 0x1, 0x0, "590720bebf1c530ba783ab31803700430cd6ed41889da0ed47ece7041da1630962b03a6521a5e1a8ab1eb90f25bed14180b768cf51d4e283747f6f39b773ecc85c4428309aa6b6efd05c02bf62ef639d986c59d3e8ba248b83cfad3e3ca652dd8185ab128098f64b5e9b7137"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xd5}]}}}, @NFTA_SET_ELEM_KEY_END={0x114, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x2c, 0x1, "84f3a29c262611d07cc542e8d1d5813cddfbad21c6d13949545063a4e3e618ac3c658df3072cead0"}, @NFTA_DATA_VALUE={0x70, 0x1, "0ddbd10886abfa7d5ae9c2288c67c7e0478915dfa4b869bc627f2de3006bf96497bbca51832342e6684b05222970bb8c5bc688eae83a4651a6e9327d2ad82570996772625b3ca9af575c5629c209cc111b332291ab9e7ea9fa52f0c56a54dfdafc842e514d8e95dff5731ea8"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @tunnel={{0xb}, @void}}, @NFTA_SET_ELEM_KEY_END={0x28, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x16, 0x1, "3f40d0f39d0422674e5aed65d1e82950634f"}]}]}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x8001}, 0x20040812) (async) ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x60000000000) (async) io_uring_register$IORING_REGISTER_EVENTFD(r5, 0x4, &(0x7f0000000f80)=r6, 0x1) 612.407971ms ago: executing program 4 (id=5122): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffb}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) ioperm(0x0, 0x2, 0x7e) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x4, {0x43, 0x1001, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x4013, &(0x7f0000000200), 0x1, 0x5c0, &(0x7f0000001040)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsmount(r6, 0x0, 0x20) 514.066332ms ago: executing program 0 (id=5124): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000100007002abd700000000000ff020000000000000000000000000001e0000002000000000000000000000000ffff0000000000200200000004000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000e00000000000000020000000000000000000000000000000000008000000000000000000000000000000000000000002a9900000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200000000000000000014000e00fe8000000000000000000000000000bb"], 0x104}, 0x1, 0x0, 0x0, 0x400c810}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x50) 445.914893ms ago: executing program 0 (id=5125): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r1}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a030000000000000000000011000000000000"], 0x0, 0x32, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x24048800}, 0x4004040) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000200)=""/217, 0xd9}, {&(0x7f0000000300)=""/152, 0x98}, {&(0x7f00000003c0)=""/103, 0x67}, {&(0x7f00000005c0)=""/41, 0x29}, {&(0x7f0000000600)=""/1, 0x1}], 0x5, 0x8001, 0x5) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000d6572cdca3a30793", @ANYRES32=0x0, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100"/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r9, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xc090}, 0x44005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020900000700000000000000000000000500", @ANYRES32], 0x38}}, 0x0) close_range(r10, 0xffffffffffffffff, 0x10000000000000) 309.934995ms ago: executing program 7 (id=5126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000200)=@raw=[@jmp={0x4, 0x0, 0xd, 0x1, 0x0, 0x0, 0x10}, @initr0, @exit], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) symlink(0x0, 0x0) umount2(0x0, 0xb) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x200000, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000380)={0x0, 0x2eab, 0x9, 0xdd6d, 0x15, "948fcd42816a72f71119c6da9cc276628a41cd"}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x4000) 303.202316ms ago: executing program 0 (id=5127): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x5}, 0x18) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xa77}, 0x1c) 265.948816ms ago: executing program 0 (id=5128): r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dde3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500000007000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 230.571307ms ago: executing program 4 (id=5129): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f00000018c0)=""/220, 0xdc}], 0x1, 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, 0x0) close(0xffffffffffffffff) r5 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1400}, {}, {}, [@cb_func={0x18, 0x7, 0x4, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x7f, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0x5, 0x400, 0xe7}, 0x10, 0x0, r0, 0x4, &(0x7f0000000900)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000940)=[{0x5, 0x2, 0xb, 0xb}, {0x4, 0x1, 0x7, 0x1}, {0x3, 0x4, 0x9, 0x7}, {0x3, 0x2, 0x2, 0xa}], 0x10, 0x8a9c, @void, @value}, 0x94) r7 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xf6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc91542382b09e080}, 0x40db, 0x0, 0x4, 0x8, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 230.001797ms ago: executing program 0 (id=5130): rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) rseq(&(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x82, 0x5683, 0x55ae3146}, 0x2}, 0x20, 0x1, 0x0) recvmmsg(r0, &(0x7f0000001880)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/162, 0xa2}], 0x1, &(0x7f0000000180)=""/180, 0xb4}, 0x2}, {{&(0x7f0000000240)=@x25={0x9, @remote}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/223, 0xdf}], 0x1, &(0x7f0000000500)=""/4096, 0x1000}, 0x10001}, {{&(0x7f0000000400)=@tipc, 0x80, &(0x7f0000001500)=[{&(0x7f0000000480)=""/50, 0x32}], 0x1, &(0x7f0000001540)=""/134, 0x86}, 0x10001}, {{&(0x7f0000001600)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000001680)=""/61, 0x3d}, {&(0x7f00000016c0)=""/179, 0xb3}], 0x2, &(0x7f00000017c0)=""/143, 0x8f}, 0x9}], 0x4, 0x2002, &(0x7f0000001980)={0x77359400}) 39.523459ms ago: executing program 0 (id=5131): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0xf26, &(0x7f0000000540)={0x0, 0xffbffffd, 0x400, 0x20000}, &(0x7f0000000200)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x1}) io_uring_enter(0xffffffffffffffff, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000000000ac0000000000000000000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010670e1493d14f5c0f49b20d2ce985fbdeeb2ee80ccb3531f88d3ddc6a9702a436eb9bfe97980d10084c746b8317fcfe08ba04bcfb3a803d879ccdc861c6cdb0d0f85eeaad97a9c6364a0a7b02d0eef7f8b7300ab4722e7339e92e28436b98d1ea96a5f6ce40a3ec3a43761a660f3ec84080d9eea94c061eafdb3a3b10c98"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000240), &(0x7f0000000280)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0xffffffffffffff1c) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0x10, &(0x7f00000004c0)=ANY=[@ANYRES16=r7], 0x0, 0x800, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='kfree\x00', r10}, 0x18) creat(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)='system_u:object_r:ssh_keysign_exec_t:s0\x00', 0x28, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000400)='rxrpc_client\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x22) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000780)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="2b57a60089edffd62f5e8b21e34b701e244596411e3f5e8d63ddd1c5aee1a27d5e9c331d8d4a998a01eec7a197c2b5c2f383c551a86aa7f2bac0c31e4ae2705ed8a32606f3de59eecfe0f1d61254feaff49dc25dbac9ac24290dbd9775e23c0eeb12811fe5667f4eddc1d8cd1d6825c9f25bb71f050b37effca36bc212b1a7ad", @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf251000000008003b00040000000500330000000000"], 0x24}}, 0x8084) 10.28816ms ago: executing program 7 (id=5132): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r7}]}]}, 0x28}}, 0x0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5c}) socket$igmp(0x2, 0x3, 0x2) mq_unlink(&(0x7f0000000000)='eth0\x00') close(0xffffffffffffffff) 0s ago: executing program 4 (id=5133): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000d00)='xen_cpu_write_idt_entry\x00', r3, 0x0, 0x4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x11, 0x5, 0x300) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x7, 0x0, &(0x7f0000000740)='GPL\x00', 0x1000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0 HID v0.00 Device [syz1] on syz0 [ 810.841241][T22146] lo speed is unknown, defaulting to 1000 [ 811.267563][T22138] ext4 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 811.303991][T22136] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.391243][T22149] loop2: detected capacity change from 0 to 512 [ 811.739909][T22149] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 811.766417][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.779664][T22149] EXT4-fs (loop2): mount failed [ 811.819374][T22136] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.862592][T22136] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.897188][T22163] lo speed is unknown, defaulting to 1000 [ 812.006788][T22136] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.023709][T22136] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.035641][T22136] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.047528][T22136] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 812.163352][T22166] lo speed is unknown, defaulting to 1000 [ 812.376512][T19305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 812.406450][T22170] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4696'. [ 812.663337][T22175] loop7: detected capacity change from 0 to 512 [ 812.682167][T22175] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.695311][T22175] ext4 filesystem being mounted at /93/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 812.805756][T22179] loop5: detected capacity change from 0 to 512 [ 812.820275][T22179] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 812.832231][T22179] EXT4-fs (loop5): 1 truncate cleaned up [ 812.838428][T22179] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 812.859870][T22175] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.4698: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 812.975976][T22175] EXT4-fs (loop7): Remounting filesystem read-only [ 813.074070][T22187] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4698'. [ 813.214608][T22182] loop2: detected capacity change from 0 to 512 [ 813.234052][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.464540][T22182] __quota_error: 22 callbacks suppressed [ 813.464674][T22182] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 813.514344][T22191] loop4: detected capacity change from 0 to 512 [ 813.531453][T22191] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 813.544795][T22191] EXT4-fs (loop4): 1 truncate cleaned up [ 813.550904][T22191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.599193][T22182] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 813.697821][T22182] EXT4-fs (loop2): mount failed [ 813.994225][T19305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.004701][ T29] audit: type=1326 audit(1749183701.891:66429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22195 comm="syz.2.4702" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7c9b0e929 code=0x0 [ 814.091855][T22198] loop5: detected capacity change from 0 to 256 [ 814.123562][T22198] syz.5.4703: attempt to access beyond end of device [ 814.123562][T22198] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 814.168193][T22206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4704'. [ 814.168238][T22206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4704'. [ 814.198042][T22206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4704'. [ 814.198114][T22206] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4704'. [ 814.219298][ T29] audit: type=1326 audit(1749183702.101:66430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 814.219346][ T29] audit: type=1326 audit(1749183702.101:66431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="syz.0.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 814.219383][ T29] audit: type=1326 audit(1749183702.101:66432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 814.219416][ T29] audit: type=1326 audit(1749183702.101:66433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 814.219446][ T29] audit: type=1326 audit(1749183702.101:66434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 814.219507][ T29] audit: type=1326 audit(1749183702.101:66435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 814.219536][ T29] audit: type=1326 audit(1749183702.101:66436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 814.219567][ T29] audit: type=1326 audit(1749183702.101:66437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22204 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 814.412275][T22214] loop5: detected capacity change from 0 to 512 [ 814.415037][T22214] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 814.515597][T22214] EXT4-fs (loop5): 1 truncate cleaned up [ 814.516471][T22214] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.063453][T22221] loop2: detected capacity change from 0 to 256 [ 815.415452][T22226] siw: device registration error -23 [ 815.500457][T22226] lo speed is unknown, defaulting to 1000 [ 816.040119][ T9446] hid-generic 0000:0000:0000.011A: unknown main item tag 0x0 [ 816.054738][T22233] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.066228][T22231] loop7: detected capacity change from 0 to 512 [ 816.102858][ T9446] hid-generic 0000:0000:0000.011A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 816.124577][T22234] loop2: detected capacity change from 0 to 512 [ 816.166042][T22233] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.241694][T19305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.254314][T22234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 816.403046][T22231] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 816.416186][T22234] ext4 filesystem being mounted at /910/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 816.423637][T22231] EXT4-fs (loop7): mount failed [ 816.438509][T22233] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.545855][T22234] EXT4-fs (loop2): shut down requested (0) [ 816.573181][T22244] lo speed is unknown, defaulting to 1000 [ 816.927504][T22233] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.147231][T22256] siw: device registration error -23 [ 818.164239][T22250] lo speed is unknown, defaulting to 1000 [ 818.224893][T22233] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.261622][T22233] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.283041][T22233] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.294914][T22233] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.334570][T22262] siw: device registration error -23 [ 818.357696][T22259] __nla_validate_parse: 2 callbacks suppressed [ 818.357717][T22259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4717'. [ 818.458482][T22269] loop5: detected capacity change from 0 to 512 [ 818.526429][T22270] loop7: detected capacity change from 0 to 512 [ 818.535287][T22270] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 818.593651][T22270] EXT4-fs (loop7): 1 truncate cleaned up [ 818.600545][T22270] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 818.691425][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 818.808756][T22273] siw: device registration error -23 [ 819.026595][T22273] lo speed is unknown, defaulting to 1000 [ 819.045516][T22268] loop0: detected capacity change from 0 to 512 [ 819.585998][T22268] __quota_error: 9 callbacks suppressed [ 819.586022][T22268] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 819.616485][T22268] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 819.734439][T22268] EXT4-fs (loop0): mount failed [ 819.776077][T22282] loop5: detected capacity change from 0 to 512 [ 819.846260][T22282] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 819.861927][T22282] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 819.889811][T22282] EXT4-fs (loop5): mount failed [ 820.227805][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.384790][ T3409] hid-generic 0000:0000:0000.011B: unknown main item tag 0x0 [ 820.407488][T22290] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.421207][ T3409] hid-generic 0000:0000:0000.011B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 820.453057][T22286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4725'. [ 820.462942][T22293] loop2: detected capacity change from 0 to 512 [ 820.490893][T22290] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.618275][T22290] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.638847][T22293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 820.651732][T22293] ext4 filesystem being mounted at /912/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 820.666652][T22293] EXT4-fs (loop2): shut down requested (0) [ 820.809906][T22303] loop7: detected capacity change from 0 to 512 [ 820.820864][T22303] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 820.837578][T22303] EXT4-fs (loop7): 1 truncate cleaned up [ 820.844089][T22303] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.911456][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.933518][T22290] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.084692][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.095983][T22307] pim6reg: entered allmulticast mode [ 821.107411][T22308] pim6reg: left allmulticast mode [ 821.122250][T22310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4731'. [ 821.131853][T22310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4731'. [ 821.150585][T22310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4731'. [ 821.160725][T22310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4731'. [ 821.175128][ T29] audit: type=1326 audit(1749183709.061:66446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz.4.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 821.178973][T22314] loop7: detected capacity change from 0 to 512 [ 821.221367][ T29] audit: type=1326 audit(1749183709.091:66447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz.4.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 821.221521][T22310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4731'. [ 821.245832][ T29] audit: type=1326 audit(1749183709.091:66448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="syz.4.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 821.254994][T22310] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4731'. [ 821.279535][ T29] audit: type=1326 audit(1749183709.091:66449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 821.313734][ T29] audit: type=1326 audit(1749183709.091:66450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 821.321105][T22314] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.337945][ T29] audit: type=1326 audit(1749183709.091:66451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 821.337983][ T29] audit: type=1326 audit(1749183709.091:66452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 821.338053][ T29] audit: type=1326 audit(1749183709.091:66453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22309 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 821.350891][T22314] ext4 filesystem being mounted at /102/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 821.470321][T22321] loop5: detected capacity change from 0 to 256 [ 821.529943][T22314] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.4732: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 821.553068][T22326] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4735'. [ 821.562276][T22326] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4735'. [ 821.586153][T22314] EXT4-fs (loop7): Remounting filesystem read-only [ 821.638020][T22321] syz.5.4733: attempt to access beyond end of device [ 821.638020][T22321] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 821.674981][T22324] pim6reg: entered allmulticast mode [ 821.684530][T22334] pim6reg: left allmulticast mode [ 821.802655][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.824372][T22347] siw: device registration error -23 [ 821.856324][T22347] lo speed is unknown, defaulting to 1000 [ 821.938831][T22353] 9pnet_fd: Insufficient options for proto=fd [ 822.030812][T22362] siw: device registration error -23 [ 822.051970][T22364] siw: device registration error -23 [ 822.063033][T22362] lo speed is unknown, defaulting to 1000 [ 822.106695][T22364] lo speed is unknown, defaulting to 1000 [ 822.442175][T22386] loop7: detected capacity change from 0 to 256 [ 822.449326][T22386] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 822.486082][T22386] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 822.683424][T22389] loop4: detected capacity change from 0 to 512 [ 822.716598][T22389] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 822.735983][T22389] EXT4-fs (loop4): 1 truncate cleaned up [ 822.742718][T22389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.826560][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.932747][T22392] loop7: detected capacity change from 0 to 512 [ 822.941198][T22392] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 822.957627][T22392] EXT4-fs (loop7): 1 truncate cleaned up [ 822.963899][T22392] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.980987][T22399] FAULT_INJECTION: forcing a failure. [ 822.980987][T22399] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 822.994420][T22399] CPU: 1 UID: 0 PID: 22399 Comm: syz.4.4753 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 822.994497][T22399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 822.994512][T22399] Call Trace: [ 822.994573][T22399] [ 822.994582][T22399] __dump_stack+0x1d/0x30 [ 822.994608][T22399] dump_stack_lvl+0xe8/0x140 [ 822.994630][T22399] dump_stack+0x15/0x1b [ 822.994649][T22399] should_fail_ex+0x265/0x280 [ 822.994714][T22399] should_fail+0xb/0x20 [ 822.994734][T22399] should_fail_usercopy+0x1a/0x20 [ 822.994758][T22399] _copy_from_user+0x1c/0xb0 [ 822.994784][T22399] ___sys_sendmsg+0xc1/0x1d0 [ 822.994861][T22399] __x64_sys_sendmsg+0xd4/0x160 [ 822.994895][T22399] x64_sys_call+0x2999/0x2fb0 [ 822.994957][T22399] do_syscall_64+0xd2/0x200 [ 822.994997][T22399] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 822.995020][T22399] ? clear_bhb_loop+0x40/0x90 [ 822.995040][T22399] ? clear_bhb_loop+0x40/0x90 [ 822.995059][T22399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.995154][T22399] RIP: 0033:0x7ff2fc67e929 [ 822.995170][T22399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 822.995186][T22399] RSP: 002b:00007ff2face7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.995205][T22399] RAX: ffffffffffffffda RBX: 00007ff2fc8a5fa0 RCX: 00007ff2fc67e929 [ 822.995350][T22399] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 822.995361][T22399] RBP: 00007ff2face7090 R08: 0000000000000000 R09: 0000000000000000 [ 822.995372][T22399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.995383][T22399] R13: 0000000000000000 R14: 00007ff2fc8a5fa0 R15: 00007ffce9218868 [ 822.995399][T22399] [ 823.206763][T22290] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.217777][T22402] FAULT_INJECTION: forcing a failure. [ 823.217777][T22402] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.231051][T22402] CPU: 1 UID: 0 PID: 22402 Comm: syz.0.4755 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 823.231079][T22402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 823.231124][T22402] Call Trace: [ 823.231130][T22402] [ 823.231138][T22402] __dump_stack+0x1d/0x30 [ 823.231162][T22402] dump_stack_lvl+0xe8/0x140 [ 823.231184][T22402] dump_stack+0x15/0x1b [ 823.231201][T22402] should_fail_ex+0x265/0x280 [ 823.231230][T22402] should_fail+0xb/0x20 [ 823.231254][T22402] should_fail_usercopy+0x1a/0x20 [ 823.231354][T22402] _copy_to_iter+0xcf/0xe30 [ 823.231380][T22402] udp_recvmsg+0x4cc/0xb30 [ 823.231403][T22402] ? __pfx_udp_recvmsg+0x10/0x10 [ 823.231425][T22402] inet_recvmsg+0x143/0x290 [ 823.231581][T22402] sock_recvmsg+0xf6/0x170 [ 823.231604][T22402] __sys_recvfrom+0x122/0x1f0 [ 823.231662][T22402] __x64_sys_recvfrom+0x76/0x90 [ 823.231750][T22402] x64_sys_call+0x1a52/0x2fb0 [ 823.231775][T22402] do_syscall_64+0xd2/0x200 [ 823.231801][T22402] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 823.231877][T22402] ? clear_bhb_loop+0x40/0x90 [ 823.231898][T22402] ? clear_bhb_loop+0x40/0x90 [ 823.231919][T22402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.231942][T22402] RIP: 0033:0x7f8ce88ce929 [ 823.231961][T22402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.231979][T22402] RSP: 002b:00007f8ce6f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 823.232010][T22402] RAX: ffffffffffffffda RBX: 00007f8ce8af5fa0 RCX: 00007f8ce88ce929 [ 823.232025][T22402] RDX: 000000000000000a RSI: 0000200000000100 RDI: 0000000000000003 [ 823.232039][T22402] RBP: 00007f8ce6f37090 R08: 0000000000000000 R09: 0000000000000000 [ 823.232051][T22402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.232063][T22402] R13: 0000000000000000 R14: 00007f8ce8af5fa0 R15: 00007ffecb220468 [ 823.232129][T22402] [ 823.237178][T22290] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.244877][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.267487][T22405] loop5: detected capacity change from 0 to 256 [ 823.293723][T22290] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.335339][T22408] FAULT_INJECTION: forcing a failure. [ 823.335339][T22408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.371581][T22290] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 823.384356][T22408] CPU: 0 UID: 0 PID: 22408 Comm: syz.0.4759 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 823.384468][T22408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 823.384481][T22408] Call Trace: [ 823.384489][T22408] [ 823.384498][T22408] __dump_stack+0x1d/0x30 [ 823.384522][T22408] dump_stack_lvl+0xe8/0x140 [ 823.384542][T22408] dump_stack+0x15/0x1b [ 823.384559][T22408] should_fail_ex+0x265/0x280 [ 823.384580][T22408] should_fail+0xb/0x20 [ 823.384602][T22408] should_fail_usercopy+0x1a/0x20 [ 823.384624][T22408] _copy_from_user+0x1c/0xb0 [ 823.384648][T22408] __sys_bpf+0x178/0x790 [ 823.384684][T22408] __x64_sys_bpf+0x41/0x50 [ 823.384722][T22408] x64_sys_call+0x2478/0x2fb0 [ 823.384743][T22408] do_syscall_64+0xd2/0x200 [ 823.384772][T22408] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 823.384799][T22408] ? clear_bhb_loop+0x40/0x90 [ 823.384822][T22408] ? clear_bhb_loop+0x40/0x90 [ 823.384843][T22408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.384865][T22408] RIP: 0033:0x7f8ce88ce929 [ 823.384882][T22408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.384923][T22408] RSP: 002b:00007f8ce6f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 823.384989][T22408] RAX: ffffffffffffffda RBX: 00007f8ce8af5fa0 RCX: 00007f8ce88ce929 [ 823.385003][T22408] RDX: 0000000000000050 RSI: 00002000000009c0 RDI: 0000000000000000 [ 823.385016][T22408] RBP: 00007f8ce6f37090 R08: 0000000000000000 R09: 0000000000000000 [ 823.385028][T22408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.385060][T22408] R13: 0000000000000000 R14: 00007f8ce8af5fa0 R15: 00007ffecb220468 [ 823.385078][T22408] [ 823.428596][T22405] syz.5.4758: attempt to access beyond end of device [ 823.428596][T22405] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 823.693989][T22422] siw: device registration error -23 [ 823.727404][T22422] lo speed is unknown, defaulting to 1000 [ 823.816428][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 823.927276][T22432] __nla_validate_parse: 18 callbacks suppressed [ 823.927296][T22432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4764'. [ 823.943293][T22432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4764'. [ 823.980119][T22434] loop7: detected capacity change from 0 to 512 [ 824.003755][T22425] pim6reg: entered allmulticast mode [ 824.011881][T22434] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 824.026387][T22434] EXT4-fs (loop7): 1 truncate cleaned up [ 824.032754][T22434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 824.035161][T22432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4764'. [ 824.056429][T22432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4764'. [ 824.066037][T22437] pim6reg: left allmulticast mode [ 824.093090][T22432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4764'. [ 824.103572][T22432] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4764'. [ 824.132449][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.156139][T22449] FAULT_INJECTION: forcing a failure. [ 824.156139][T22449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.169352][T22449] CPU: 1 UID: 0 PID: 22449 Comm: syz.7.4768 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 824.169383][T22449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 824.169395][T22449] Call Trace: [ 824.169403][T22449] [ 824.169413][T22449] __dump_stack+0x1d/0x30 [ 824.169469][T22449] dump_stack_lvl+0xe8/0x140 [ 824.169487][T22449] dump_stack+0x15/0x1b [ 824.169505][T22449] should_fail_ex+0x265/0x280 [ 824.169566][T22449] should_fail+0xb/0x20 [ 824.169647][T22449] should_fail_usercopy+0x1a/0x20 [ 824.169668][T22449] _copy_from_user+0x1c/0xb0 [ 824.169693][T22449] __sys_bpf+0x178/0x790 [ 824.169727][T22449] __x64_sys_bpf+0x41/0x50 [ 824.169774][T22449] x64_sys_call+0x2478/0x2fb0 [ 824.169796][T22449] do_syscall_64+0xd2/0x200 [ 824.169880][T22449] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 824.169995][T22449] ? clear_bhb_loop+0x40/0x90 [ 824.170014][T22449] ? clear_bhb_loop+0x40/0x90 [ 824.170038][T22449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.170119][T22449] RIP: 0033:0x7ff4392fe929 [ 824.170137][T22449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.170154][T22449] RSP: 002b:00007ff437967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 824.170174][T22449] RAX: ffffffffffffffda RBX: 00007ff439525fa0 RCX: 00007ff4392fe929 [ 824.170221][T22449] RDX: 0000000000000093 RSI: 0000200000000200 RDI: 0000000000000005 [ 824.170235][T22449] RBP: 00007ff437967090 R08: 0000000000000000 R09: 0000000000000000 [ 824.170320][T22449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.170334][T22449] R13: 0000000000000001 R14: 00007ff439525fa0 R15: 00007ffc1be974e8 [ 824.170352][T22449] [ 824.430416][T22460] Illegal XDP return value 367137544 on prog (id 3296) dev N/A, expect packet loss! [ 824.495235][T22466] loop7: detected capacity change from 0 to 256 [ 824.525342][T22466] syz.7.4776: attempt to access beyond end of device [ 824.525342][T22466] loop7: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 824.556989][T22473] FAULT_INJECTION: forcing a failure. [ 824.556989][T22473] name failslab, interval 1, probability 0, space 0, times 1 [ 824.569925][T22473] CPU: 0 UID: 0 PID: 22473 Comm: syz.2.4777 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 824.570029][T22473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 824.570041][T22473] Call Trace: [ 824.570048][T22473] [ 824.570056][T22473] __dump_stack+0x1d/0x30 [ 824.570104][T22473] dump_stack_lvl+0xe8/0x140 [ 824.570126][T22473] dump_stack+0x15/0x1b [ 824.570144][T22473] should_fail_ex+0x265/0x280 [ 824.570166][T22473] should_failslab+0x8c/0xb0 [ 824.570192][T22473] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 824.570263][T22473] ? sock_alloc_inode+0x34/0xa0 [ 824.570289][T22473] ? __pfx_sock_alloc_inode+0x10/0x10 [ 824.570311][T22473] sock_alloc_inode+0x34/0xa0 [ 824.570332][T22473] alloc_inode+0x3d/0x170 [ 824.570391][T22473] __sock_create+0x122/0x5b0 [ 824.570415][T22473] ? fput+0x8f/0xc0 [ 824.570439][T22473] __sys_socket+0xb0/0x180 [ 824.570459][T22473] __x64_sys_socket+0x3f/0x50 [ 824.570484][T22473] x64_sys_call+0x285a/0x2fb0 [ 824.570506][T22473] do_syscall_64+0xd2/0x200 [ 824.570537][T22473] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 824.570565][T22473] ? clear_bhb_loop+0x40/0x90 [ 824.570637][T22473] ? clear_bhb_loop+0x40/0x90 [ 824.570739][T22473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.570763][T22473] RIP: 0033:0x7fc7c9b0e929 [ 824.570780][T22473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.570802][T22473] RSP: 002b:00007fc7c8177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 824.570900][T22473] RAX: ffffffffffffffda RBX: 00007fc7c9d35fa0 RCX: 00007fc7c9b0e929 [ 824.570915][T22473] RDX: 000000000000000d RSI: 0000000000000003 RDI: 0000000000000002 [ 824.570929][T22473] RBP: 00007fc7c8177090 R08: 0000000000000000 R09: 0000000000000000 [ 824.571017][T22473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.571031][T22473] R13: 0000000000000000 R14: 00007fc7c9d35fa0 R15: 00007ffdc1108478 [ 824.571052][T22473] [ 824.571061][T22473] socket: no more sockets [ 824.631727][T22471] netlink: 'syz.0.4775': attribute type 13 has an invalid length. [ 824.739203][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 824.739233][ T29] audit: type=1400 audit(1749183712.561:66658): avc: denied { read } for pid=22474 comm="syz.5.4778" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 824.767586][T22482] process 'syz.7.4780' launched '/dev/fd/8' with NULL argv: empty string added [ 824.774554][ T29] audit: type=1400 audit(1749183712.561:66659): avc: denied { open } for pid=22474 comm="syz.5.4778" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 824.786148][T22480] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4779'. [ 824.790124][ T29] audit: type=1400 audit(1749183712.561:66660): avc: denied { ioctl } for pid=22474 comm="syz.5.4778" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 824.796431][T22480] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4779'. [ 824.820329][ T29] audit: type=1400 audit(1749183712.611:66661): avc: denied { create } for pid=22478 comm="syz.5.4781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 824.918475][ T29] audit: type=1400 audit(1749183712.611:66662): avc: denied { connect } for pid=22478 comm="syz.5.4781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 824.918502][ T29] audit: type=1400 audit(1749183712.611:66663): avc: denied { create } for pid=22478 comm="syz.5.4781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 824.918604][ T29] audit: type=1400 audit(1749183712.611:66664): avc: denied { getopt } for pid=22478 comm="syz.5.4781" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 824.918625][ T29] audit: type=1400 audit(1749183712.611:66665): avc: denied { ioctl } for pid=22478 comm="syz.5.4781" path="socket:[98274]" dev="sockfs" ino=98274 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 824.918931][ T29] audit: type=1400 audit(1749183712.651:66666): avc: denied { execute } for pid=22481 comm="syz.7.4780" dev="tmpfs" ino=2812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 825.026435][ T29] audit: type=1400 audit(1749183712.661:66667): avc: denied { execute_no_trans } for pid=22481 comm="syz.7.4780" path=2F6D656D66643A5B0BDB58202864656C6574656429 dev="tmpfs" ino=2812 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 825.056099][T22471] gretap0: refused to change device tx_queue_len [ 825.062738][T22471] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 825.087678][T22480] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4779'. [ 825.096952][T22480] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4779'. [ 825.131495][T22490] loop7: detected capacity change from 0 to 512 [ 825.173867][T22495] siw: device registration error -23 [ 825.180079][T22490] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.181432][T22488] lo speed is unknown, defaulting to 1000 [ 825.197086][T22490] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 825.242867][T22490] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.4783: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 825.256531][T22500] loop5: detected capacity change from 0 to 1024 [ 825.270797][T22490] EXT4-fs (loop7): Remounting filesystem read-only [ 825.281893][T22495] lo speed is unknown, defaulting to 1000 [ 825.340019][T22500] EXT4-fs: Ignoring removed mblk_io_submit option [ 825.357114][T22500] EXT4-fs: Ignoring removed nobh option [ 825.363144][T22500] EXT4-fs: Ignoring removed bh option [ 825.369575][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.385821][T22500] EXT4-fs (loop5): can't mount with journal_checksum, fs mounted w/o journal [ 825.412640][T22509] loop0: detected capacity change from 0 to 512 [ 825.458565][T22513] team0 (unregistering): Port device team_slave_0 removed [ 825.460127][T22509] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 825.498159][T22513] team0 (unregistering): Port device team_slave_1 removed [ 825.510998][T22520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.520612][T22509] EXT4-fs (loop0): 1 truncate cleaned up [ 825.526988][T22509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.541067][T22520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.561200][T22513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.573458][T22514] team0 (unregistering): Port device team_slave_0 removed [ 825.591423][T22514] team0 (unregistering): Port device team_slave_1 removed [ 825.599745][T22513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.655041][ T3331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.717229][T22527] loop0: detected capacity change from 0 to 128 [ 825.747356][T22527] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 825.808084][T22527] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 826.005277][T22544] loop2: detected capacity change from 0 to 512 [ 826.027113][T22544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.040233][T22544] ext4 filesystem being mounted at /921/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 826.077013][T22544] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.4798: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 826.412989][T22544] EXT4-fs (loop2): Remounting filesystem read-only [ 826.421112][T22529] loop4: detected capacity change from 0 to 128 [ 826.427905][T22529] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 826.439971][T22529] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 826.537476][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.657281][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 826.669758][T22560] loop5: detected capacity change from 0 to 512 [ 826.678311][T22560] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 826.702118][T22560] EXT4-fs (loop5): 1 truncate cleaned up [ 826.708254][T22560] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 826.766289][T19305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.828360][T22570] FAULT_INJECTION: forcing a failure. [ 826.828360][T22570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 826.841518][T22570] CPU: 0 UID: 0 PID: 22570 Comm: syz.4.4803 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 826.841599][T22570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 826.841613][T22570] Call Trace: [ 826.841622][T22570] [ 826.841632][T22570] __dump_stack+0x1d/0x30 [ 826.841779][T22570] dump_stack_lvl+0xe8/0x140 [ 826.841801][T22570] dump_stack+0x15/0x1b [ 826.841819][T22570] should_fail_ex+0x265/0x280 [ 826.841840][T22570] should_fail+0xb/0x20 [ 826.841864][T22570] should_fail_usercopy+0x1a/0x20 [ 826.841887][T22570] _copy_from_user+0x1c/0xb0 [ 826.841913][T22570] ___sys_sendmsg+0xc1/0x1d0 [ 826.841960][T22570] __sys_sendmmsg+0x178/0x300 [ 826.842019][T22570] __x64_sys_sendmmsg+0x57/0x70 [ 826.842052][T22570] x64_sys_call+0x2f2f/0x2fb0 [ 826.842076][T22570] do_syscall_64+0xd2/0x200 [ 826.842193][T22570] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 826.842248][T22570] ? clear_bhb_loop+0x40/0x90 [ 826.842272][T22570] ? clear_bhb_loop+0x40/0x90 [ 826.842296][T22570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.842318][T22570] RIP: 0033:0x7ff2fc67e929 [ 826.842336][T22570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 826.842406][T22570] RSP: 002b:00007ff2face7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 826.842427][T22570] RAX: ffffffffffffffda RBX: 00007ff2fc8a5fa0 RCX: 00007ff2fc67e929 [ 826.842442][T22570] RDX: 0400000000000174 RSI: 0000200000008380 RDI: 0000000000000004 [ 826.842455][T22570] RBP: 00007ff2face7090 R08: 0000000000000000 R09: 0000000000000000 [ 826.842469][T22570] R10: 0000000004008890 R11: 0000000000000246 R12: 0000000000000001 [ 826.842482][T22570] R13: 0000000000000000 R14: 00007ff2fc8a5fa0 R15: 00007ffce9218868 [ 826.842504][T22570] [ 826.894740][T22561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 826.996420][T22575] vlan0: entered allmulticast mode [ 827.022200][T22561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.058930][T22576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.061926][T22570] vlan0: entered allmulticast mode [ 827.074390][T22576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.129321][T22575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 827.138259][T22575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 827.174725][T22576] loop4: detected capacity change from 0 to 8192 [ 827.213745][T22558] loop7: detected capacity change from 0 to 8192 [ 827.221178][ T3695] loop4: p2 p3 p4 [ 827.225171][ T3695] loop4: p2 start 452985600 is beyond EOD, truncated [ 827.231975][ T3695] loop4: p3 size 33554432 extends beyond EOD, truncated [ 827.240705][ T3695] loop4: p4 start 8388607 is beyond EOD, truncated [ 827.251367][T22576] loop4: p2 p3 p4 [ 827.255356][T22576] loop4: p2 start 452985600 is beyond EOD, truncated [ 827.262255][T22576] loop4: p3 size 33554432 extends beyond EOD, truncated [ 827.262283][T22588] loop2: detected capacity change from 0 to 512 [ 827.277472][T22576] loop4: p4 start 8388607 is beyond EOD, truncated [ 827.292745][ T3312] loop7: p2 p3 p4 [ 827.296903][ T3312] loop7: p2 start 452985600 is beyond EOD, truncated [ 827.303756][ T3312] loop7: p3 size 33554432 extends beyond EOD, truncated [ 827.321272][ T3312] loop7: p4 start 8388607 is beyond EOD, truncated [ 827.359099][T22588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.372166][T22558] loop7: p2 p3 p4 [ 827.376197][T22558] loop7: p2 start 452985600 is beyond EOD, truncated [ 827.379729][T22588] ext4 filesystem being mounted at /924/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 827.383031][T22558] loop7: p3 size 33554432 extends beyond EOD, truncated [ 827.409556][T22558] loop7: p4 start 8388607 is beyond EOD, truncated [ 827.443614][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.506424][T22593] FAULT_INJECTION: forcing a failure. [ 827.506424][T22593] name failslab, interval 1, probability 0, space 0, times 0 [ 827.519215][T22593] CPU: 0 UID: 0 PID: 22593 Comm: syz.2.4808 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 827.519303][T22593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 827.519317][T22593] Call Trace: [ 827.519325][T22593] [ 827.519334][T22593] __dump_stack+0x1d/0x30 [ 827.519361][T22593] dump_stack_lvl+0xe8/0x140 [ 827.519380][T22593] dump_stack+0x15/0x1b [ 827.519395][T22593] should_fail_ex+0x265/0x280 [ 827.519416][T22593] should_failslab+0x8c/0xb0 [ 827.519520][T22593] kmem_cache_alloc_noprof+0x50/0x310 [ 827.519544][T22593] ? getname_flags+0x80/0x3b0 [ 827.519567][T22593] getname_flags+0x80/0x3b0 [ 827.519592][T22593] __x64_sys_renameat2+0x5f/0x90 [ 827.519648][T22593] x64_sys_call+0x2bf6/0x2fb0 [ 827.519728][T22593] do_syscall_64+0xd2/0x200 [ 827.519757][T22593] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 827.519788][T22593] ? clear_bhb_loop+0x40/0x90 [ 827.519811][T22593] ? clear_bhb_loop+0x40/0x90 [ 827.519870][T22593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.519896][T22593] RIP: 0033:0x7fc7c9b0e929 [ 827.519984][T22593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 827.520005][T22593] RSP: 002b:00007fc7c8177038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 827.520029][T22593] RAX: ffffffffffffffda RBX: 00007fc7c9d35fa0 RCX: 00007fc7c9b0e929 [ 827.520045][T22593] RDX: ffffffffffffff9c RSI: 0000200000000440 RDI: ffffffffffffff9c [ 827.520060][T22593] RBP: 00007fc7c8177090 R08: 0000000000000000 R09: 0000000000000000 [ 827.520142][T22593] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 827.520157][T22593] R13: 0000000000000000 R14: 00007fc7c9d35fa0 R15: 00007ffdc1108478 [ 827.520177][T22593] [ 827.970519][ T3695] udevd[3695]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 828.139924][T22605] loop2: detected capacity change from 0 to 512 [ 828.148862][T22605] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 828.184770][T22605] EXT4-fs (loop2): 1 truncate cleaned up [ 828.191176][T22605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.245882][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.292378][T22612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 828.302402][T22612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 828.480327][T22625] vhci_hcd: default hub control req: 600c v0001 i0008 l0 [ 828.524089][T22629] loop2: detected capacity change from 0 to 128 [ 828.553424][T22631] sctp: [Deprecated]: syz.2.4821 (pid 22631) Use of int in max_burst socket option. [ 828.553424][T22631] Use struct sctp_assoc_value instead [ 828.630853][T22637] loop2: detected capacity change from 0 to 512 [ 828.642148][T22637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 828.655239][T22637] ext4 filesystem being mounted at /937/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 828.688791][T22637] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.4823: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 828.709801][T22637] EXT4-fs (loop2): Remounting filesystem read-only [ 828.759554][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 828.778509][T22646] netlink: 'syz.2.4826': attribute type 16 has an invalid length. [ 828.930095][T22652] __nla_validate_parse: 17 callbacks suppressed [ 828.930245][T22652] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4828'. [ 828.945710][T22652] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4828'. [ 829.019241][T22657] lo speed is unknown, defaulting to 1000 [ 829.124381][T22660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4829'. [ 829.147462][T22652] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4828'. [ 829.156933][T22652] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4828'. [ 829.321078][T22666] FAULT_INJECTION: forcing a failure. [ 829.321078][T22666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.334320][T22666] CPU: 0 UID: 0 PID: 22666 Comm: syz.7.4831 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 829.334354][T22666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 829.334410][T22666] Call Trace: [ 829.334417][T22666] [ 829.334425][T22666] __dump_stack+0x1d/0x30 [ 829.334449][T22666] dump_stack_lvl+0xe8/0x140 [ 829.334472][T22666] dump_stack+0x15/0x1b [ 829.334555][T22666] should_fail_ex+0x265/0x280 [ 829.334614][T22666] should_fail+0xb/0x20 [ 829.334634][T22666] should_fail_usercopy+0x1a/0x20 [ 829.334715][T22666] _copy_from_user+0x1c/0xb0 [ 829.334783][T22666] ___sys_sendmsg+0xc1/0x1d0 [ 829.334819][T22666] __x64_sys_sendmsg+0xd4/0x160 [ 829.334853][T22666] x64_sys_call+0x2999/0x2fb0 [ 829.334886][T22666] do_syscall_64+0xd2/0x200 [ 829.334912][T22666] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 829.334942][T22666] ? clear_bhb_loop+0x40/0x90 [ 829.334966][T22666] ? clear_bhb_loop+0x40/0x90 [ 829.335056][T22666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.335078][T22666] RIP: 0033:0x7ff4392fe929 [ 829.335093][T22666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.335113][T22666] RSP: 002b:00007ff437967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.335135][T22666] RAX: ffffffffffffffda RBX: 00007ff439525fa0 RCX: 00007ff4392fe929 [ 829.335148][T22666] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 829.335172][T22666] RBP: 00007ff437967090 R08: 0000000000000000 R09: 0000000000000000 [ 829.335202][T22666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.335217][T22666] R13: 0000000000000000 R14: 00007ff439525fa0 R15: 00007ffc1be974e8 [ 829.335236][T22666] [ 829.560641][T22660] vlan0: entered allmulticast mode [ 829.586634][T22676] siw: device registration error -23 [ 829.610568][T22660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 829.620726][T22660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 829.635870][T22680] FAULT_INJECTION: forcing a failure. [ 829.635870][T22680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 829.649283][T22680] CPU: 1 UID: 0 PID: 22680 Comm: syz.4.4836 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 829.649316][T22680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 829.649379][T22680] Call Trace: [ 829.649388][T22680] [ 829.649397][T22680] __dump_stack+0x1d/0x30 [ 829.649421][T22680] dump_stack_lvl+0xe8/0x140 [ 829.649441][T22680] dump_stack+0x15/0x1b [ 829.649505][T22680] should_fail_ex+0x265/0x280 [ 829.649604][T22680] should_fail+0xb/0x20 [ 829.649624][T22680] should_fail_usercopy+0x1a/0x20 [ 829.649647][T22680] _copy_from_user+0x1c/0xb0 [ 829.649671][T22680] ___sys_sendmsg+0xc1/0x1d0 [ 829.649706][T22680] __x64_sys_sendmsg+0xd4/0x160 [ 829.649794][T22680] x64_sys_call+0x2999/0x2fb0 [ 829.649814][T22680] do_syscall_64+0xd2/0x200 [ 829.649868][T22680] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 829.649897][T22680] ? clear_bhb_loop+0x40/0x90 [ 829.649993][T22680] ? clear_bhb_loop+0x40/0x90 [ 829.650082][T22680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.650105][T22680] RIP: 0033:0x7ff2fc67e929 [ 829.650123][T22680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 829.650143][T22680] RSP: 002b:00007ff2face7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 829.650166][T22680] RAX: ffffffffffffffda RBX: 00007ff2fc8a5fa0 RCX: 00007ff2fc67e929 [ 829.650181][T22680] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 829.650331][T22680] RBP: 00007ff2face7090 R08: 0000000000000000 R09: 0000000000000000 [ 829.650345][T22680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 829.650359][T22680] R13: 0000000000000000 R14: 00007ff2fc8a5fa0 R15: 00007ffce9218868 [ 829.650378][T22680] [ 829.865390][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 829.865410][ T29] audit: type=1400 audit(1749183717.741:66959): avc: denied { write } for pid=22681 comm="syz.7.4837" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 829.910005][ T29] audit: type=1400 audit(1749183717.791:66960): avc: denied { mount } for pid=22683 comm="syz.5.4840" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 829.933862][ T29] audit: type=1400 audit(1749183717.811:66961): avc: denied { ioctl } for pid=22687 comm="syz.4.4839" path="socket:[100652]" dev="sockfs" ino=100652 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.995849][ T29] audit: type=1400 audit(1749183717.881:66962): avc: denied { create } for pid=22683 comm="syz.5.4840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 830.017024][T22686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4840'. [ 830.033934][T22693] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4841'. [ 830.110439][ T29] audit: type=1400 audit(1749183718.001:66963): avc: denied { setopt } for pid=22687 comm="syz.4.4839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 830.137316][T22688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4839'. [ 830.185211][T22702] lo speed is unknown, defaulting to 1000 [ 830.414074][T22710] FAULT_INJECTION: forcing a failure. [ 830.414074][T22710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.427269][T22710] CPU: 0 UID: 0 PID: 22710 Comm: syz.4.4845 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 830.427297][T22710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 830.427308][T22710] Call Trace: [ 830.427316][T22710] [ 830.427324][T22710] __dump_stack+0x1d/0x30 [ 830.427394][T22710] dump_stack_lvl+0xe8/0x140 [ 830.427415][T22710] dump_stack+0x15/0x1b [ 830.427430][T22710] should_fail_ex+0x265/0x280 [ 830.427449][T22710] should_fail+0xb/0x20 [ 830.427468][T22710] should_fail_usercopy+0x1a/0x20 [ 830.427549][T22710] _copy_from_user+0x1c/0xb0 [ 830.427575][T22710] __sys_connect+0xd0/0x2b0 [ 830.427608][T22710] __x64_sys_connect+0x3f/0x50 [ 830.427634][T22710] x64_sys_call+0x1daa/0x2fb0 [ 830.427725][T22710] do_syscall_64+0xd2/0x200 [ 830.427752][T22710] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 830.427778][T22710] ? clear_bhb_loop+0x40/0x90 [ 830.427853][T22710] ? clear_bhb_loop+0x40/0x90 [ 830.427878][T22710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.427955][T22710] RIP: 0033:0x7ff2fc67e929 [ 830.427972][T22710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 830.427989][T22710] RSP: 002b:00007ff2face7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 830.428013][T22710] RAX: ffffffffffffffda RBX: 00007ff2fc8a5fa0 RCX: 00007ff2fc67e929 [ 830.428029][T22710] RDX: 0000000000000010 RSI: 0000200000000200 RDI: 0000000000000003 [ 830.428044][T22710] RBP: 00007ff2face7090 R08: 0000000000000000 R09: 0000000000000000 [ 830.428057][T22710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.428089][T22710] R13: 0000000000000000 R14: 00007ff2fc8a5fa0 R15: 00007ffce9218868 [ 830.428109][T22710] [ 830.630820][T22706] loop7: detected capacity change from 0 to 2048 [ 830.651795][T22713] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4849'. [ 830.661199][T22713] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4849'. [ 830.696530][ T29] audit: type=1400 audit(1749183718.581:66964): avc: denied { setopt } for pid=22704 comm="syz.7.4846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 830.716922][ T29] audit: type=1400 audit(1749183718.581:66965): avc: denied { write } for pid=22704 comm="syz.7.4846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 830.737332][ T29] audit: type=1400 audit(1749183718.581:66966): avc: denied { connect } for pid=22704 comm="syz.7.4846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 830.757436][ T29] audit: type=1400 audit(1749183718.581:66967): avc: denied { name_connect } for pid=22704 comm="syz.7.4846" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 830.828527][ T29] audit: type=1326 audit(1749183718.661:66968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22712 comm="syz.4.4849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 830.917434][T22723] lo speed is unknown, defaulting to 1000 [ 831.205761][T22766] FAULT_INJECTION: forcing a failure. [ 831.205761][T22766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.218964][T22766] CPU: 0 UID: 0 PID: 22766 Comm: syz.2.4853 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 831.219076][T22766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 831.219090][T22766] Call Trace: [ 831.219098][T22766] [ 831.219107][T22766] __dump_stack+0x1d/0x30 [ 831.219211][T22766] dump_stack_lvl+0xe8/0x140 [ 831.219233][T22766] dump_stack+0x15/0x1b [ 831.219254][T22766] should_fail_ex+0x265/0x280 [ 831.219278][T22766] should_fail+0xb/0x20 [ 831.219298][T22766] should_fail_usercopy+0x1a/0x20 [ 831.219321][T22766] _copy_from_user+0x1c/0xb0 [ 831.219427][T22766] do_sock_getsockopt+0xf1/0x240 [ 831.219460][T22766] __x64_sys_getsockopt+0x11e/0x1a0 [ 831.219568][T22766] x64_sys_call+0x12aa/0x2fb0 [ 831.219594][T22766] do_syscall_64+0xd2/0x200 [ 831.219627][T22766] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 831.219729][T22766] ? clear_bhb_loop+0x40/0x90 [ 831.219749][T22766] ? clear_bhb_loop+0x40/0x90 [ 831.219859][T22766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.219879][T22766] RIP: 0033:0x7fc7c9b0e929 [ 831.219898][T22766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.219918][T22766] RSP: 002b:00007fc7c8177038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 831.219993][T22766] RAX: ffffffffffffffda RBX: 00007fc7c9d35fa0 RCX: 00007fc7c9b0e929 [ 831.220008][T22766] RDX: 0000000000000014 RSI: 0000000000000084 RDI: 0000000000000003 [ 831.220054][T22766] RBP: 00007fc7c8177090 R08: 0000200000000200 R09: 0000000000000000 [ 831.220066][T22766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.220078][T22766] R13: 0000000000000000 R14: 00007fc7c9d35fa0 R15: 00007ffdc1108478 [ 831.220094][T22766] [ 831.417562][T22763] loop5: detected capacity change from 0 to 512 [ 831.449131][T22763] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 831.562675][T22763] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 831.582047][T22769] loop4: detected capacity change from 0 to 512 [ 831.589402][T22769] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 831.603997][T22769] EXT4-fs (loop4): 1 truncate cleaned up [ 831.610227][T22769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.626825][T22785] FAULT_INJECTION: forcing a failure. [ 831.626825][T22785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 831.640425][T22785] CPU: 0 UID: 0 PID: 22785 Comm: syz.0.4855 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 831.640498][T22785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 831.640509][T22785] Call Trace: [ 831.640518][T22785] [ 831.640526][T22785] __dump_stack+0x1d/0x30 [ 831.640548][T22785] dump_stack_lvl+0xe8/0x140 [ 831.640566][T22785] dump_stack+0x15/0x1b [ 831.640587][T22785] should_fail_ex+0x265/0x280 [ 831.640609][T22785] should_fail+0xb/0x20 [ 831.640628][T22785] should_fail_usercopy+0x1a/0x20 [ 831.640674][T22785] _copy_from_user+0x1c/0xb0 [ 831.640702][T22785] ___sys_sendmsg+0xc1/0x1d0 [ 831.640824][T22785] __sys_sendmmsg+0x178/0x300 [ 831.640864][T22785] __x64_sys_sendmmsg+0x57/0x70 [ 831.640891][T22785] x64_sys_call+0x2f2f/0x2fb0 [ 831.640922][T22785] do_syscall_64+0xd2/0x200 [ 831.640950][T22785] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 831.640978][T22785] ? clear_bhb_loop+0x40/0x90 [ 831.641002][T22785] ? clear_bhb_loop+0x40/0x90 [ 831.641053][T22785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.641074][T22785] RIP: 0033:0x7f8ce88ce929 [ 831.641092][T22785] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 831.641162][T22785] RSP: 002b:00007f8ce6f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 831.641183][T22785] RAX: ffffffffffffffda RBX: 00007f8ce8af5fa0 RCX: 00007f8ce88ce929 [ 831.641195][T22785] RDX: 0000000000000002 RSI: 00002000000020c0 RDI: 0000000000000003 [ 831.641207][T22785] RBP: 00007f8ce6f37090 R08: 0000000000000000 R09: 0000000000000000 [ 831.641219][T22785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 831.641231][T22785] R13: 0000000000000000 R14: 00007f8ce8af5fa0 R15: 00007ffecb220468 [ 831.641246][T22785] [ 831.847981][T22763] EXT4-fs (loop5): Remounting filesystem read-only [ 831.854857][T22763] EXT4-fs (loop5): 1 truncate cleaned up [ 831.873339][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 831.922860][T22763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.979946][T19305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.103561][T22810] loop5: detected capacity change from 0 to 256 [ 832.140226][T22810] syz.5.4863: attempt to access beyond end of device [ 832.140226][T22810] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 832.507275][T22825] lo speed is unknown, defaulting to 1000 [ 832.716421][T22824] loop5: detected capacity change from 0 to 512 [ 832.753015][T22824] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 832.787269][T22824] EXT4-fs (loop5): 1 truncate cleaned up [ 832.793924][T22824] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.894562][T19305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.157694][T22833] FAULT_INJECTION: forcing a failure. [ 833.157694][T22833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.171856][T22833] CPU: 0 UID: 0 PID: 22833 Comm: syz.0.4870 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 833.171955][T22833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 833.171968][T22833] Call Trace: [ 833.171974][T22833] [ 833.172046][T22833] __dump_stack+0x1d/0x30 [ 833.172071][T22833] dump_stack_lvl+0xe8/0x140 [ 833.172090][T22833] dump_stack+0x15/0x1b [ 833.172107][T22833] should_fail_ex+0x265/0x280 [ 833.172155][T22833] should_fail+0xb/0x20 [ 833.172240][T22833] should_fail_usercopy+0x1a/0x20 [ 833.172260][T22833] _copy_from_user+0x1c/0xb0 [ 833.172286][T22833] do_ipt_set_ctl+0x3a0/0x820 [ 833.172311][T22833] ? _raw_spin_unlock_bh+0x36/0x40 [ 833.172376][T22833] ? tcp_release_cb+0xf1/0x370 [ 833.172479][T22833] nf_setsockopt+0x196/0x1b0 [ 833.172511][T22833] ip_setsockopt+0x102/0x110 [ 833.172591][T22833] tcp_setsockopt+0x98/0xb0 [ 833.172623][T22833] sock_common_setsockopt+0x66/0x80 [ 833.172649][T22833] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 833.172677][T22833] smc_setsockopt+0x180/0x750 [ 833.172712][T22833] ? __pfx_smc_setsockopt+0x10/0x10 [ 833.172742][T22833] __sys_setsockopt+0x181/0x200 [ 833.172854][T22833] __x64_sys_setsockopt+0x64/0x80 [ 833.172947][T22833] x64_sys_call+0x2bd5/0x2fb0 [ 833.172971][T22833] do_syscall_64+0xd2/0x200 [ 833.172999][T22833] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 833.173035][T22833] ? clear_bhb_loop+0x40/0x90 [ 833.173059][T22833] ? clear_bhb_loop+0x40/0x90 [ 833.173083][T22833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.173106][T22833] RIP: 0033:0x7f8ce88ce929 [ 833.173123][T22833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.173217][T22833] RSP: 002b:00007f8ce6f37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 833.173279][T22833] RAX: ffffffffffffffda RBX: 00007f8ce8af5fa0 RCX: 00007f8ce88ce929 [ 833.173293][T22833] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 833.173307][T22833] RBP: 00007f8ce6f37090 R08: 0000000000000268 R09: 0000000000000000 [ 833.173321][T22833] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.173331][T22833] R13: 0000000000000000 R14: 00007f8ce8af5fa0 R15: 00007ffecb220468 [ 833.173348][T22833] [ 833.437798][T22835] wg2: entered promiscuous mode [ 833.443069][T22835] wg2: entered allmulticast mode [ 833.568992][T22849] loop7: detected capacity change from 0 to 512 [ 833.590124][T22837] loop4: detected capacity change from 0 to 512 [ 833.600312][T22851] siw: device registration error -23 [ 833.608748][T22849] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 833.648168][T22849] EXT4-fs (loop7): mount failed [ 833.654934][T22849] FAULT_INJECTION: forcing a failure. [ 833.654934][T22849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 833.668599][T22849] CPU: 0 UID: 0 PID: 22849 Comm: syz.7.4874 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 833.668630][T22849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 833.668642][T22849] Call Trace: [ 833.668672][T22849] [ 833.668681][T22849] __dump_stack+0x1d/0x30 [ 833.668706][T22849] dump_stack_lvl+0xe8/0x140 [ 833.668726][T22849] dump_stack+0x15/0x1b [ 833.668744][T22849] should_fail_ex+0x265/0x280 [ 833.668764][T22849] should_fail+0xb/0x20 [ 833.668841][T22849] should_fail_usercopy+0x1a/0x20 [ 833.668861][T22849] _copy_from_user+0x1c/0xb0 [ 833.668884][T22849] ___sys_sendmsg+0xc1/0x1d0 [ 833.668989][T22849] __x64_sys_sendmsg+0xd4/0x160 [ 833.669021][T22849] x64_sys_call+0x2999/0x2fb0 [ 833.669082][T22849] do_syscall_64+0xd2/0x200 [ 833.669115][T22849] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 833.669148][T22849] ? clear_bhb_loop+0x40/0x90 [ 833.669172][T22849] ? clear_bhb_loop+0x40/0x90 [ 833.669240][T22849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.669261][T22849] RIP: 0033:0x7ff4392fe929 [ 833.669279][T22849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.669353][T22849] RSP: 002b:00007ff437967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.669376][T22849] RAX: ffffffffffffffda RBX: 00007ff439525fa0 RCX: 00007ff4392fe929 [ 833.669390][T22849] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000003 [ 833.669403][T22849] RBP: 00007ff437967090 R08: 0000000000000000 R09: 0000000000000000 [ 833.669415][T22849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.669426][T22849] R13: 0000000000000000 R14: 00007ff439525fa0 R15: 00007ffc1be974e8 [ 833.669471][T22849] [ 833.867501][T22857] loop2: detected capacity change from 0 to 256 [ 833.881273][T22857] syz.2.4877: attempt to access beyond end of device [ 833.881273][T22857] loop2: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 833.953572][T22864] FAULT_INJECTION: forcing a failure. [ 833.953572][T22864] name failslab, interval 1, probability 0, space 0, times 0 [ 833.966302][T22864] CPU: 1 UID: 0 PID: 22864 Comm: syz.5.4879 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 833.966333][T22864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 833.966345][T22864] Call Trace: [ 833.966351][T22864] [ 833.966359][T22864] __dump_stack+0x1d/0x30 [ 833.966459][T22864] dump_stack_lvl+0xe8/0x140 [ 833.966490][T22864] dump_stack+0x15/0x1b [ 833.966508][T22864] should_fail_ex+0x265/0x280 [ 833.966527][T22864] should_failslab+0x8c/0xb0 [ 833.966553][T22864] kmem_cache_alloc_noprof+0x50/0x310 [ 833.966691][T22864] ? getname_flags+0x80/0x3b0 [ 833.966716][T22864] getname_flags+0x80/0x3b0 [ 833.966792][T22864] __se_sys_newstat+0x4b/0x280 [ 833.966822][T22864] ? fput+0x8f/0xc0 [ 833.966863][T22864] ? ksys_write+0x192/0x1a0 [ 833.966882][T22864] __x64_sys_newstat+0x31/0x40 [ 833.966938][T22864] x64_sys_call+0x781/0x2fb0 [ 833.966957][T22864] do_syscall_64+0xd2/0x200 [ 833.967028][T22864] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 833.967051][T22864] ? clear_bhb_loop+0x40/0x90 [ 833.967130][T22864] ? clear_bhb_loop+0x40/0x90 [ 833.967160][T22864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.967204][T22864] RIP: 0033:0x7f6867cfe929 [ 833.967219][T22864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 833.967235][T22864] RSP: 002b:00007f6866367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 833.967326][T22864] RAX: ffffffffffffffda RBX: 00007f6867f25fa0 RCX: 00007f6867cfe929 [ 833.967338][T22864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001c40 [ 833.967348][T22864] RBP: 00007f6866367090 R08: 0000000000000000 R09: 0000000000000000 [ 833.967359][T22864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 833.967370][T22864] R13: 0000000000000000 R14: 00007f6867f25fa0 R15: 00007ffd9d09c9f8 [ 833.967386][T22864] [ 833.974929][T22837] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 834.082746][T22869] loop7: detected capacity change from 0 to 512 [ 834.124442][T22837] EXT4-fs (loop4): mount failed [ 834.227683][T22870] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 834.259628][T22869] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.282800][T22869] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 834.359758][T22874] lo speed is unknown, defaulting to 1000 [ 834.497039][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.570936][T22878] loop5: detected capacity change from 0 to 512 [ 834.593652][T22880] __nla_validate_parse: 25 callbacks suppressed [ 834.593694][T22880] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4885'. [ 834.609088][T22880] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4885'. [ 834.651613][T22878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 834.744935][T22878] ext4 filesystem being mounted at /157/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 834.850088][T22880] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4885'. [ 834.859336][T22880] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4885'. [ 834.955046][T22878] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.4883: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 834.979529][T22880] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4885'. [ 834.988686][T22880] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4885'. [ 835.010891][T22878] EXT4-fs (loop5): Remounting filesystem read-only [ 835.033477][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 835.033541][ T29] audit: type=1400 audit(1749183722.921:67151): avc: denied { bind } for pid=22895 comm="syz.2.4888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 835.057361][T22903] FAULT_INJECTION: forcing a failure. [ 835.057361][T22903] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.072821][T22903] CPU: 1 UID: 0 PID: 22903 Comm: syz.0.4889 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 835.072853][T22903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 835.072868][T22903] Call Trace: [ 835.072876][T22903] [ 835.072885][T22903] __dump_stack+0x1d/0x30 [ 835.072958][T22903] dump_stack_lvl+0xe8/0x140 [ 835.072980][T22903] dump_stack+0x15/0x1b [ 835.072999][T22903] should_fail_ex+0x265/0x280 [ 835.073028][T22903] should_fail+0xb/0x20 [ 835.073046][T22903] should_fail_usercopy+0x1a/0x20 [ 835.073112][T22903] _copy_from_user+0x1c/0xb0 [ 835.073139][T22903] ___sys_sendmsg+0xc1/0x1d0 [ 835.073239][T22903] __x64_sys_sendmsg+0xd4/0x160 [ 835.073346][T22903] x64_sys_call+0x2999/0x2fb0 [ 835.073386][T22903] do_syscall_64+0xd2/0x200 [ 835.073418][T22903] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 835.073446][T22903] ? clear_bhb_loop+0x40/0x90 [ 835.073563][T22903] ? clear_bhb_loop+0x40/0x90 [ 835.073587][T22903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.073643][T22903] RIP: 0033:0x7f8ce88ce929 [ 835.073662][T22903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.073682][T22903] RSP: 002b:00007f8ce6f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 835.073704][T22903] RAX: ffffffffffffffda RBX: 00007f8ce8af5fa0 RCX: 00007f8ce88ce929 [ 835.073718][T22903] RDX: 0000000000000080 RSI: 00002000000009c0 RDI: 0000000000000003 [ 835.073732][T22903] RBP: 00007f8ce6f37090 R08: 0000000000000000 R09: 0000000000000000 [ 835.073776][T22903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.073860][T22903] R13: 0000000000000000 R14: 00007f8ce8af5fa0 R15: 00007ffecb220468 [ 835.073956][T22903] [ 835.166320][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4883'. [ 835.171364][T22897] loop2: detected capacity change from 0 to 1024 [ 835.185065][T22902] loop4: detected capacity change from 0 to 512 [ 835.205884][T22897] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 835.214488][T22902] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 835.221613][T22897] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 835.247661][T22902] EXT4-fs (loop4): 1 truncate cleaned up [ 835.308264][T22897] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 835.314263][T22902] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 835.345980][T22897] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.4888: unexpected bad inode w/o EXT4_IGET_BAD [ 835.359638][T22897] EXT4-fs (loop2): no journal found [ 835.364929][T22897] EXT4-fs (loop2): can't get journal size [ 835.371909][T22897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 835.453526][T19305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.463355][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.473572][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 835.647401][T22923] Cannot find add_set index 0 as target [ 835.721998][ T29] audit: type=1400 audit(1749183723.611:67152): avc: denied { read } for pid=22924 comm="syz.4.4896" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 835.746161][ T29] audit: type=1400 audit(1749183723.611:67153): avc: denied { open } for pid=22924 comm="syz.4.4896" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 835.774466][ T29] audit: type=1400 audit(1749183723.661:67154): avc: denied { write } for pid=22924 comm="syz.4.4896" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 835.794611][ T29] audit: type=1400 audit(1749183723.661:67155): avc: denied { mount } for pid=22924 comm="syz.4.4896" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 835.829033][ T29] audit: type=1400 audit(1749183723.711:67156): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 835.920287][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4897'. [ 835.937477][ T29] audit: type=1326 audit(1749183723.821:67157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22939 comm="syz.7.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4392fe929 code=0x7ffc0000 [ 835.961480][ T29] audit: type=1326 audit(1749183723.821:67158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22939 comm="syz.7.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4392fe929 code=0x7ffc0000 [ 835.967283][T22942] loop2: detected capacity change from 0 to 256 [ 836.005398][ T29] audit: type=1326 audit(1749183723.871:67159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22939 comm="syz.7.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff4392fe929 code=0x7ffc0000 [ 836.029192][ T29] audit: type=1326 audit(1749183723.871:67160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22939 comm="syz.7.4901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4392fe929 code=0x7ffc0000 [ 836.111481][T22942] syz.2.4902: attempt to access beyond end of device [ 836.111481][T22942] loop2: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 836.150743][T22947] loop4: detected capacity change from 0 to 512 [ 836.158213][T22947] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 836.190965][T22947] EXT4-fs (loop4): 1 truncate cleaned up [ 836.197052][T22947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.254092][T22959] siw: device registration error -23 [ 836.262258][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.317830][T22959] lo speed is unknown, defaulting to 1000 [ 836.334636][T22965] xt_socket: unknown flags 0xd0 [ 836.360438][T22965] loop4: detected capacity change from 0 to 1024 [ 836.375297][T22965] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.4912: Failed to acquire dquot type 0 [ 836.390876][T22965] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 836.412738][T22965] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4912: corrupted inode contents [ 836.437463][T22965] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.4912: mark_inode_dirty error [ 836.439744][T22971] FAULT_INJECTION: forcing a failure. [ 836.439744][T22971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 836.462029][T22971] CPU: 0 UID: 0 PID: 22971 Comm: syz.7.4914 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 836.462062][T22971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 836.462076][T22971] Call Trace: [ 836.462084][T22971] [ 836.462092][T22971] __dump_stack+0x1d/0x30 [ 836.462101][T22965] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4912: corrupted inode contents [ 836.462151][T22971] dump_stack_lvl+0xe8/0x140 [ 836.462170][T22971] dump_stack+0x15/0x1b [ 836.462189][T22971] should_fail_ex+0x265/0x280 [ 836.462211][T22971] should_fail+0xb/0x20 [ 836.462228][T22971] should_fail_usercopy+0x1a/0x20 [ 836.462250][T22971] _copy_from_user+0x1c/0xb0 [ 836.462313][T22971] autofs_dev_ioctl+0xdd/0x6a0 [ 836.462345][T22971] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 836.462389][T22971] __se_sys_ioctl+0xcb/0x140 [ 836.462420][T22971] __x64_sys_ioctl+0x43/0x50 [ 836.462453][T22971] x64_sys_call+0x19a8/0x2fb0 [ 836.462475][T22971] do_syscall_64+0xd2/0x200 [ 836.462503][T22971] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 836.462529][T22971] ? clear_bhb_loop+0x40/0x90 [ 836.462560][T22971] ? clear_bhb_loop+0x40/0x90 [ 836.462581][T22971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.462603][T22971] RIP: 0033:0x7ff4392fe929 [ 836.462651][T22971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.462691][T22971] RSP: 002b:00007ff437967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.462711][T22971] RAX: ffffffffffffffda RBX: 00007ff439525fa0 RCX: 00007ff4392fe929 [ 836.462724][T22971] RDX: 0000200000001040 RSI: 00000000c018937e RDI: 0000000000000005 [ 836.462738][T22971] RBP: 00007ff437967090 R08: 0000000000000000 R09: 0000000000000000 [ 836.462809][T22971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 836.462822][T22971] R13: 0000000000000000 R14: 00007ff439525fa0 R15: 00007ffc1be974e8 [ 836.462839][T22971] [ 836.464366][T22973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4913'. [ 836.483461][T22965] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.4912: mark_inode_dirty error [ 836.484668][T22973] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4913'. [ 836.488789][T22965] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4912: corrupted inode contents [ 836.535147][T22976] siw: device registration error -23 [ 836.595419][T22965] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 836.719246][T22965] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.4912: corrupted inode contents [ 836.732608][T22965] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.4912: mark_inode_dirty error [ 836.744257][T22965] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 836.754074][T22965] EXT4-fs (loop4): 1 truncate cleaned up [ 836.760375][T22965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 836.774228][T22965] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 836.815794][T22976] lo speed is unknown, defaulting to 1000 [ 837.022648][T22988] loop2: detected capacity change from 0 to 512 [ 837.031877][T22988] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 837.060669][T22988] EXT4-fs (loop2): 1 truncate cleaned up [ 837.067047][T22988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 837.126379][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 837.267592][T22994] pim6reg: entered allmulticast mode [ 837.275709][T22991] pim6reg: left allmulticast mode [ 837.316753][T23000] siw: device registration error -23 [ 837.346758][T23000] lo speed is unknown, defaulting to 1000 [ 837.400470][T23005] loop4: detected capacity change from 0 to 128 [ 837.593825][T23017] vlan0: entered allmulticast mode [ 837.644664][T23023] capability: warning: `syz.7.4936' uses 32-bit capabilities (legacy support in use) [ 837.656374][T23027] loop5: detected capacity change from 0 to 256 [ 837.685645][T23027] syz.5.4938: attempt to access beyond end of device [ 837.685645][T23027] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 837.713663][T23030] loop0: detected capacity change from 0 to 1024 [ 837.740946][T23036] loop7: detected capacity change from 0 to 128 [ 837.751407][T23034] loop2: detected capacity change from 0 to 256 [ 837.784906][T23030] EXT4-fs (loop0): orphan cleanup on readonly fs [ 837.828207][T23034] syz.2.4940: attempt to access beyond end of device [ 837.828207][T23034] loop2: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 837.850450][T23030] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.4939: Failed to acquire dquot type 0 [ 837.856238][T23025] pim6reg: entered allmulticast mode [ 837.867318][T23042] loop5: detected capacity change from 0 to 256 [ 837.872698][T23030] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 837.890194][T23030] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.4939: corrupted inode contents [ 837.902912][T23030] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #13: comm syz.0.4939: mark_inode_dirty error [ 837.914788][T23030] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.4939: corrupted inode contents [ 837.916292][T23032] pim6reg: left allmulticast mode [ 837.927873][T23030] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.4939: mark_inode_dirty error [ 837.943978][T23030] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.4939: corrupted inode contents [ 837.956558][T23042] syz.5.4943: attempt to access beyond end of device [ 837.956558][T23042] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 837.959202][T23030] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 837.981531][T23030] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.4939: corrupted inode contents [ 838.004093][T23030] EXT4-fs error (device loop0): ext4_truncate:4597: inode #13: comm syz.0.4939: mark_inode_dirty error [ 838.014725][T23049] loop2: detected capacity change from 0 to 256 [ 838.015527][T23030] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 838.032379][T23030] EXT4-fs (loop0): 1 truncate cleaned up [ 838.038665][T23030] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 838.092790][T23049] syz.2.4944: attempt to access beyond end of device [ 838.092790][T23049] loop2: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 838.261132][T23066] loop5: detected capacity change from 0 to 128 [ 838.267280][T23068] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 838.317636][T23072] loop2: detected capacity change from 0 to 256 [ 838.331632][ T3331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.343290][T23076] FAULT_INJECTION: forcing a failure. [ 838.343290][T23076] name failslab, interval 1, probability 0, space 0, times 0 [ 838.356219][T23076] CPU: 0 UID: 0 PID: 23076 Comm: syz.4.4956 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 838.356252][T23076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 838.356341][T23076] Call Trace: [ 838.356348][T23076] [ 838.356356][T23076] __dump_stack+0x1d/0x30 [ 838.356381][T23076] dump_stack_lvl+0xe8/0x140 [ 838.356400][T23076] dump_stack+0x15/0x1b [ 838.356415][T23076] should_fail_ex+0x265/0x280 [ 838.356454][T23076] should_failslab+0x8c/0xb0 [ 838.356478][T23076] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 838.356506][T23076] ? alloc_inode+0x9a/0x170 [ 838.356603][T23076] alloc_inode+0x9a/0x170 [ 838.356700][T23076] create_pipe_files+0x41/0x400 [ 838.356720][T23076] ? __fget_files+0x184/0x1c0 [ 838.356746][T23076] __do_pipe_flags+0x4a/0x1a0 [ 838.356772][T23076] do_pipe2+0x61/0x130 [ 838.356798][T23076] __x64_sys_pipe2+0x30/0x40 [ 838.356823][T23076] x64_sys_call+0x2d82/0x2fb0 [ 838.356849][T23076] do_syscall_64+0xd2/0x200 [ 838.356940][T23076] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 838.356979][T23076] ? clear_bhb_loop+0x40/0x90 [ 838.357002][T23076] ? clear_bhb_loop+0x40/0x90 [ 838.357026][T23076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.357063][T23076] RIP: 0033:0x7ff2fc67e929 [ 838.357078][T23076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 838.357095][T23076] RSP: 002b:00007ff2face7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 838.357154][T23076] RAX: ffffffffffffffda RBX: 00007ff2fc8a5fa0 RCX: 00007ff2fc67e929 [ 838.357169][T23076] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 838.357183][T23076] RBP: 00007ff2face7090 R08: 0000000000000000 R09: 0000000000000000 [ 838.357197][T23076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 838.357239][T23076] R13: 0000000000000000 R14: 00007ff2fc8a5fa0 R15: 00007ffce9218868 [ 838.357259][T23076] [ 838.576542][T23072] syz.2.4954: attempt to access beyond end of device [ 838.576542][T23072] loop2: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 838.577776][T23082] loop4: detected capacity change from 0 to 512 [ 838.617714][T23082] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 838.640438][T23082] ext4 filesystem being mounted at /982/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 838.673930][T23082] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.4959: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 838.704379][T23082] EXT4-fs (loop4): Remounting filesystem read-only [ 838.780976][T23099] loop5: detected capacity change from 0 to 128 [ 838.812858][T23101] lo speed is unknown, defaulting to 1000 [ 838.865125][T23108] siw: device registration error -23 [ 838.882670][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.972550][T23111] lo speed is unknown, defaulting to 1000 [ 839.007068][T23107] loop5: detected capacity change from 0 to 512 [ 839.017632][T23107] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 839.029381][T23107] EXT4-fs (loop5): 1 truncate cleaned up [ 839.035496][T23107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.112645][T19305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.230961][T23130] loop5: detected capacity change from 0 to 256 [ 839.290057][T23130] syz.5.4977: attempt to access beyond end of device [ 839.290057][T23130] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 839.353369][T23136] loop0: detected capacity change from 0 to 512 [ 839.430416][T23149] siw: device registration error -23 [ 839.432308][T23136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.476812][T23136] ext4 filesystem being mounted at /962/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 839.481404][T23152] FAULT_INJECTION: forcing a failure. [ 839.481404][T23152] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 839.521804][T23152] CPU: 1 UID: 0 PID: 23152 Comm: syz.5.4986 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 839.521835][T23152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 839.521876][T23152] Call Trace: [ 839.521884][T23152] [ 839.521892][T23152] __dump_stack+0x1d/0x30 [ 839.521917][T23152] dump_stack_lvl+0xe8/0x140 [ 839.521939][T23152] dump_stack+0x15/0x1b [ 839.522031][T23152] should_fail_ex+0x265/0x280 [ 839.522092][T23152] should_fail+0xb/0x20 [ 839.522111][T23152] should_fail_usercopy+0x1a/0x20 [ 839.522156][T23152] _copy_from_user+0x1c/0xb0 [ 839.522250][T23152] uhid_char_write+0xef/0x650 [ 839.522273][T23152] ? __pfx_uhid_char_write+0x10/0x10 [ 839.522294][T23152] vfs_write+0x269/0x8e0 [ 839.522365][T23152] ? __rcu_read_unlock+0x4f/0x70 [ 839.522388][T23152] ? __fget_files+0x184/0x1c0 [ 839.522415][T23152] ksys_write+0xda/0x1a0 [ 839.522437][T23152] __x64_sys_write+0x40/0x50 [ 839.522457][T23152] x64_sys_call+0x2cdd/0x2fb0 [ 839.522559][T23152] do_syscall_64+0xd2/0x200 [ 839.522589][T23152] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 839.522618][T23152] ? clear_bhb_loop+0x40/0x90 [ 839.522758][T23152] ? clear_bhb_loop+0x40/0x90 [ 839.522820][T23152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.522843][T23152] RIP: 0033:0x7f6867cfe929 [ 839.522861][T23152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 839.522881][T23152] RSP: 002b:00007f6866367038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 839.522925][T23152] RAX: ffffffffffffffda RBX: 00007f6867f25fa0 RCX: 00007f6867cfe929 [ 839.522940][T23152] RDX: 0000000000001006 RSI: 0000200000000d00 RDI: 0000000000000003 [ 839.522954][T23152] RBP: 00007f6866367090 R08: 0000000000000000 R09: 0000000000000000 [ 839.522968][T23152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.522981][T23152] R13: 0000000000000000 R14: 00007f6867f25fa0 R15: 00007ffd9d09c9f8 [ 839.522997][T23152] [ 839.525195][T23149] lo speed is unknown, defaulting to 1000 [ 839.545409][T23137] loop7: detected capacity change from 0 to 512 [ 839.832018][T23136] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.4979: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 839.832390][T23136] EXT4-fs (loop0): Remounting filesystem read-only [ 839.886488][T23170] __nla_validate_parse: 2 callbacks suppressed [ 839.886508][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4979'. [ 839.939263][T23169] loop4: detected capacity change from 0 to 512 [ 839.945909][T23173] loop5: detected capacity change from 0 to 256 [ 839.946417][T23169] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 839.969477][T23169] EXT4-fs (loop4): 1 truncate cleaned up [ 839.977751][T23169] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 839.998116][T23173] syz.5.4993: attempt to access beyond end of device [ 839.998116][T23173] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 840.006674][T23169] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.049452][ T3331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.059197][T23137] __quota_error: 175 callbacks suppressed [ 840.059214][T23137] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 840.087029][T23137] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 840.108735][T23181] SELinux: syz.4.4997 (23181) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 840.111157][ T29] audit: type=1400 audit(1749183728.001:67332): avc: denied { add_name } for pid=23180 comm="syz.4.4997" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 840.111196][ T29] audit: type=1400 audit(1749183728.001:67333): avc: denied { create } for pid=23180 comm="syz.4.4997" name="pids.current" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 840.111755][ T29] audit: type=1326 audit(1749183728.001:67334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23180 comm="syz.4.4997" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2fc67e929 code=0x0 [ 840.207529][T23137] EXT4-fs (loop7): mount failed [ 840.283392][T23188] FAULT_INJECTION: forcing a failure. [ 840.283392][T23188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.296692][T23188] CPU: 1 UID: 0 PID: 23188 Comm: syz.0.4998 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 840.296745][T23188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 840.296757][T23188] Call Trace: [ 840.296764][T23188] [ 840.296772][T23188] __dump_stack+0x1d/0x30 [ 840.296796][T23188] dump_stack_lvl+0xe8/0x140 [ 840.296817][T23188] dump_stack+0x15/0x1b [ 840.296888][T23188] should_fail_ex+0x265/0x280 [ 840.296932][T23188] should_fail+0xb/0x20 [ 840.296949][T23188] should_fail_usercopy+0x1a/0x20 [ 840.296971][T23188] _copy_from_user+0x1c/0xb0 [ 840.296996][T23188] ___sys_sendmsg+0xc1/0x1d0 [ 840.297036][T23188] __x64_sys_sendmsg+0xd4/0x160 [ 840.297136][T23188] x64_sys_call+0x2999/0x2fb0 [ 840.297221][T23188] do_syscall_64+0xd2/0x200 [ 840.297254][T23188] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 840.297282][T23188] ? clear_bhb_loop+0x40/0x90 [ 840.297384][T23188] ? clear_bhb_loop+0x40/0x90 [ 840.297406][T23188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.297428][T23188] RIP: 0033:0x7f8ce88ce929 [ 840.297444][T23188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.297522][T23188] RSP: 002b:00007f8ce6f37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 840.297543][T23188] RAX: ffffffffffffffda RBX: 00007f8ce8af5fa0 RCX: 00007f8ce88ce929 [ 840.297557][T23188] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 840.297594][T23188] RBP: 00007f8ce6f37090 R08: 0000000000000000 R09: 0000000000000000 [ 840.297607][T23188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 840.297619][T23188] R13: 0000000000000000 R14: 00007f8ce8af5fa0 R15: 00007ffecb220468 [ 840.297638][T23188] [ 840.535910][T23184] loop5: detected capacity change from 0 to 512 [ 840.706256][T23206] loop0: detected capacity change from 0 to 256 [ 840.709513][T23184] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 840.731016][T23184] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 840.735676][T23206] syz.0.5006: attempt to access beyond end of device [ 840.735676][T23206] loop0: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 840.764046][T23200] loop7: detected capacity change from 0 to 512 [ 840.764434][T23184] EXT4-fs (loop5): mount failed [ 840.771507][T23200] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 840.792071][T23200] EXT4-fs (loop7): 1 truncate cleaned up [ 840.798406][T23200] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 840.846995][T23213] loop2: detected capacity change from 0 to 256 [ 840.870647][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.951695][T23213] syz.2.5008: attempt to access beyond end of device [ 840.951695][T23213] loop2: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 841.055925][T23218] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5009'. [ 841.081265][T23230] loop5: detected capacity change from 0 to 256 [ 841.118512][T23216] loop0: detected capacity change from 0 to 512 [ 841.130519][T23223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5011'. [ 841.150164][T23230] syz.5.5013: attempt to access beyond end of device [ 841.150164][T23230] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 841.224445][ T29] audit: type=1326 audit(1749183729.111:67335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23238 comm="syz.4.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 841.265941][T23239] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5018'. [ 841.294306][ T29] audit: type=1326 audit(1749183729.141:67336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23238 comm="syz.4.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 841.318452][ T29] audit: type=1326 audit(1749183729.141:67337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23238 comm="syz.4.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 841.324369][T23216] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6). [ 841.342427][ T29] audit: type=1326 audit(1749183729.141:67338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23238 comm="syz.4.5018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff2fc67e929 code=0x7ffc0000 [ 841.386783][T23246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5019'. [ 841.395925][T23246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5019'. [ 841.407084][T23239] random: crng reseeded on system resumption [ 841.412231][T23216] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 841.436772][T23216] EXT4-fs (loop0): mount failed [ 841.458514][T23246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5019'. [ 841.467800][T23246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5019'. [ 841.502719][T23246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5019'. [ 841.511967][T23246] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5019'. [ 841.535432][T23249] loop5: detected capacity change from 0 to 512 [ 841.542443][T23249] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 841.559726][T23249] EXT4-fs (loop5): 1 truncate cleaned up [ 841.565847][T23249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 841.637947][T19305] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 841.713134][T23266] team0 (unregistering): Port device team_slave_0 removed [ 841.726744][T23266] team0 (unregistering): Port device team_slave_1 removed [ 841.794940][T23260] vlan0: entered allmulticast mode [ 841.845555][T23267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.867553][T23267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.870139][T23280] loop0: detected capacity change from 0 to 256 [ 841.923806][T23286] team0 (unregistering): Port device team_slave_0 removed [ 841.935130][T23286] team0 (unregistering): Port device team_slave_1 removed [ 842.023583][T23295] loop5: detected capacity change from 0 to 128 [ 842.036373][T23293] loop0: detected capacity change from 0 to 512 [ 842.089785][T23293] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 842.108285][T23293] ext4 filesystem being mounted at /973/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 842.168093][ T3331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 842.212234][T23310] loop5: detected capacity change from 0 to 128 [ 842.213560][T23312] loop0: detected capacity change from 0 to 256 [ 842.386921][T23324] loop0: detected capacity change from 0 to 256 [ 842.482479][T23334] loop0: detected capacity change from 0 to 1024 [ 842.493387][T23332] loop5: detected capacity change from 0 to 128 [ 842.542300][T23335] lo speed is unknown, defaulting to 1000 [ 842.608906][T23334] EXT4-fs (loop0): orphan cleanup on readonly fs [ 842.757792][T23334] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.5045: Failed to acquire dquot type 0 [ 842.882424][T23334] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 842.925285][T23346] team0 (unregistering): Port device team_slave_0 removed [ 842.932939][T23334] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.5045: corrupted inode contents [ 842.947984][T23346] team0 (unregistering): Port device team_slave_1 removed [ 842.966712][T23334] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #13: comm syz.0.5045: mark_inode_dirty error [ 842.983551][T23334] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.5045: corrupted inode contents [ 842.996234][T23334] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.5045: mark_inode_dirty error [ 843.071922][T23334] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.5045: corrupted inode contents [ 843.091502][T23334] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 843.111340][T23334] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #13: comm syz.0.5045: corrupted inode contents [ 843.124085][T23334] EXT4-fs error (device loop0): ext4_truncate:4597: inode #13: comm syz.0.5045: mark_inode_dirty error [ 843.198230][T23334] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 843.208188][T23334] EXT4-fs (loop0): 1 truncate cleaned up [ 843.262249][T23359] loop7: detected capacity change from 0 to 512 [ 843.262891][T23334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 843.281569][T23359] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 843.297374][T23359] EXT4-fs (loop7): 1 truncate cleaned up [ 843.303653][T23359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.324895][T23355] vlan0: entered allmulticast mode [ 843.352759][ T3331] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.363902][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.382102][T23360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.393317][T23360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.421542][T23373] loop0: detected capacity change from 0 to 256 [ 843.430735][T23369] loop2: detected capacity change from 0 to 512 [ 843.451829][T23369] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.470272][T23373] bio_check_eod: 3 callbacks suppressed [ 843.470290][T23373] syz.0.5056: attempt to access beyond end of device [ 843.470290][T23373] loop0: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 843.499436][T23369] ext4 filesystem being mounted at /988/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 843.556211][T23369] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.5057: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 843.590249][T23369] EXT4-fs (loop2): Remounting filesystem read-only [ 843.731818][ T3329] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 843.822442][T23413] siw: device registration error -23 [ 843.856283][T23415] SELinux: syz.5.5073 (23415) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 843.886626][T23409] lo speed is unknown, defaulting to 1000 [ 843.895685][T23405] loop7: detected capacity change from 0 to 512 [ 843.903030][T23405] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 843.916422][T23405] EXT4-fs (loop7): 1 truncate cleaned up [ 843.923899][T23405] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 843.988563][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.106441][T23435] loop7: detected capacity change from 0 to 512 [ 844.150167][T23435] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.175673][T23435] ext4 filesystem being mounted at /168/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 844.211170][T23435] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.5081: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 844.245520][T23435] EXT4-fs (loop7): Remounting filesystem read-only [ 844.315961][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 844.353537][T23465] FAULT_INJECTION: forcing a failure. [ 844.353537][T23465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.367119][T23465] CPU: 0 UID: 0 PID: 23465 Comm: syz.7.5090 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 844.367158][T23465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 844.367169][T23465] Call Trace: [ 844.367179][T23465] [ 844.367196][T23465] __dump_stack+0x1d/0x30 [ 844.367221][T23465] dump_stack_lvl+0xe8/0x140 [ 844.367242][T23465] dump_stack+0x15/0x1b [ 844.367260][T23465] should_fail_ex+0x265/0x280 [ 844.367283][T23465] should_fail+0xb/0x20 [ 844.367301][T23465] should_fail_usercopy+0x1a/0x20 [ 844.367357][T23465] _copy_from_user+0x1c/0xb0 [ 844.367381][T23465] __sys_connect+0xd0/0x2b0 [ 844.367413][T23465] __x64_sys_connect+0x3f/0x50 [ 844.367486][T23465] x64_sys_call+0x1daa/0x2fb0 [ 844.367505][T23465] do_syscall_64+0xd2/0x200 [ 844.367531][T23465] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 844.367603][T23465] ? clear_bhb_loop+0x40/0x90 [ 844.367623][T23465] ? clear_bhb_loop+0x40/0x90 [ 844.367646][T23465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.367719][T23465] RIP: 0033:0x7ff4392fe929 [ 844.367737][T23465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.367758][T23465] RSP: 002b:00007ff437967038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 844.367781][T23465] RAX: ffffffffffffffda RBX: 00007ff439525fa0 RCX: 00007ff4392fe929 [ 844.367796][T23465] RDX: 000000000000006e RSI: 0000200000000640 RDI: 0000000000000003 [ 844.367810][T23465] RBP: 00007ff437967090 R08: 0000000000000000 R09: 0000000000000000 [ 844.367860][T23465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.367873][T23465] R13: 0000000000000000 R14: 00007ff439525fa0 R15: 00007ffc1be974e8 [ 844.367890][T23465] [ 844.595386][T23473] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 844.621587][T23463] vlan0: entered allmulticast mode [ 844.688200][T23455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.704226][T23455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.806088][T23498] loop4: detected capacity change from 0 to 512 [ 844.825689][T23498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 844.844765][T23498] ext4 filesystem being mounted at /1006/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 844.880310][T23498] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.5101: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 844.881040][T23492] vlan0: entered allmulticast mode [ 844.902566][T23498] EXT4-fs (loop4): Remounting filesystem read-only [ 844.960553][T23498] __nla_validate_parse: 45 callbacks suppressed [ 844.960575][T23498] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5101'. [ 845.012115][T23492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 845.020973][T23492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 845.046805][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.122668][T23516] loop4: detected capacity change from 0 to 1024 [ 845.145038][T23517] lo speed is unknown, defaulting to 1000 [ 845.236868][T23516] EXT4-fs (loop4): orphan cleanup on readonly fs [ 845.247210][T23516] __quota_error: 280 callbacks suppressed [ 845.247228][T23516] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 845.262476][T23516] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 845.272313][T23516] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5106: Failed to acquire dquot type 0 [ 845.286508][T23516] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 845.302539][T23516] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5106: corrupted inode contents [ 845.315448][T23516] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.5106: mark_inode_dirty error [ 845.435659][T23516] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5106: corrupted inode contents [ 845.472176][T23516] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.5106: mark_inode_dirty error [ 845.505766][T23520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5107'. [ 845.518843][T23516] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5106: corrupted inode contents [ 845.554253][T23516] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 845.658518][T23516] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5106: corrupted inode contents [ 845.679443][T23516] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.5106: mark_inode_dirty error [ 845.690961][T23516] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 845.702408][T23516] EXT4-fs (loop4): 1 truncate cleaned up [ 845.708754][T23516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 845.742063][T23531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5111'. [ 845.751524][T23531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5111'. [ 845.775686][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 845.802016][T23531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5111'. [ 845.811142][T23531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5111'. [ 845.841589][ T29] audit: type=1326 audit(1749183733.721:67617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23530 comm="syz.0.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 845.865446][ T29] audit: type=1326 audit(1749183733.721:67618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23530 comm="syz.0.5111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 845.889774][ T29] audit: type=1326 audit(1749183733.721:67619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23530 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 845.897293][T23546] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5112'. [ 845.913108][ T29] audit: type=1326 audit(1749183733.721:67620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23530 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 845.945690][ T29] audit: type=1326 audit(1749183733.721:67621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23530 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 845.969038][ T29] audit: type=1326 audit(1749183733.721:67622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23530 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 845.992476][ T29] audit: type=1326 audit(1749183733.721:67623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23530 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 846.015953][ T29] audit: type=1326 audit(1749183733.721:67624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23530 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ce88ce929 code=0x7ffc0000 [ 846.047382][T23531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5111'. [ 846.056617][T23531] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5111'. [ 846.073455][T23550] loop5: detected capacity change from 0 to 256 [ 846.111063][T23553] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5117'. [ 846.123690][T23550] syz.5.5116: attempt to access beyond end of device [ 846.123690][T23550] loop5: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 846.236077][T23568] loop4: detected capacity change from 0 to 1024 [ 846.260382][T23572] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 846.276198][T23568] EXT4-fs (loop4): orphan cleanup on readonly fs [ 846.288407][T23568] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5122: Failed to acquire dquot type 0 [ 846.293521][T23553] vlan0: entered allmulticast mode [ 846.308529][T23568] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 846.341024][T23568] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5122: corrupted inode contents [ 846.350827][T23566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 846.356899][T23568] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #13: comm syz.4.5122: mark_inode_dirty error [ 846.362249][T23566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 846.404754][T23568] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5122: corrupted inode contents [ 846.425264][T23568] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.5122: mark_inode_dirty error [ 846.437464][T23568] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5122: corrupted inode contents [ 846.437939][T23561] loop5: detected capacity change from 0 to 512 [ 846.450135][T23568] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 846.450310][T23568] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #13: comm syz.4.5122: corrupted inode contents [ 846.450510][T23568] EXT4-fs error (device loop4): ext4_truncate:4597: inode #13: comm syz.4.5122: mark_inode_dirty error [ 846.450724][T23568] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 846.451328][T23568] EXT4-fs (loop4): 1 truncate cleaned up [ 846.514823][T23568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 846.583514][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.605401][T23587] loop7: detected capacity change from 0 to 512 [ 846.693534][T23587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.707726][T23587] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.715673][T23561] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 846.757658][T23561] EXT4-fs (loop5): mount failed [ 846.823732][T23600] lo speed is unknown, defaulting to 1000 [ 846.833018][T19993] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 846.850833][T23601] SELinux: Context system_u:object_r:ssh_keysign_exec_t:s0 is not valid (left unmapped). [ 846.862217][T19993] ================================================================== [ 846.870617][T19993] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 846.878457][T19993] [ 846.880795][T19993] read-write to 0xffff888237d26f10 of 8 bytes by task 23599 on cpu 1: [ 846.889652][T19993] find_get_block_common+0x4f0/0x960 [ 846.894986][T19993] bdev_getblk+0x83/0x3d0 [ 846.899356][T19993] __ext4_get_inode_loc+0x303/0x930 [ 846.904659][T19993] ext4_reserve_inode_write+0xd7/0x250 [ 846.910141][T19993] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 846.915837][T19993] ext4_dirty_inode+0x92/0xc0 [ 846.920537][T19993] __mark_inode_dirty+0x15f/0x760 [ 846.925684][T19993] file_update_time+0x288/0x2b0 [ 846.930624][T19993] ext4_page_mkwrite+0x18b/0xba0 [ 846.935626][T19993] handle_mm_fault+0x15ce/0x2be0 [ 846.940692][T19993] do_user_addr_fault+0x636/0x1090 [ 846.945959][T19993] exc_page_fault+0x62/0xa0 [ 846.950802][T19993] asm_exc_page_fault+0x26/0x30 [ 846.955821][T19993] [ 846.958156][T19993] read to 0xffff888237d26f10 of 8 bytes by task 19993 on cpu 0: [ 846.965890][T19993] has_bh_in_lru+0x35/0x1f0 [ 846.970530][T19993] smp_call_function_many_cond+0x389/0xbf0 [ 846.976350][T19993] on_each_cpu_cond_mask+0x3c/0x80 [ 846.981500][T19993] invalidate_bh_lrus+0x2a/0x30 [ 846.986383][T19993] blkdev_flush_mapping+0x9a/0x1a0 [ 846.991694][T19993] bdev_release+0x2bf/0x3d0 [ 846.996215][T19993] blkdev_release+0x15/0x20 [ 847.000813][T19993] __fput+0x29b/0x650 [ 847.004989][T19993] ____fput+0x1c/0x30 [ 847.009127][T19993] task_work_run+0x12e/0x1a0 [ 847.013859][T19993] exit_to_user_mode_loop+0xe4/0x100 [ 847.019176][T19993] do_syscall_64+0x1d6/0x200 [ 847.023792][T19993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.029701][T19993] [ 847.032038][T19993] value changed: 0x0000000000000000 -> 0xffff888100479bc8 [ 847.039156][T19993] [ 847.041492][T19993] Reported by Kernel Concurrency Sanitizer on: [ 847.047672][T19993] CPU: 0 UID: 0 PID: 19993 Comm: syz-executor Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(voluntary) [ 847.060463][T19993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 847.070626][T19993] ==================================================================