last executing test programs: 2m41.909799814s ago: executing program 3 (id=1215): socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0x8, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r2, r0}, 0xc) 2m41.770409195s ago: executing program 3 (id=1217): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r0, 0x0) 2m41.667953386s ago: executing program 3 (id=1221): r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x8, 0x101, 0x0, 0x0, {0xb, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4045) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup=r0, r2, 0x72e770955bf69d9f, 0x5, r0, @void, @value=r0}, 0x20) r3 = syz_usb_connect(0x2, 0x7b5, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0xcd, 0xa1, 0x49, 0x8, 0x19d2, 0x159, 0x3672, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7a3, 0x4, 0x2, 0x7f, 0x0, 0x5, [{{0x9, 0x4, 0x64, 0x62, 0x1, 0xff, 0xff, 0xff, 0x94, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "4e916a5c4a0a"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x4, 0x74}, {0x6, 0x24, 0x1a, 0x1, 0x4}, [@acm={0x4, 0x24, 0x2, 0xa}, @mdlm_detail={0x83, 0x24, 0x13, 0x5, "2617068c7d08e8e98b053810eccac8565d497b1724a4992a6daca9190e6e0f179a9b2e4cd669c9d6bd4bd537494dd918f166a6a1689f9c49b04ae232ffee21b20be0ec35075dfd5997147798d576897cc0e2dfab4eba923b9e2f2c04d178e5a8c4903c3e8d56c11621b58f5881b9caf2aa1525a94ba2e070a449483a52738e"}, @obex={0x5, 0x24, 0x15, 0x6}]}], [{{0x9, 0x5, 0xd, 0x0, 0x0, 0xb3, 0x4, 0xa, [@generic={0xe8, 0x31, "7df7c5e62c67676291a6dc7829755a9995986cb4889f47cdce92453e2d8a761bac77a5477fb948131eef609654d81355f00fa7bd4a49731c8eb6e5bfb3f8539be4459ad3043445427b9070e793fc2cf071383fc3aeb2b98bbe270985466ef396dd00c4d375fbd4280d99daeeb45af2c2b6199d6e8834f498ea834deefed30f5f2cbc8d731ea047f670a1553389dc71ccd83ab5ff2b6de2378c02da24d990e3ee8a59be4bc65125b67be8d3cf7e223556bde601e7f38b10670f59059ce57b504a1f4adf29233067baf9e38c043e7c5ac97511f748e096789ba71975f399157a38b83dc20e8789"}]}}]}}, {{0x9, 0x4, 0xd9, 0x8, 0x2, 0xff, 0x3, 0xd, 0x3, [@hid_hid={0x9, 0x21, 0xe, 0x7, 0x1, {0x22, 0x598}}], [{{0x9, 0x5, 0x4, 0x4, 0x200, 0xaf, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x313}, @generic={0x2e, 0xd, "4b61c21e07b64196a24fa6dd51e182d202a0d7971916f8a7e34ccaaec282ab4e673211fe18c6ff6802246614"}]}}, {{0x9, 0x5, 0x3, 0x14, 0x40, 0xfe, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0xc0}]}}]}}, {{0x9, 0x4, 0x4b, 0xb, 0xb, 0xff, 0x5d, 0x81, 0x2, [@hid_hid={0x9, 0x21, 0xfffa, 0x3, 0x1, {0x22, 0x485}}, @hid_hid={0x9, 0x21, 0x5, 0xc, 0x1, {0x22, 0x455}}], [{{0x9, 0x5, 0x80, 0x1, 0x20, 0x80, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xa, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x9, 0x9, 0x0, [@generic={0x21, 0x21, "b9c4cd63eaf7420d39bfc1e23abf9243cbf58c15996f8dedf057d1848f6fd5"}, @generic={0xed, 0x5, "dd718a3aab20a800c7aa6bcd4e9eafd0f3f95915f5424af385c8862fe8dd0da5e5842d782629f1b4bd93120632c07f030870981e5226d7d96f74922ad4c25a77baa273f43a515ff26c499f5cf9dff70fe784adea0b5d0de9c3fc2a1569e037f4eb3c995286bac779e93bbef4c59225078db85997824657eec11c46a27f1a0c49ede078f64327c1e08cdecc4f565690bec4e214683bb6216ad2d3e525b51f142a3a10094b2ec4788a8d39c8d660668f67de8a3ea14e603fa659051f904e81fe4ae41dfabe94946f6372c0a5d03712bd5a099f6681873475fd9cbfe4a409b7bb96504696c43122c414849fd3"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x0, 0xa3, 0xb8, [@generic={0x10, 0x21, "505707a720da092470b11cb865bb"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xb, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5b52}, @generic={0x1b, 0xf, "ebe0fdec96b0b6d03feba24b1b5d525f3d74ccf7577ed342a8"}]}}, {{0x9, 0x5, 0x444cc1d77421e68d, 0x3, 0x10, 0xb3, 0x8, 0xc, [@generic={0xa2, 0x6, "c196122c13c1beeec11f88388f1dde8222d984ea66731013b26090786019fc2830abbf76e8f482f06923e75ee1d66a073cb92cd6977ccc2090f841cbb7baa52ae6b462e9ec1ce69e1b6bcf88d4f2471040e40f7c1081aab63d42e06e4ec3099c64d1a7a7b1f5d61724fb7ff17f50a34a6c1571543389ed5af3c4adf2ace3e60c402b91b9919ceeff17943ad8972ab9ec112e91b367c1b401cf40ae79d5925f41"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x2, 0x6, 0x1c, [@generic={0xe8, 0x21, "43a9f33b375c83ae25e8afbd39b25e3f544dda0256ab62e0ff7f5b592434a69ed56e09294bd62b06a59170a26ffcff76a109ca85051579a437528fe6dd3063a3f92a142d7d461edee20e24bf75d19696ee420c7e4a032b528b38b5036d214fa9334214f99f07e9c60c9184d3543c50cac7b2d0a779e29c0d8135e6a3b4c7618da2c8fa1b419d1b63fdde3929ae39ccdefc3f628bd425e7ce5f914fd73f3709f31a9c92c8ca513b1f35c7bc979e43d0b94b51344a8063e12acd273974330ebfdc4d525915476bd0793048b5c340c0d2bd9d9d4c4111d4b07c152b119e0b7dc464de9134f3877d"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x70, 0x2, 0x90, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x8000}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x4, 0xf9, 0x6, [@generic={0xde, 0xe, "53f1f67790ce0246b71d1c05ee1487668cbabbead53a8cf8011dda6d521493e7cb77ebcce0dc26fb388143eaee12394e4f96879adc5ce58f7e032fe90cc22b14680ff5c82042f3d464d4509a1cbfa67c3e1b2206c970ee4ddb0ec9453e163b8abc7fe45eb653144040621f68d5f0079904837e11b6b294dc2797849c7006f75f3135c5cb16ea0dd78f9fdd48b1409a69562c7b4c89b2f36c0083a0400b60a6e9a6e37b582d0a0128c307fdb5e42f357e609cee1d4e44da1f96f738c00255e2a2c6aee95a604f762ac591f454bbfc92c65466c02d8e6941725dcfd363"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x3}]}}, {{0x9, 0x5, 0x0, 0x4, 0x0, 0x2, 0x7, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x4991}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xb, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}]}}]}}, {{0x9, 0x4, 0x7e, 0x4, 0x2, 0x70, 0x7, 0x39, 0x5, [@uac_as], [{{0x9, 0x5, 0x6, 0x8, 0x8, 0x8, 0x6, 0x5, [@generic={0x73, 0x5, "6e42a61511d93224dff176432c8233308c710081372e5c000bf2add1564290ffe4e09c8f62b9a06924be9e8b4251c73a9e9b115a86b0542b7a20fda3dcb7701d9c52fbc2077363ee431fc1d966e0159d3c111df6feda6ce68978446f620501fff9e58742f35a3006e7f93a692879e0118a"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x9, 0x9, 0x8, [@generic={0x23, 0x1, "9779de7f47cf40a1e63282f9dff7cc1b325ffd7ab4b24cbc688e02a57afa64e438"}, @generic={0x89, 0x14, "55178037966389f4d1f397ef8b493fb72899f62a7858ea1910b7b06e12a0b3bcf8a8faf2eb692dfebc22a37f35d0075910fb834eac72d679e70310e803228b0997d198ca74efa18f71534915cd1f82417e6706ad7069a369b02d05d37198d2a76add12d75938fcaffa1a498db4c90fd10ec3568f87720378aad848fffba1f1f3fc4c5e3d85da70"}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x250, 0x9, 0x82, 0x9, 0x8, 0x2}, 0xe0, &(0x7f0000000c40)={0x5, 0xf, 0xe0, 0x3, [@ptm_cap={0x3}, @generic={0xc4, 0x10, 0x4, "ab8aefef0c8e992aff9eb89955c11b4c0daabd9c817d47af0c5a8a47601a5437679192df289b23e405c58d5565ffee8107986d22bed3f2a1695cb5d954b374e5dc57816518544456ab7ff93464b113b2c5d7bb0e39507a2cdbebf6f0308d461a7e302955269aeb47428690cc6282d584801eb3b0d2e0bbf100b0eaced94fad5d62ff7b72345263397ad99edb1175ec305210447695decadd1c86d995279c2c7e0a55fa6771f106be22796bc5b143b5def05ae744a4074006d1de5e12b46c7ddff2"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "37f40774341d0627b7a6186d6067bb7f"}]}, 0xa, [{0xe1, &(0x7f0000000d40)=@string={0xe1, 0x3, "847ff43c5a01f23e68da4f763b161b86be129c69e4a6e3b77307fe87f25538daa86bd05fa439a9124de008ec4c7b25ab5b1ba88b420851a09e628dfbb9169a812c2248f9ad9f74458a784014bfa589b73d69908cc4b0de163e35cb754e9f6816fae7aaf7ae2d6343672864bf793ea75d5d4b41283a081f6ef1cd9f52785fcf0a93b4f98974989c12a6b96a3dbf702f2d4c0029094df3b51da74000447eae3e3e1383c32daa36c5f32b3ed873f5c0d777614e47dcdf43cdb850fa11353f9b6abe23e900d0c0d495f37713b151ed11b63d35bbc40d0725adff661c6c572edf42"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x427}}, {0xab, &(0x7f0000000e80)=@string={0xab, 0x3, "02542d0b858be665e303f6431c0e187062efcc69269697e588671bf5d62959ecc86d69f022b8fbc5e28a5365d52ca85d1c7bb2a8ae38c615a0089f5133f478f17ac99685faf5cee2b3f16bcb00952da55fab1d8ec7bdeff34da4801ae49196d9fb7786a8cd4118e645dc0c496ab4d8f293f4c1a95def210b54c26d9ae0186944aba2688322e6f70cacbcf0d2463bc9ef20d954e14248e252e84c3a4db7d3331f0da966f51493acdcb4"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0xf0ca}}, {0xb5, &(0x7f0000001000)=@string={0xb5, 0x3, "d72e50e1172d276aa5b4cfe3b46030249a7838492e75e6534e3095dff83a203b0170de6d03e1de342b346d5e10eaa8f26df086f6e9cfd90464c291b444acfed09e6101ed22065b32e848645e752b967f48924a01cadede12c6e9f6cdddb1d3a1077672a103908c4f36061bddf1c457dcebcbd6874064ec6416b670884d445873fb49d0d9dc4bf178d5c0f1f2ebefd9d92684a755e311953bf20df9745b273351f2fd957b309b3ae3f69d653a19664a5df241cd"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x1001}}]}) syz_usb_disconnect(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r2) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000001440)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x134, r5, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x7c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "d79ca7d5b65de1e4"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "1842784555e1efe3"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xa}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "9d8669947e8a23f3"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "eaf8e905db51e743"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x401}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x7, 0x2}, {}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2f2, 0x9, 0xfffb, 0x80, 0x8, 0x1, 0x2, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x0, 0x5, 0x545b, 0x7b0a, 0x7f, 0x4]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x1}, {0x7, 0x7}, {0x4, 0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x3}, {0x2, 0x9}, {0x5}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0xfc, 0x931, 0x2, 0x8, 0x2]}}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0xc1}, 0x0) io_setup(0x800, &(0x7f0000001480)) eventfd2(0xde, 0x40001) 2m40.77818266s ago: executing program 3 (id=1240): socket$inet(0x2, 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0x8, 0x8, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r2, r0}, 0xc) 2m40.652701121s ago: executing program 3 (id=1244): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x99]V\xe3\xb6!\xae\xf79k\x90\x88\v8I!\xfdQ\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xd9\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xd2#\x9e\x97\xf4*\xc9\xdd[\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x95\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x02\xb9(\xf6\x1c\x83\xb1J\xec', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000004600)=""/102381, 0xfffffceb, 0xffc99a3b00000000, 0x0) 2m40.556307321s ago: executing program 3 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 2m23.072860984s ago: executing program 32 (id=1248): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 1m25.728995735s ago: executing program 5 (id=2282): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@bh}, {@nodelalloc}]}, 0xfc, 0x564, &(0x7f00000008c0)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file2', [{0x20, 'lazytime'}]}, 0x14) sendfile(r0, r0, &(0x7f0000000240), 0x7f03) (fail_nth: 2) 1m25.370055017s ago: executing program 5 (id=2285): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffff99, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x306, 0x0, 0x7, 0x13, 0x4, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x840444, &(0x7f0000000000)=ANY=[], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") 1m25.221326557s ago: executing program 5 (id=2289): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000800)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x4d, 0x3, 0xb8db, 0x0, 0x2, 0x8, "4787b2a534d29259c4f800b3a76df54db60fc25fda12cb5350586701046f578f25e885c99006183ab6f37b4897cbc03e5ca6775ea4afb43d6d333524aa45a64c9c0e4c441d4ad3a5d540132eb6"}}, 0x165) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x5, 0x1c, 0xe8, 0x0, 0x0, 0x2, 0x0, @private=0x500, @private=0xa010100}, @address_request={0x11, 0x2}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x29, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) 1m24.942000308s ago: executing program 5 (id=2298): socket$inet6(0xa, 0xa, 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000280)={[{@stripe={'stripe', 0x3d, 0x10}}, {@stripe={'stripe', 0x3d, 0x4}}, {@dioread_nolock}, {@mblk_io_submit}, {@discard}, {@acl}]}, 0x1, 0x3dd, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x4, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="6105010681"], 0x5) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r5 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001c80)=@req3={0x3}, 0x1c) ioctl$LOOP_SET_STATUS64(r5, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1d, "ef359f413bb93852f7d6a4ae6dddfbff0edf110ff4117639e677df701905b9aafab4af000055a3f680040093b6225fcdeb4f0500", "cba3d6431108a059ca171ce1a311ef97e429951e14ef0127e1ffe8009600fdff000000000000000000000000000000000004000000000900", "9300e6d6a89ef31eea070000000010000000af7649ec3199bde400", [0xffffffffffffffe6, 0xfffffffffffffffe]}) pwrite64(r0, &(0x7f0000000000)="e3", 0x1, 0xffff) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0xa, 0x3, 0x3a) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000150001002bbd7000fedbdf250a4028fd", @ANYRES32=0x0, @ANYBLOB="08000a0000000000140002"], 0x44}}, 0x0) setsockopt$inet6_int(r9, 0x29, 0xd1, &(0x7f0000000040)=0xd758, 0x4) 1m23.782385814s ago: executing program 5 (id=2308): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x214, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x1f4, 0x11d, 0x0, 0x1, [{0x4}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x0, 0x2, 0x18, 0x9, 0x4a, 0x2, 0x3a, 0x6c, 0xc, 0x9]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x5}, {0x5, 0x6}, {0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x8}, {0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {}, {0x3, 0x6}, {0x3, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6dc, 0x59, 0x7, 0x0, 0x8, 0x5, 0x6, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x18, 0x48, 0x30, 0x18, 0x6, 0x16, 0x18, 0x24, 0x1, 0x5, 0x16, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x40, 0x7, 0x9727, 0x8, 0xb5d, 0x5, 0x9b1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4000, 0x40, 0x3, 0xc, 0x7, 0xc, 0xfc44]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x16, 0x4, 0x3ad6e23d3340c526, 0x12, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x9, 0x5, 0x1, 0x4, 0x1000, 0x7ae, 0xacc]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x8}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x69c, 0x2fa7, 0x9, 0xf13, 0x7ff, 0xa1c, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x12, 0x24, 0x24, 0x4, 0x3, 0x9, 0x16, 0x6, 0x30, 0x1, 0x12, 0x1b, 0x48, 0x6c, 0x18, 0x6, 0x16, 0x5, 0x1, 0x48, 0x6c, 0x1, 0x3, 0x12]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x7e]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x8}, {0x4, 0x9}, {0x2}, {0x6, 0x4}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x6}, {0x6, 0x6}, {0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {}, {0x4, 0x8}, {0x6, 0x8}, {0x1, 0x9}, {0x5}, {0x5}, {0x5, 0xa}, {0x3, 0x4}, {0x5}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x11}, {0x4, 0x4}, {}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x6}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0xa}, {}, {0x7}, {0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x7, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7ff, 0xfacf, 0x8, 0x0, 0x8, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4d6b5d7a71810825}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x6, 0x1, 0x7, 0x6, 0xdd, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) recvmsg$inet_nvme(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) 1m23.348271916s ago: executing program 5 (id=2315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000080)=""/64, 0x40}], 0x2, 0xf, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xfff7ffffffffff76}, 0x18) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 1m23.325437966s ago: executing program 33 (id=2315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000080)=""/64, 0x40}], 0x2, 0xf, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xfff7ffffffffff76}, 0x18) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 3.620141453s ago: executing program 6 (id=3225): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x21c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x4}, {0xac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x0, 0x2, 0x18, 0x9, 0x4a, 0x2, 0x3a, 0x6c, 0xc, 0x9]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x5}, {0x5, 0x6}, {0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x9}, {0x2, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x8}, {0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {}, {0x3, 0x6}, {0x3, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6dc, 0x59, 0x7, 0x0, 0x8, 0x5, 0x6, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x18, 0x48, 0x30, 0x18, 0x6, 0x16, 0x18, 0x24, 0x1, 0x5, 0x16, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x40, 0x7, 0x9727, 0x8, 0xb5d, 0x5, 0x9b1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4000, 0x40, 0x3, 0xc, 0x7, 0xc, 0xfc44]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x16, 0x4, 0x3ad6e23d3340c526, 0x12, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x9, 0x5, 0x1, 0x4, 0x1000, 0x7ae, 0xacc]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x8}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x69c, 0x2fa7, 0x9, 0xf13, 0x7ff, 0xa1c, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x12, 0x24, 0x24, 0x4, 0x3, 0x9, 0x16, 0x6, 0x30, 0x1, 0x12, 0x1b, 0x48, 0x6c, 0x18, 0x5, 0x6, 0x16, 0x5, 0x1, 0x48, 0x6c, 0x1, 0x3, 0x12]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x7e]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x8}, {0x4, 0x9}, {0x2}, {0x6, 0x4}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x6}, {0x6, 0x6}, {0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {}, {0x4, 0x8}, {0x6, 0x8}, {0x1, 0x9}, {0x5}, {0x5}, {0x5, 0xa}, {0x3, 0x4}, {0x5}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x11}, {0x4, 0x4}, {}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x6}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0xa}, {}, {0x7}, {0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x7, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4}, {}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7ff, 0xfacf, 0x8, 0x0, 0x8, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4d6b5d7a71810825}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x6, 0x1, 0x7, 0x6, 0xdd, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) truncate(&(0x7f0000000380)='./file2\x00', 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) recvmsg$inet_nvme(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 2.943999827s ago: executing program 6 (id=3231): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\'.z{', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x44011}, 0x40044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000540)={'bond0\x00', @ifru_hwaddr=@broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ff, 0x22a0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4151}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000a40)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0x20000000007}, 0x18) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002780), 0x80000, 0x0) ppoll(&(0x7f00000027c0)=[{r8, 0x2000}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r8, &(0x7f0000002880), 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 2.524572229s ago: executing program 4 (id=3235): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\'.z{', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x44011}, 0x40044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6bb3e99c40bc9f5d777510bd0180f7757295cb0d43e570dd0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000540)={'bond0\x00', @ifru_hwaddr=@broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ff, 0x22a0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4151}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000a40)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0x20000000007}, 0x18) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002780), 0x80000, 0x0) ppoll(&(0x7f00000027c0)=[{r8, 0x2000}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r8, &(0x7f0000002880), 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socket$nl_generic(0x10, 0x3, 0x10) 2.21908807s ago: executing program 4 (id=3239): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000480)}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xb) close(r3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e22"], 0x2c}}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x4b68, 0x0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x300, 0x0, 0x101}}) sendmsg$NFT_MSG_GETFLOWTABLE(r8, 0x0, 0x20000040) 2.14762779s ago: executing program 2 (id=3240): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x60400) fsopen(&(0x7f0000000000)='devtmpfs\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e03000000000000000200000000000004020000"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r6, 0x107, 0x9, 0x0, 0x0) write(r5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYRES32=r2], 0x0, 0xe165, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a300000000008004100736977001400330076657468305f746f5f68737200000000b5453617bbd01d62d1ce149fbfe1d4d668"], 0x38}}, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r9, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r9, 0x8) sendto(r9, 0x0, 0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.13242426s ago: executing program 4 (id=3241): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000480)}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xb) close(r3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e22"], 0x2c}}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x4b68, 0x0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x300, 0x0, 0x101}}) sendmsg$NFT_MSG_GETFLOWTABLE(r8, 0x0, 0x20000040) 2.103039631s ago: executing program 4 (id=3242): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x21c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x4}, {0xac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x0, 0x2, 0x18, 0x9, 0x4a, 0x2, 0x3a, 0x6c, 0xc, 0x9]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x5}, {0x5, 0x6}, {0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x9}, {0x2, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x8}, {0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {}, {0x3, 0x6}, {0x3, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6dc, 0x59, 0x7, 0x0, 0x8, 0x5, 0x6, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x18, 0x48, 0x30, 0x18, 0x6, 0x16, 0x18, 0x24, 0x1, 0x5, 0x16, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x40, 0x7, 0x9727, 0x8, 0xb5d, 0x5, 0x9b1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4000, 0x40, 0x3, 0xc, 0x7, 0xc, 0xfc44]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x16, 0x4, 0x3ad6e23d3340c526, 0x12, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x9, 0x5, 0x1, 0x4, 0x1000, 0x7ae, 0xacc]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x8}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x69c, 0x2fa7, 0x9, 0xf13, 0x7ff, 0xa1c, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x12, 0x24, 0x24, 0x4, 0x3, 0x9, 0x16, 0x6, 0x30, 0x1, 0x12, 0x1b, 0x48, 0x6c, 0x18, 0x5, 0x6, 0x16, 0x5, 0x1, 0x48, 0x6c, 0x1, 0x3, 0x12]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x7e]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x8}, {0x4, 0x9}, {0x2}, {0x6, 0x4}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x6}, {0x6, 0x6}, {0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {}, {0x4, 0x8}, {0x6, 0x8}, {0x1, 0x9}, {0x5}, {0x5}, {0x5, 0xa}, {0x3, 0x4}, {0x5}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x11}, {0x4, 0x4}, {}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x6}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0xa}, {}, {0x7}, {0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x7, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4}, {}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7ff, 0xfacf, 0x8, 0x0, 0x8, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4d6b5d7a71810825}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x6, 0x1, 0x7, 0x6, 0xdd, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) truncate(&(0x7f0000000380)='./file2\x00', 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) recvmsg$inet_nvme(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 2.028443521s ago: executing program 6 (id=3243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/50, 0x32}, {&(0x7f0000000080)=""/64, 0x40}], 0x2, 0xf, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_free\x00', r1, 0x0, 0xfff7ffffffffff76}, 0x18) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r4, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) 1.651432652s ago: executing program 2 (id=3244): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 1.624624473s ago: executing program 4 (id=3245): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d000000850000005000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0x0, 0x52e, &(0x7f0000000f00)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r3, 0xc0189436, 0x8000001ffffffd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20004800) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000008c0)="9b", 0x1}], 0x1}}], 0x2, 0x84) close(r6) r7 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r7, &(0x7f0000000940)={&(0x7f00000005c0)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x2}}, 0x10, &(0x7f0000000600)=[{&(0x7f00000006c0)="ce56951f127b49eb0e81583fe693f6007736909fa93112607641ef4ce7f37e726ba2274c30e19c604146cd27abefec9b78dd74c6f7a0740d9efc56d1b07327d08c82978691dfacb8172f811491f3561e5a8d7509a846874b674a8c0ae48873", 0x5f}, {&(0x7f0000000740)="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", 0xfd}, {&(0x7f0000000840)="a6710a50c56e2811f69a4367bf20298f199671daf14df668aa18a9a6dc98f0fad706383da266ab865af7bbf94f495f5be772f5064adabb54079d44f318cfd154374dcd682c73a79c243835d12f92c8da2df33b09", 0x54}, {&(0x7f0000001000)="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", 0x1000}], 0x4, &(0x7f0000000900)="9b6056266bd01e38eef0329692f60767bbf351d858fcb001c6b7e4d1b016049304f8c7ddbdeb5865fa92352facb4", 0x2e, 0x24000000}, 0x24000811) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xab0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r8, 0x47f9, 0x0, 0x0, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040), 0x8) 1.504259953s ago: executing program 2 (id=3247): r0 = socket$netlink(0x10, 0x3, 0x14) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 1.410926204s ago: executing program 2 (id=3248): r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x8, 0x101, 0x0, 0x0, {0xb, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4045) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup=r0, r3, 0x72e770955bf69d9f, 0x5, r0, @void, @value=r0}, 0x20) r4 = syz_usb_connect(0x2, 0x808, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0xcd, 0xa1, 0x49, 0x8, 0x19d2, 0x159, 0x3672, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7f6, 0x4, 0x2, 0x7f, 0x0, 0x5, [{{0x9, 0x4, 0x64, 0x62, 0x1, 0xff, 0xff, 0xff, 0x94, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "4e916a5c4a0a"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x4, 0x74}, {0x6, 0x24, 0x1a, 0x1, 0x4}}], [{{0x9, 0x5, 0xd, 0x0, 0x0, 0xb3, 0x4, 0xa, [@generic={0xe8, 0x31, "7df7c5e62c67676291a6dc7829755a9995986cb4889f47cdce92453e2d8a761bac77a5477fb948131eef609654d81355f00fa7bd4a49731c8eb6e5bfb3f8539be4459ad3043445427b9070e793fc2cf071383fc3aeb2b98bbe270985466ef396dd00c4d375fbd4280d99daeeb45af2c2b6199d6e8834f498ea834deefed30f5f2cbc8d731ea047f670a1553389dc71ccd83ab5ff2b6de2378c02da24d990e3ee8a59be4bc65125b67be8d3cf7e223556bde601e7f38b10670f59059ce57b504a1f4adf29233067baf9e38c043e7c5ac97511f748e096789ba71975f399157a38b83dc20e8789"}]}}]}}, {{0x9, 0x4, 0xd9, 0x8, 0x2, 0xff, 0x3, 0xd, 0x3, [@hid_hid={0x9, 0x21, 0xe, 0x7, 0x1, {0x22, 0x598}}], [{{0x9, 0x5, 0x4, 0x4, 0x200, 0xaf, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x313}, @generic={0x2e, 0xd, "4b61c21e07b64196a24fa6dd51e182d202a0d7971916f8a7e34ccaaec282ab4e673211fe18c6ff6802246614"}]}}, {{0x9, 0x5, 0x3, 0x14, 0x40, 0xfe, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0xc0}]}}]}}, {{0x9, 0x4, 0x4b, 0xb, 0xb, 0xff, 0x5d, 0x81, 0x2, [@hid_hid={0x9, 0x21, 0xfffa, 0x3, 0x1, {0x22, 0x485}}, @hid_hid={0x9, 0x21, 0x5, 0xc, 0x1, {0x22, 0x455}}], [{{0x9, 0x5, 0x80, 0x1, 0x20, 0x80, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xa, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x9, 0x9, 0x0, [@generic={0x21, 0x21, "b9c4cd63eaf7420d39bfc1e23abf9243cbf58c15996f8dedf057d1848f6fd5"}, @generic={0xed, 0x5, "dd718a3aab20a800c7aa6bcd4e9eafd0f3f95915f5424af385c8862fe8dd0da5e5842d782629f1b4bd93120632c07f030870981e5226d7d96f74922ad4c25a77baa273f43a515ff26c499f5cf9dff70fe784adea0b5d0de9c3fc2a1569e037f4eb3c995286bac779e93bbef4c59225078db85997824657eec11c46a27f1a0c49ede078f64327c1e08cdecc4f565690bec4e214683bb6216ad2d3e525b51f142a3a10094b2ec4788a8d39c8d660668f67de8a3ea14e603fa659051f904e81fe4ae41dfabe94946f6372c0a5d03712bd5a099f6681873475fd9cbfe4a409b7bb96504696c43122c414849fd3"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x0, 0xa3, 0xb8, [@generic={0xe2, 0xb, "d014b316dfce0836ee718ab3d3c44a549dd51026e05a511bf155c7ae70898a8bd1b70e25257c241e42a18371f185109ec4fb045d24be4c65bee3355ecaac644edafaa7ccc1cd0eea30e6864be432233500ac0ddfbbec57881bc0d286e619ecd3b7b5581e4bfa86ce294622d33f2529fa8dda7eee6229a703828e9c1cd113c7ca8882fcb7e99ee26920e4f79aab12772607ce09c472880eb1e9ddf59e5e88669a56a0fe3c6da8d7440ea848137ac1ea8e7fbe4b9e954e018cbf037cef2477afb2927d76e4cccbf6370666f217db730caee1ed55feafb9a4646d4c52dec67bf1aa"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xb, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5b52}, @generic={0x1b, 0xf, "ebe0fdec96b0b6d03feba24b1b5d525f3d74ccf7577ed342a8"}]}}, {{0x9, 0x5, 0x444cc1d77421e68d, 0x3, 0x10, 0xb3, 0x8, 0xc, [@generic={0xa2, 0x6, "c196122c13c1beeec11f88388f1dde8222d984ea66731013b26090786019fc2830abbf76e8f482f06923e75ee1d66a073cb92cd6977ccc2090f841cbb7baa52ae6b462e9ec1ce69e1b6bcf88d4f2471040e40f7c1081aab63d42e06e4ec3099c64d1a7a7b1f5d61724fb7ff17f50a34a6c1571543389ed5af3c4adf2ace3e60c402b91b9919ceeff17943ad8972ab9ec112e91b367c1b401cf40ae79d5925f41"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x2, 0x6, 0x1c, [@generic={0xe8, 0x21, "43a9f33b375c83ae25e8afbd39b25e3f544dda0256ab62e0ff7f5b592434a69ed56e09294bd62b06a59170a26ffcff76a109ca85051579a437528fe6dd3063a3f92a142d7d461edee20e24bf75d19696ee420c7e4a032b528b38b5036d214fa9334214f99f07e9c60c9184d3543c50cac7b2d0a779e29c0d8135e6a3b4c7618da2c8fa1b419d1b63fdde3929ae39ccdefc3f628bd425e7ce5f914fd73f3709f31a9c92c8ca513b1f35c7bc979e43d0b94b51344a8063e12acd273974330ebfdc4d525915476bd0793048b5c340c0d2bd9d9d4c4111d4b07c152b119e0b7dc464de9134f3877d"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x70, 0x2, 0x90, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x8000}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x4, 0xf9, 0x6, [@generic={0xde, 0xe, "53f1f67790ce0246b71d1c05ee1487668cbabbead53a8cf8011dda6d521493e7cb77ebcce0dc26fb388143eaee12394e4f96879adc5ce58f7e032fe90cc22b14680ff5c82042f3d464d4509a1cbfa67c3e1b2206c970ee4ddb0ec9453e163b8abc7fe45eb653144040621f68d5f0079904837e11b6b294dc2797849c7006f75f3135c5cb16ea0dd78f9fdd48b1409a69562c7b4c89b2f36c0083a0400b60a6e9a6e37b582d0a0128c307fdb5e42f357e609cee1d4e44da1f96f738c00255e2a2c6aee95a604f762ac591f454bbfc92c65466c02d8e6941725dcfd363"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x3}]}}, {{0x9, 0x5, 0x0, 0x4, 0x0, 0x2, 0x7, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x4991}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xb, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}]}}]}}, {{0x9, 0x4, 0x7e, 0x4, 0x2, 0x70, 0x7, 0x39, 0x5, [@uac_as={[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x80, 0x5, 0xff, "ea7ce141"}]}], [{{0x9, 0x5, 0x6, 0x8, 0x8, 0x8, 0x6, 0x5, [@generic={0x73, 0x5, "6e42a61511d93224dff176432c8233308c710081372e5c000bf2add1564290ffe4e09c8f62b9a06924be9e8b4251c73a9e9b115a86b0542b7a20fda3dcb7701d9c52fbc2077363ee431fc1d966e0159d3c111df6feda6ce68978446f620501fff9e58742f35a3006e7f93a692879e0118a"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x9, 0x9, 0x8, [@generic={0x23, 0x1, "9779de7f47cf40a1e63282f9dff7cc1b325ffd7ab4b24cbc688e02a57afa64e438"}, @generic={0x89, 0x14, "55178037966389f4d1f397ef8b493fb72899f62a7858ea1910b7b06e12a0b3bcf8a8faf2eb692dfebc22a37f35d0075910fb834eac72d679e70310e803228b0997d198ca74efa18f71534915cd1f82417e6706ad7069a369b02d05d37198d2a76add12d75938fcaffa1a498db4c90fd10ec3568f87720378aad848fffba1f1f3fc4c5e3d85da70"}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x250, 0x9, 0x82, 0x9, 0x8, 0x2}, 0xe0, &(0x7f0000000c40)={0x5, 0xf, 0xe0, 0x3, [@ptm_cap={0x3}, @generic={0xc4, 0x10, 0x4, "ab8aefef0c8e992aff9eb89955c11b4c0daabd9c817d47af0c5a8a47601a5437679192df289b23e405c58d5565ffee8107986d22bed3f2a1695cb5d954b374e5dc57816518544456ab7ff93464b113b2c5d7bb0e39507a2cdbebf6f0308d461a7e302955269aeb47428690cc6282d584801eb3b0d2e0bbf100b0eaced94fad5d62ff7b72345263397ad99edb1175ec305210447695decadd1c86d995279c2c7e0a55fa6771f106be22796bc5b143b5def05ae744a4074006d1de5e12b46c7ddff2"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "37f40774341d0627b7a6186d6067bb7f"}]}, 0xa, [{0xe1, &(0x7f0000000d40)=@string={0xe1, 0x3, "847ff43c5a01f23e68da4f763b161b86be129c69e4a6e3b77307fe87f25538daa86bd05fa439a9124de008ec4c7b25ab5b1ba88b420851a09e628dfbb9169a812c2248f9ad9f74458a784014bfa589b73d69908cc4b0de163e35cb754e9f6816fae7aaf7ae2d6343672864bf793ea75d5d4b41283a081f6ef1cd9f52785fcf0a93b4f98974989c12a6b96a3dbf702f2d4c0029094df3b51da74000447eae3e3e1383c32daa36c5f32b3ed873f5c0d777614e47dcdf43cdb850fa11353f9b6abe23e900d0c0d495f37713b151ed11b63d35bbc40d0725adff661c6c572edf42"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x427}}, {0xab, &(0x7f0000000e80)=@string={0xab, 0x3, "02542d0b858be665e303f6431c0e187062efcc69269697e588671bf5d62959ecc86d69f022b8fbc5e28a5365d52ca85d1c7bb2a8ae38c615a0089f5133f478f17ac99685faf5cee2b3f16bcb00952da55fab1d8ec7bdeff34da4801ae49196d9fb7786a8cd4118e645dc0c496ab4d8f293f4c1a95def210b54c26d9ae0186944aba2688322e6f70cacbcf0d2463bc9ef20d954e14248e252e84c3a4db7d3331f0da966f51493acdcb4"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0xf0ca}}, {0xb5, &(0x7f0000001000)=@string={0xb5, 0x3, "d72e50e1172d276aa5b4cfe3b46030249a7838492e75e6534e3095dff83a203b0170de6d03e1de342b346d5e10eaa8f26df086f6e9cfd90464c291b444acfed09e6101ed22065b32e848645e752b967f48924a01cadede12c6e9f6cdddb1d3a1077672a103908c4f36061bddf1c457dcebcbd6874064ec6416b670884d445873fb49d0d9dc4bf178d5c0f1f2ebefd9d92684a755e311953bf20df9745b273351f2fd957b309b3ae3f69d653a19664a5df241cd"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x1001}}]}) syz_usb_disconnect(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r3) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000001440)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x134, r6, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x7c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "d79ca7d5b65de1e4"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "1842784555e1efe3"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xa}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "9d8669947e8a23f3"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "eaf8e905db51e743"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x401}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x7, 0x2}, {}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2f2, 0x9, 0xfffb, 0x80, 0x8, 0x1, 0x2, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x0, 0x5, 0x545b, 0x7b0a, 0x7f, 0x4]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x1}, {0x7, 0x7}, {0x4, 0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x3}, {0x2, 0x9}, {0x5}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0xfc, 0x931, 0x2, 0x8, 0x2]}}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0xc1}, 0x0) io_setup(0x800, &(0x7f0000001480)=0x0) r8 = eventfd2(0xde, 0x40001) io_submit(r7, 0x7, &(0x7f0000001980)=[&(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x80, r5, &(0x7f00000014c0)="6b29a6546587494698f3539540a28308e404f879de2b169d86d0133fd931b0c2afa779ebccce6a1f6f666d4cba567658cdf8b4ff31e9b436bf0584cdb3f1bc024a179da83d59c9543208e6c5d8f0f60c0504b064002e15f51edd98468c520fe16cab40a7106d7eede4c4a0ada7b6fa7d4e2efcf5ab", 0x75, 0xc1, 0x0, 0x1, r3}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x3, 0x69f4, r2, &(0x7f0000001580)="f55f2f23c278fbbd1fe7fcfd102baccbcf15", 0x12, 0x1, 0x0, 0x1, r0}, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, &(0x7f0000001600)="3e2fcf1a2194910a965b0b0571", 0xd, 0xe41, 0x0, 0x5, r3}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x2, 0x5, r2, &(0x7f0000001680)="fdbef3081977e72ddfd296bd311741ebcb826e592b64874878c318baf6652a690e1698d4656f015fcb168e021420315c42be72", 0x33, 0x1, 0x0, 0x1, r8}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x3, 0x1b, r1, &(0x7f0000001700)="9635e44bd4d8c388ddd55bd5851d069f69696517dde9ff8b1536c2604be2ae8fbd99f142537bf24e083ce5d59cc7347e1de6a79ced8eee85f9db58c4288e880d6747231d587ecb322b185f7b64cd", 0x4e, 0x7}, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0xffff, r2, &(0x7f00000017c0), 0x0, 0x7, 0x0, 0x1, r0}, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x1, 0x4, r5, &(0x7f0000001840)="2a1af19db077fd96f4cd7adf951c54c3dc28f8763e52bbb6cbd1a849f5ad98cff5aac427b8cc46b7707710fb0f7e03aa9401d16724368e9f7aee6888149a2c3155e933bf59ca201dca62f12326bf43998a8dcf045728241b0943aa0532b82b5408873352a7b5a721c86867e61bfb3b3f80e19cecff97afa4b8a8a478a0166a113d4052372e63728101e2a6298edd6be3de905f756b1b8d4dffb92a2be13ee4283ae1cd7b5ded932303bb872ac99a3c75dc351763f5cbea849a97973189a942e846c0d105e1ba6f508eba3f716df4bb23e4ab76636c09b711f1d86955bf301a73e6a39b3481dedba1a3625d296a3d7ea7c1eefe8f6ece931a2e", 0xf9, 0x1, 0x0, 0x2, r0}]) syz_usb_ep_read(r4, 0x3, 0x3a, &(0x7f00000019c0)=""/58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001ac0)={'gre0\x00', &(0x7f0000001a40)={'syztnl1\x00', 0x0, 0x40, 0x700, 0x101, 0x6, {{0x16, 0x4, 0x0, 0x8, 0x58, 0x66, 0x0, 0xff, 0x2f, 0x0, @rand_addr=0x64010100, @multicast2, {[@timestamp={0x44, 0x18, 0x3b, 0x0, 0x9, [0x80, 0x1, 0x5, 0x7, 0x0]}, @end, @noop, @timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x2, [{@private=0xa010100, 0x100000}]}, @rr={0x7, 0x1b, 0xef, [@dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @multicast2, @multicast1, @broadcast]}]}}}}}) sendmsg$nl_xfrm(r3, &(0x7f0000001f00)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001b00)=@newae={0x388, 0x1e, 0x800, 0x70bd2d, 0x25dfdbfe, {{@in=@multicast2, 0x4d3, 0xa, 0x32}, @in6=@empty, 0x1000, 0x34ff}, [@lifetime_val={0x24, 0x9, {0x5, 0x7, 0x1f, 0x5}}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x2}}, @mark={0xc, 0x15, {0x35075a, 0xe}}, @address_filter={0x28, 0x1a, {@in=@empty, @in6=@remote, 0x2, 0x1, 0x48}}, @policy={0xac, 0x7, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@mcast2, 0x4e24, 0x8, 0x4e21, 0x5, 0xa, 0xa0, 0x80, 0x33, r9}, {0x6, 0x7b6f, 0x8, 0x9, 0x9, 0xfffffffffffffc01, 0x7ff, 0x800}, {0x2, 0x4cb, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, @srcaddr={0x14, 0xd, @in=@multicast1}, @algo_comp={0x136, 0x3, {{'deflate\x00'}, 0x770, "b2b2a2e360f8ba9463c488a5235e156d5ac3b263be5e10f36343f3acd0491735a172634baf031385fe738a76cb321cf5b9e51f529ebcab117ae5749c0d5f9e35d2d885776f6bcb8ea5ceb888740e0dd6d14ca6e3d0caf5985ef9bf33c05c88ee8d2a4e108a730d2069d4552d2a9805fe4f9260dad99a3172e1b913cff45e87d9901e21f2e1d2e139774ed999d469ada7a9fcf0fc4659304ff8ffc564ca4899645d4c47a5381bb79cb3ee706589ef73856f6262967174c074e565daa686b648419e4d4d02ce2eca42bd97936926b811f5332a5353c7f04aef94d653f5ca0d2aef53870937398bacb18b55471c4cb0"}}, @algo_auth_trunc={0xcb, 0x14, {{'blake2b-384-generic\x00'}, 0x3f8, 0x60, "7cd060b103bdbfc7d7e49e0ec589f17ee06b8861349ce9f922c5176b32691faa92994a178514ca3b9a60496417f8536ceee0837bf51801043dc28d94c748692931c742ea0e606fa52afa2ed7b3197e8d6f8e6457cdfa028bbdee1a3435c3d8ab575b94152b87af56010a92c4db4d30c46a0b521d8fee0c4268399e734091e7"}}]}, 0x388}, 0x1, 0x0, 0x0, 0x20000800}, 0x44010) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000001f80), r5) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r10, 0x2, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002080), 0x40000, 0x0) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$inet(r11, &(0x7f0000002340)={&(0x7f00000020c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000021c0)=[{&(0x7f0000002100)="d0db4c9b56c6a2297dd97585be7b48f29b89553d0d48e588ca5b0cbf54299942d150c6305b02e5f9d6fff6f0207e054ebc0389644f98d306e72cbbadb42ea04e12efc9269c33fc7ff32b98e1720965c9f0d5cfb073b817db9b35c5907fa6b4e9a287c6905a970dce3152a609f99becd09f8dfbd984d412757467546d0e94e125a504", 0x82}], 0x1, &(0x7f0000002200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @remote, @local}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x21}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x27, 0x2c, [@dev={0xac, 0x14, 0x14, 0x42}, @loopback, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0x2b}, @dev={0xac, 0x14, 0x14, 0x30}, @rand_addr=0x64010101, @multicast2, @empty]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}], 0x120}, 0x0) r12 = openat$random(0xffffffffffffff9c, &(0x7f0000002380), 0x200, 0x0) fcntl$F_SET_FILE_RW_HINT(r12, 0x40e, &(0x7f00000023c0)) syz_usb_connect(0xe2ea44cf5c7afc86, 0xc80, &(0x7f0000002400)={{0x12, 0x1, 0x250, 0xa7, 0xa7, 0xfc, 0x20, 0x7ca, 0xa800, 0x9ffe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6e, 0x4, 0xc8, 0x8, 0x50, 0xe, [{{0x9, 0x4, 0x17, 0x0, 0x10, 0x30, 0x52, 0x23, 0xb, [@cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "d0cb0fd0"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x4, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x9, 0xf7, 0x3}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xfc}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0xa, 0x3, 0x5}, @acm={0x4, 0x24, 0x2, 0x8}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x7, 0x9, 0x53, 0x7f, 0x6}, @dmm={0x7, 0x24, 0x14, 0x7, 0xf}]}, @uac_control={{0xa, 0x24, 0x1, 0x9, 0xf2}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x0, 0x6, 0x6, 0x1, 0x2d, 0x6}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x101, 0x1, 0x1, 0x8}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0xd9}]}], [{{0x9, 0x5, 0xb, 0x2, 0x8, 0x9, 0x6, 0x4, [@generic={0x46, 0x23, "d3c3b945d8c97f1520094af868c78b6e19e6a3f2a58d1a6a5a929a0de9eda0205d99b9bba5719850205bcf6c42df13bcaeacf7b9b7b0641a4ccdf533a1fc9948b59ec706"}, @generic={0xa4, 0x11, "208d8f05b9c4e7cc4763647f2e5212d49299dadfad00982f9ede9d6dfa65e6e3bf26ae9719c37307ed3049977a17efe4131aa27d4a29ec65699929c2f7532487441714ee87479171cd7030b2ae8b0ef7c895a3b5429a7c024742358d15b88be8b615594f2973fde3fe27c5d6bec879553e1746b5914ae7e74c55cdbc166116414f54a3acb3eb9854d7cd3d139948afd62d3f8e3526a5676b003b897872c8bef5ba7c"}]}}, {{0x9, 0x5, 0x2745ddfcef9feab5, 0x0, 0x8, 0x2, 0x3, 0x4}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x9, 0xb, 0x5, [@generic={0xdb, 0x6, "619e9fc0bd6c2f2d4725a055ef8ee4efcdbf6367e459e8d6ce4b5174d739a98d7270ce9c624e6e1951ec811036cdd26f7acdb5d5d7ee8af7de492175173367c8f41eb6e58fffcaf7361db769c6894ca63411c5cc456a1d1ca65b35d9b2da25dcdd21fd45d644590feb9170ed880835e2a267f13c647ad6cf038ace5744663ed6a88cf53c585143ebd3424e70241466451dd138d80634080732941f5a43fdff80e54133a8eb7e6421fb9fa5167cce7fa912a353661c74569cd6956abf9b5678d4a30ed21ab91be9756a2b585271afaef54d9afba85ac7885896"}]}}, {{0x9, 0x5, 0x0, 0xc, 0x20, 0x60, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x8}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x0, 0x7, 0x5}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x2, 0x80, 0x10, [@generic={0x6b, 0x30, "978e8be32116606d9474fca8fc7fc2f581421e3fbe9b4bee33d673b850aa3b25cf1b0651db1a7220ebdd1f7a4c28dcf7e6701ff77c0f20c569f1bd15ef64f85cd62535a851866538cfd87421a33056ba6755a3bbe80da4069a714ae187cb6ca476d0fbb56678b26e8e"}, @generic={0xb1, 0x4, "a3fd80857ed3c6c7cbe75b992aa2a1b5db60000f672192a2da6674f0098568863ff2819adea902210e7f33b5fa37194f889362c24c45ce7e252c6931cc51159e2e93b64835cd44c137eaa76d2100aa9debbf3b1b35d28fbb5de75d5f959dfa7404a3efc1da4e825790de4b4bde27a0759fc9c33519e1a853307dde9ed5b2dc76dfd63372c9e56028d2e3d39d8c1a8bde1b81e5fca5350d9870a362466b23c93598cc70cd161d07bcc006663e3cad6f"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0xfa, 0x3, 0x1}}, {{0x9, 0x5, 0x1, 0x10, 0x20, 0x0, 0x9, 0xb}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x5, 0xd7, 0x5}}, {{0x9, 0x5, 0x2, 0x8, 0x3ff, 0x2, 0x0, 0x7f, [@generic={0x8, 0xc, "d457ac3db7fd"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x8}]}}, {{0x9, 0x5, 0x6, 0x10, 0x640, 0xf0, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xc, 0xfffb}, @generic={0x5d, 0x21, "fce77b1acbbfdc5ffc7bbdaea0c1bc2211c9cc23b3a69f9fffba66ab6da8ebaf07b7f624055fc39a97fa3a62d3065d76dbbc45fb00a2dff8a1782d40128c7bb727a06969b163872195cd5947da264fc7323067a313fbe4dfed76eb"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x9, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0x80, 0xb02aceb62952874d, 0x40, 0x15, 0x9, 0x7, [@generic={0xc9, 0x30, "e85406961c894b8269ef65977156768f7320621c3537f881caeaa74676ee770f46bb54ddd66f3b63c7f257a2e6eca1b91e90a5b1b85a76dd514113badb5a1c30f746890afc8ac2bb733dbe33c0e949e508c92d470fc33ff050d859fe9a6775de8a476cdb67560b94abea22ecc9b3c0bdaaf8f790d75d480b01669d97947e5733bd43ed5754e1882c457b5cba4a11059405ff34a30c23510525faa5fa4d043ccec7b28b0306bc898db0dec96434aef465f4ee0d28a3d30b1ecd13a3533ef2cbcb677610fa67702c"}, @generic={0xe7, 0x10, "d7af272b7accf1e30b404edb131e54df875808f7d4ba3cc5f8f2d3010ab91a25336b14c3129b899527203e9d0d50b297de089882e0298850c1367885db4d784e1ed78b9bd21b28a02739f3eff1058cb1650b265c60de9a19551047d04fc0e95b5557fc95971a1c64575a9b4a04e09de9022fda7d695e4c9517d560ac2303b1b590b026283451ce9fb99dce28d81517a72eca49dcb78bed90a913177b80aeddc5d5993e7b3a62efbdfcdce7af7ceca86bdd71532be88075bc0884dd98f592b6f66a07cd085dca88c163282cf676860aed649180bde244cedf7416efc6c8aef3a4dbcd821936"}]}}, {{0x9, 0x5, 0x5, 0x1a, 0x20, 0x2, 0x4, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0x7ff}, @generic={0x96, 0x11, "ae6ab1fa2894cde9218a39fd5d5f871b5a14a7b1c75183aceec0e185399275dc4841001e8aa82ec77d2b9e7510736b8b936c764645ee88c3985ad1d7d46c087da094970b14d3130bae1dc1c8f52c89bec25b81d5ee79f2f977854689ca247cabfff59ee5b7bd45bd9c5109a80366992f8ca71b4e2c6512ef836e5b94ba5df16f26ed0c91ee1c51aa9d5284ef348995698d61896d"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x20, 0x6, 0xc5, 0x80, [@generic={0x85, 0x8, "233a5e818c7b445423b7559fa12a511c87f38000ce44b432e89720ee1cac148f065938f831961f315f6a481424b89a76f4a1208d95a6f866a4e26b038463e8007100d2fbe609ba1c9e8e1406505b135f9f085137a0f440574da0b19d79e6267c1dc1c2b8f4d8d5ae412f3b345eaf20f0274a047420aa886bec502492c06b1bc47f3d19"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0xfe01}]}}, {{0x9, 0x5, 0x4, 0x0, 0x39f, 0x6, 0x2c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0x5}]}}]}}, {{0x9, 0x4, 0xad, 0x8, 0x3, 0x33, 0xed, 0x9b, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x5be, 0x7}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x1ff, 0x2, 0x1, 0xfa}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x203, 0x2, 0x1, 0xaf6b, 0x4, 0x3}]}], [{{0x9, 0x5, 0xc, 0x8, 0x521abf7e56e6e929, 0x10, 0x6, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x42, 0xdb}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0xfff7}]}}, {{0x9, 0x5, 0xe, 0x10, 0x200, 0x5, 0xfa, 0x6}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xff, 0x7, 0xc}}]}}, {{0x9, 0x4, 0xa6, 0x0, 0x4, 0xff, 0xff, 0xff, 0x81, [], [{{0x9, 0x5, 0xa, 0x10, 0x200, 0x1b, 0x9, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x40, 0x82}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x7}]}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x0, 0xa0, 0x5}}, {{0x9, 0x5, 0xf, 0x8, 0x200, 0x9, 0xea, 0x4, [@generic={0xf5, 0x3, "6506d9131da8ecdf7104cec8479295045fd201945bb193dab0ed95ba4466cb101c4d851f67a7d645992f8e3552ff60c8faa947a655af95f99b92666f4da2904ce6e3127dcca0e8ecf5d679773d05d07e27734cfc6704fdcd1a13ee24d05466e96ded3186e332da2720865c47d0fcde06e88abf02c4eb1b56d77512d8f8d86c537f8a32358f2b936e0d55804bd833bbc8d024a5c8004dcdf2edbf4f8057c41272dda69803695fb9e7cda7d8aa8ce08ab08c88dad586d0f32864f872e9c96fb0a7342597c4942b3e700ab1e0c15e2f5370efa18e2f9bef5f3bf9605ad7c8f704f0068f8a4519e1a42215a0715ee726d7a62a62ee"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3b, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x7, 0x8, 0x6}}]}}, {{0x9, 0x4, 0x93, 0x4, 0xc, 0xff, 0xff, 0xff, 0xe9, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "91c81a6f1e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0x5, 0xc4d4, 0x9f}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x3, 0x3, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0x23, 0x4, 0x6, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x8, 0x5, 0xe, 0x2, 0x8, 0x82}, @acm={0x4, 0x24, 0x2, 0xbd89b15109db5add}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x6}]}], [{{0x9, 0x5, 0x3, 0x0, 0x240, 0x5, 0xc0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0xd}]}}, {{0x9, 0x5, 0x3, 0x3, 0x20, 0xff, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x80}]}}, {{0x9, 0x5, 0x2, 0x1, 0x3ff, 0x70, 0xbc, 0x0, [@generic={0xa9, 0x31, "e5aa6d7e39056efcfd09869759ee13dcde61630d020e8d5f7ec0966a259cc12d96aa9898c797f7709723fe96b60ffa4b4e2a32b0bb45b7b03f50bb2a4e3e7506a66373d318f309753811c53096ad7e3501af2c79c89d1e65330d7c6c20777c5ebe98b50e4d97c8797c9be72626e02dc54f0bff5045f06fffa0336c259a3224c9ec2d7a224a16729a1a4a32c5a562b2d035b80564d3281bb1850a579598c4f2f3427b9b6d4e9a1b"}, @generic={0x8, 0x24, "444f65694aad"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x64, 0x81, 0xef}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x7, 0x7, 0x52, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x48, 0x15, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4}]}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0xc3, 0x7, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0xf7, 0x7, 0x3}}, {{0x9, 0x5, 0x4, 0x4, 0x8, 0x3, 0x3, 0x0, [@generic={0xa2, 0x2, "91c4b74d040e65d8080b18e322a488566ceec0eec722c7311d200d96ab277bbebada17f76332c810ee9932e774d1952def432afcf07a387fc221f6afce680f3f80ddde9ec9d2b15be5927b3060ec59192ff26781d0007ff25c1e35f221969b862e8629f33bcc516e7be4d1293806fdd0900a965fe1c67b02f1ce852d92d0a0e94db91f320d53ee973e67c003b5b9d6ad09d8c3f1e9de5f584c6f87800eb89497"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0xfff7}]}}, {{0x9, 0x5, 0xc, 0x3, 0x166b73b013651c6b, 0x8, 0xf2, 0xe3, [@generic={0x97, 0x3, "e3f0d6210cf5d8ef9874a075c213412c052fd3d5f6ced3357bcf314be72fe6b179f0f424c1bdf624871bea86997b0f074e97803b9406e95a5011f602a753a479677d3df6fa9eff3a949e83671797866bbac025f95edd91174f916b5ac52045162fc81dad079d0192e04ea1477774d55cbdf80f2295231b61d768be42b984e8809aee467189e6f9add3817689db22bc78ef83336302"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x200, 0x0, 0xa, 0x80}}, {{0x9, 0x5, 0x5, 0x1, 0x8, 0x8, 0x3, 0x99, [@generic={0xc0, 0x31, "7676c553897e86f9e3e5a3deaf5f770b21a1cdbe2861648c7338f3cc7e847520eca5c6d3edbc711dc4d413d3a928a247bf43ab4e3c07f03464cc466e4810f9afc66d2bf03b61cd2d2174adee8436c4a70ad9d56bf04368fe0ccf9805e93a0c0086e0f7b4bd6ce0ba45b5dc5283daa74f2415eafd880f0d97e8c31092ad45128ba8f357c5cf9015c0606fbd2e25d18c6ec6554e1f98b86f8f71677fbacb95b264511aee43c048070bb45adb6965e6ce974bc59ccba33e769cde77a6e874f6"}]}}]}}]}}]}}, &(0x7f0000003740)={0xa, &(0x7f0000003080)={0xa, 0x6, 0x250, 0x2, 0x1, 0x9, 0x40, 0x8}, 0x42, &(0x7f00000030c0)={0x5, 0xf, 0x42, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0xa, 0x3, 0x200, 0xf000, 0x5, [0xc0, 0x0, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x68, "024ed92c5725d9d2720c5f5466ca89a7"}, @ext_cap={0x7, 0x10, 0x2, 0x14, 0x9, 0x0, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8, 0x40, 0x90a}]}, 0xa, [{0xd6, &(0x7f0000003140)=@string={0xd6, 0x3, "a9074dbad59ee9205df5a2660b8e34a439fe571d739ead07c80f8cdc314c678b06d6b61b4cdf60223ddb40849c119db42c7a5be876eaef3e0449e134713bddb13b87f85d603e2e67eb1248115dceaff33cc559f573025bb1306fb4509aa094277fd94df4abef3b7ad65f76b9bdab29007e2d049ed6aa4abeeb74a99bb172a7950b64f0efd2ae279543c09a94a90557607671e0aa2a61a77c19ec6234cccb16a9affdbb1ad89cb38755129886c41600a9df91a34e1ee2b557a398fd2589ef8746fd7c56968718df75663704e0ec6a4e78d8263807"}}, {0x4c, &(0x7f0000003240)=@string={0x4c, 0x3, "7c6bfa50907b08cb3abf5318014dfbc7f548c5f7500c868c8e374c10a28c868ff969aeb330159fecfcd66f813fee49cdd4de9395e5d42ffbba00fd8142c9da5bbec2cf887f3c23296fc2"}}, {0xf2, &(0x7f00000032c0)=@string={0xf2, 0x3, "f70c788ae800e56d7541e2b7a12cd715e0a9bbfaca51eeef370622ab0c8bd4edc61356791c344c705f809983055396f3367b280871cc8cde180e51c7bbc8517a49e8df43c101204ff2148bb145c6de7f3a1f66816e1786926664fb9be99b4616622aeb46792819900a01ac9896cede79b85abf8bb285f28b4d111ec3c0c5624e13bb7e66c8606aa1565d313780f6b51aeeec39209464bcc5ef3badc9b05c343bbbcdc189d371286ac06372e201a46c1cdc98de33fbc277da865a4fcaefa58c9e2ae2f8c2833f0c7ec8411639500828484cc0f7969f24a8325f5e0143ab64085710378d88d550c91a5c7485d103b10a19"}}, {0x4, &(0x7f00000033c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000003400)=@lang_id={0x4, 0x3, 0x801}}, {0xbe, &(0x7f0000003440)=@string={0xbe, 0x3, "5d2b6da6b19b176b7166217f65ec06fc309090a3a20def2fa164e07d54ce140c729817fc9694c2235fc81dee071ca2db25446f06dde6f677ac3a6e22ef74f3e8d8e23397a671c5dc6f2bc56568cf198ad5c51090298d2725a930d791a5e81b5b7ba403920bcbb30dc24d7286d9d94a5f445e5c8257da5417025e0dd7c435c98c016c1c5a61792e50a70691c61c7692bec70c18075c87ea7aa351dc27bc708c7964a6f6cbbe643bf3f4d98373fb1b20af646872fc7b0734ceb0534491"}}, {0x4, &(0x7f0000003500)=@lang_id={0x4, 0x3, 0x827}}, {0xb8, &(0x7f0000003540)=@string={0xb8, 0x3, "4b66057a2c9621a58a8d17c58d9ae9bc7c835beed604907d5ae546bcac9fce88c303ad202660bbacf00d5c16785c97c696b30a0deae2277150aaa25cd197b4e0487c9dd91196695c452b577cfd22b967522bc57f22cc61b4fb45f688e1b0299a7e66ed74830ada5d0e76204b47113580beface4a5cdc51ea77b9b8d955da0de1b078a9bcb0eccad0b2aba86ab2d3c99a359f6e5312d981c725025fae10769702680860d20469bac9c416756e5581fb02b9306e59fe5b"}}, {0x4, &(0x7f0000003600)=@lang_id={0x4, 0x3, 0x400a}}, {0xeb, &(0x7f0000003640)=@string={0xeb, 0x3, "b18664606db86c45b409dde9e740913da16ec25a1796bf7b9d0bcd1a27ac7aff055597a2053cababe0e5140e5251cb9fee8fc21fba117e4a9babe29b160c12357b48e91370a1f20a9d03de0d2bdd71ff6a29c5408ee4356108f3df25f83b3f19aebbdce48b1e7e699406da206964bec371cd5e7c5b9b7679b1973088a0c7572a09960bb157ff04092fde9d1f48713b3b98468d7e9d34933f3deddbbb0aa182a8686516884a14ad74f3db95ad89e289f880aa99d88c61ea949cfff59c102b92f544cbd2fb67f6f6ace72001165dfd51783e469187bbb4892dde184f1c4eeb350c9cc0edb8ffdf7ef8b6"}}]}) fsync(r11) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000003800), 0x4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000003900)={&(0x7f0000003840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x30, r10, 0x100, 0x70bd28, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) capset(&(0x7f0000003940)={0x19980330}, &(0x7f0000003980)={0xb, 0xad, 0x10001, 0x9, 0x7, 0x7}) 1.390745134s ago: executing program 1 (id=3249): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\'.z{', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x44011}, 0x40044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6bb3e99c40bc9f5d777510bd0180f7757295cb0d43e570dd0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000540)={'bond0\x00', @ifru_hwaddr=@broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ff, 0x22a0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4151}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000a40)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0x20000000007}, 0x18) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002780), 0x80000, 0x0) ppoll(&(0x7f00000027c0)=[{r8, 0x2000}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r8, &(0x7f0000002880), 0x8) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) socket$nl_generic(0x10, 0x3, 0x10) 1.327063004s ago: executing program 0 (id=3250): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) setgid(0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x8, 0x3, 0x4d0, 0x340, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4, 0x800000}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x588) r4 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$selinux_context(r4, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x202000, 0x0) mq_timedreceive(r5, &(0x7f0000000300)=""/222, 0xde, 0x5f, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000032db100000018", @ANYRES32, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat6\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', &(0x7f0000000640), 0x100) 1.303267264s ago: executing program 0 (id=3251): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$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") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x214, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x1f4, 0x11d, 0x0, 0x1, [{0x4}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x0, 0x2, 0x18, 0x9, 0x4a, 0x2, 0x3a, 0x6c, 0xc, 0x9]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x5}, {0x5, 0x6}, {0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x9}, {0x2, 0x5}, {0x6, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x8}, {0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {}, {0x3, 0x6}, {0x3, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6dc, 0x59, 0x7, 0x0, 0x8, 0x5, 0x6, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x18, 0x48, 0x30, 0x18, 0x6, 0x16, 0x18, 0x24, 0x1, 0x5, 0x16, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x40, 0x7, 0x9727, 0x8, 0xb5d, 0x5, 0x9b1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4000, 0x40, 0x3, 0xc, 0x7, 0xc, 0xfc44]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x13c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x128, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x16, 0x4, 0x3ad6e23d3340c526, 0x12, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x9, 0x5, 0x1, 0x4, 0x1000, 0x7ae, 0xacc]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x8}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x69c, 0x2fa7, 0x9, 0xf13, 0x7ff, 0xa1c, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x9, 0x24, 0x24, 0x4, 0x3, 0x9, 0x16, 0x6, 0x30, 0x1, 0x12, 0x1b, 0x48, 0x6c, 0x18, 0x5, 0x6, 0x16, 0x5, 0x1, 0x48, 0x6c, 0x1, 0x3, 0x12]}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x7e]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x8}, {0x4, 0x9}, {0x2}, {0x6, 0x4}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x6}, {0x6, 0x6}, {0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {}, {0x4, 0x8}, {0x6, 0x8}, {0x1, 0x9}, {0x5}, {0x5}, {0x5, 0xa}, {0x3, 0x4}, {0x5}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x11}, {0x4, 0x4}, {}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x6}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0xa}, {}, {0x7}, {0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x7, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7ff, 0xfacf, 0x8, 0x0, 0x8, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4d6b5d7a71810825}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x6, 0x1, 0x7, 0x6, 0xdd, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}]}]}]}, 0x214}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) recvmsg$inet_nvme(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) 1.137064385s ago: executing program 6 (id=3252): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f0000000480)}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xb) close(r3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e22"], 0x2c}}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x4b68, 0x0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x300, 0x0, 0x101}}) sendmsg$NFT_MSG_GETFLOWTABLE(r8, 0x0, 0x20000040) 1.098892415s ago: executing program 6 (id=3253): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='\'.z{', @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x44011}, 0x40044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ifreq(r1, 0x8925, &(0x7f0000000540)={'bond0\x00', @ifru_hwaddr=@broadcast}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) perf_event_open(&(0x7f0000000880)={0x2, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3ff, 0x22a0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4151}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0xffffffffffffffff}, 0x18) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x23, 0x2, 0x0, &(0x7f0000000a40)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7, 0x0, 0x20000000007}, 0x18) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002780), 0x80000, 0x0) ppoll(&(0x7f00000027c0)=[{r8, 0x2000}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r8, &(0x7f0000002880), 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.096871975s ago: executing program 1 (id=3254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000000900)={&(0x7f0000000200)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000700)=[{&(0x7f0000002080)="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", 0x5b2}], 0x1, &(0x7f0000000880)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010102, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x58}, 0x4) sendto$packet(r0, &(0x7f0000000200)="201306ec37a1ed3e5f45167061deca9a00", 0xfffffffffffffc56, 0x0, &(0x7f0000000140)={0x11, 0x19, r2, 0x1, 0xfe, 0x6, @local}, 0x14) 1.070930775s ago: executing program 1 (id=3255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x98, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x3, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x88a]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4725}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xffffffff}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x81}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}]}}]}, 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) 1.046717435s ago: executing program 1 (id=3256): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@empty}, {@loopback}, {}, {@multicast1}, {@local}, {@local}, {@multicast1}, {@broadcast, 0xb}]}]}}}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000880), r4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000800)={r5, 0xffffffffffffffff, 0xd, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=[0x100000000000, 0x6, 0x8, 0x3, 0x5, 0x8], &(0x7f00000007c0)=[0x0, 0x0], 0x9, 0x6, 0x0, 0xffffffffffffffff}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x192}}, 0x20}}, 0x0) 958.097126ms ago: executing program 1 (id=3257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x2f, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x3, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 436.159778ms ago: executing program 2 (id=3258): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40eb, 0x0, r4, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r5, 0x5403, &(0x7f0000000240)={0x0, 0x63d, 0x0, 0xff, 0xc, "00000008000000fe630500000000000000001f"}) ioctl$TIOCL_GETMOUSEREPORTING(r5, 0x5412, &(0x7f00000006c0)=0xd) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x9) 435.757848ms ago: executing program 4 (id=3259): r0 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000000), r0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x1, 0x8, 0x101, 0x0, 0x0, {0xb, 0x0, 0x9}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4045) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000002c0), 0x600000, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup=r0, r2, 0x72e770955bf69d9f, 0x5, r0, @void, @value=r0}, 0x20) r3 = syz_usb_connect(0x2, 0x894, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0xcd, 0xa1, 0x49, 0x8, 0x19d2, 0x159, 0x3672, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x882, 0x4, 0x2, 0x7f, 0x0, 0x5, [{{0x9, 0x4, 0x64, 0x62, 0x1, 0xff, 0xff, 0xff, 0x94, [@cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "4e916a5c4a0a"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x4, 0x74}, {0x6, 0x24, 0x1a, 0x1, 0x4}, [@acm={0x4, 0x24, 0x2, 0xa}, @mdlm_detail={0x83, 0x24, 0x13, 0x5, "2617068c7d08e8e98b053810eccac8565d497b1724a4992a6daca9190e6e0f179a9b2e4cd669c9d6bd4bd537494dd918f166a6a1689f9c49b04ae232ffee21b20be0ec35075dfd5997147798d576897cc0e2dfab4eba923b9e2f2c04d178e5a8c4903c3e8d56c11621b58f5881b9caf2aa1525a94ba2e070a449483a52738e"}, @obex={0x5, 0x24, 0x15, 0x6}]}], [{{0x9, 0x5, 0xd, 0x0, 0x0, 0xb3, 0x4, 0xa, [@generic={0xe8, 0x31, "7df7c5e62c67676291a6dc7829755a9995986cb4889f47cdce92453e2d8a761bac77a5477fb948131eef609654d81355f00fa7bd4a49731c8eb6e5bfb3f8539be4459ad3043445427b9070e793fc2cf071383fc3aeb2b98bbe270985466ef396dd00c4d375fbd4280d99daeeb45af2c2b6199d6e8834f498ea834deefed30f5f2cbc8d731ea047f670a1553389dc71ccd83ab5ff2b6de2378c02da24d990e3ee8a59be4bc65125b67be8d3cf7e223556bde601e7f38b10670f59059ce57b504a1f4adf29233067baf9e38c043e7c5ac97511f748e096789ba71975f399157a38b83dc20e8789"}]}}]}}, {{0x9, 0x4, 0xd9, 0x8, 0x2, 0xff, 0x3, 0xd, 0x3, [@hid_hid={0x9, 0x21, 0xe, 0x7, 0x1, {0x22, 0x598}}], [{{0x9, 0x5, 0x4, 0x4, 0x200, 0xaf, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x313}, @generic={0x2e, 0xd, "4b61c21e07b64196a24fa6dd51e182d202a0d7971916f8a7e34ccaaec282ab4e673211fe18c6ff6802246614"}]}}, {{0x9, 0x5, 0x3, 0x14, 0x40, 0xfe, 0x1, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xa, 0xc0}]}}]}}, {{0x9, 0x4, 0x4b, 0xb, 0xb, 0xff, 0x5d, 0x81, 0x2, [@hid_hid={0x9, 0x21, 0xfffa, 0x3, 0x1, {0x22, 0x485}}, @hid_hid={0x9, 0x21, 0x5, 0xc, 0x1, {0x22, 0x455}}], [{{0x9, 0x5, 0x80, 0x1, 0x20, 0x80, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xa, 0x6}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x9, 0x9, 0x0, [@generic={0x1e, 0x21, "b9c4cd63eaf7420d39bfc1e23abf9243cbf58c15996f8dedf057d184"}, @generic={0xed, 0x5, "dd718a3aab20a800c7aa6bcd4e9eafd0f3f95915f5424af385c8862fe8dd0da5e5842d782629f1b4bd93120632c07f030870981e5226d7d96f74922ad4c25a77baa273f43a515ff26c499f5cf9dff70fe784adea0b5d0de9c3fc2a1569e037f4eb3c995286bac779e93bbef4c59225078db85997824657eec11c46a27f1a0c49ede078f64327c1e08cdecc4f565690bec4e214683bb6216ad2d3e525b51f142a3a10094b2ec4788a8d39c8d660668f67de8a3ea14e603fa659051f904e81fe4ae41dfabe94946f6372c0a5d03712bd5a099f6681873475fd9cbfe4a409b7bb96504696c43122c414849fd3"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x0, 0xa3, 0xb8, [@generic={0x10, 0x21, "505707a720da092470b11cb865bb"}, @generic={0xe2, 0xb, "d014b316dfce0836ee718ab3d3c44a549dd51026e05a511bf155c7ae70898a8bd1b70e25257c241e42a18371f185109ec4fb045d24be4c65bee3355ecaac644edafaa7ccc1cd0eea30e6864be432233500ac0ddfbbec57881bc0d286e619ecd3b7b5581e4bfa86ce294622d33f2529fa8dda7eee6229a703828e9c1cd113c7ca8882fcb7e99ee26920e4f79aab12772607ce09c472880eb1e9ddf59e5e88669a56a0fe3c6da8d7440ea848137ac1ea8e7fbe4b9e954e018cbf037cef2477afb2927d76e4cccbf6370666f217db730caee1ed55feafb9a4646d4c52dec67bf1aa"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xb, 0x4, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x5b52}, @generic={0x1b, 0xf, "ebe0fdec96b0b6d03feba24b1b5d525f3d74ccf7577ed342a8"}]}}, {{0x9, 0x5, 0x444cc1d77421e68d, 0x3, 0x10, 0xb3, 0x8, 0xc, [@generic={0xa2, 0x6, "c196122c13c1beeec11f88388f1dde8222d984ea66731013b26090786019fc2830abbf76e8f482f06923e75ee1d66a073cb92cd6977ccc2090f841cbb7baa52ae6b462e9ec1ce69e1b6bcf88d4f2471040e40f7c1081aab63d42e06e4ec3099c64d1a7a7b1f5d61724fb7ff17f50a34a6c1571543389ed5af3c4adf2ace3e60c402b91b9919ceeff17943ad8972ab9ec112e91b367c1b401cf40ae79d5925f41"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x2, 0x6, 0x1c, [@generic={0xe8, 0x21, "43a9f33b375c83ae25e8afbd39b25e3f544dda0256ab62e0ff7f5b592434a69ed56e09294bd62b06a59170a26ffcff76a109ca85051579a437528fe6dd3063a3f92a142d7d461edee20e24bf75d19696ee420c7e4a032b528b38b5036d214fa9334214f99f07e9c60c9184d3543c50cac7b2d0a779e29c0d8135e6a3b4c7618da2c8fa1b419d1b63fdde3929ae39ccdefc3f628bd425e7ce5f914fd73f3709f31a9c92c8ca513b1f35c7bc979e43d0b94b51344a8063e12acd273974330ebfdc4d525915476bd0793048b5c340c0d2bd9d9d4c4111d4b07c152b119e0b7dc464de9134f3877d"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x70, 0x2, 0x90, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xff, 0x8000}]}}, {{0x9, 0x5, 0xd, 0xc, 0x400, 0x4, 0xf9, 0x6, [@generic={0xde, 0xe, "53f1f67790ce0246b71d1c05ee1487668cbabbead53a8cf8011dda6d521493e7cb77ebcce0dc26fb388143eaee12394e4f96879adc5ce58f7e032fe90cc22b14680ff5c82042f3d464d4509a1cbfa67c3e1b2206c970ee4ddb0ec9453e163b8abc7fe45eb653144040621f68d5f0079904837e11b6b294dc2797849c7006f75f3135c5cb16ea0dd78f9fdd48b1409a69562c7b4c89b2f36c0083a0400b60a6e9a6e37b582d0a0128c307fdb5e42f357e609cee1d4e44da1f96f738c00255e2a2c6aee95a604f762ac591f454bbfc92c65466c02d8e6941725dcfd363"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x40, 0x10}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xfb, 0x3}]}}, {{0x9, 0x5, 0x0, 0x4, 0x0, 0x2, 0x7, 0x76, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x40, 0x4991}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0xb, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}]}}]}}, {{0x9, 0x4, 0x7e, 0x4, 0x2, 0x70, 0x7, 0x39, 0x5, [@uac_as], [{{0x9, 0x5, 0x6, 0x8, 0x8, 0x8, 0x6, 0x5, [@generic={0x73, 0x5, "6e42a61511d93224dff176432c8233308c710081372e5c000bf2add1564290ffe4e09c8f62b9a06924be9e8b4251c73a9e9b115a86b0542b7a20fda3dcb7701d9c52fbc2077363ee431fc1d966e0159d3c111df6feda6ce68978446f620501fff9e58742f35a3006e7f93a692879e0118a"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x400, 0x9, 0x9, 0x8, [@generic={0x23, 0x1, "9779de7f47cf40a1e63282f9dff7cc1b325ffd7ab4b24cbc688e02a57afa64e438"}, @generic={0x89, 0x14, "55178037966389f4d1f397ef8b493fb72899f62a7858ea1910b7b06e12a0b3bcf8a8faf2eb692dfebc22a37f35d0075910fb834eac72d679e70310e803228b0997d198ca74efa18f71534915cd1f82417e6706ad7069a369b02d05d37198d2a76add12d75938fcaffa1a498db4c90fd10ec3568f87720378aad848fffba1f1f3fc4c5e3d85da70"}]}}]}}]}}]}}, &(0x7f0000001180)={0xa, &(0x7f0000000c00)={0xa, 0x6, 0x250, 0x9, 0x82, 0x9, 0x8, 0x2}, 0xe0, &(0x7f0000000c40)={0x5, 0xf, 0xe0, 0x3, [@ptm_cap={0x3}, @generic={0xc4, 0x10, 0x4, "ab8aefef0c8e992aff9eb89955c11b4c0daabd9c817d47af0c5a8a47601a5437679192df289b23e405c58d5565ffee8107986d22bed3f2a1695cb5d954b374e5dc57816518544456ab7ff93464b113b2c5d7bb0e39507a2cdbebf6f0308d461a7e302955269aeb47428690cc6282d584801eb3b0d2e0bbf100b0eaced94fad5d62ff7b72345263397ad99edb1175ec305210447695decadd1c86d995279c2c7e0a55fa6771f106be22796bc5b143b5def05ae744a4074006d1de5e12b46c7ddff2"}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "37f40774341d0627b7a6186d6067bb7f"}]}, 0xa, [{0xe1, &(0x7f0000000d40)=@string={0xe1, 0x3, "847ff43c5a01f23e68da4f763b161b86be129c69e4a6e3b77307fe87f25538daa86bd05fa439a9124de008ec4c7b25ab5b1ba88b420851a09e628dfbb9169a812c2248f9ad9f74458a784014bfa589b73d69908cc4b0de163e35cb754e9f6816fae7aaf7ae2d6343672864bf793ea75d5d4b41283a081f6ef1cd9f52785fcf0a93b4f98974989c12a6b96a3dbf702f2d4c0029094df3b51da74000447eae3e3e1383c32daa36c5f32b3ed873f5c0d777614e47dcdf43cdb850fa11353f9b6abe23e900d0c0d495f37713b151ed11b63d35bbc40d0725adff661c6c572edf42"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x427}}, {0xab, &(0x7f0000000e80)=@string={0xab, 0x3, "02542d0b858be665e303f6431c0e187062efcc69269697e588671bf5d62959ecc86d69f022b8fbc5e28a5365d52ca85d1c7bb2a8ae38c615a0089f5133f478f17ac99685faf5cee2b3f16bcb00952da55fab1d8ec7bdeff34da4801ae49196d9fb7786a8cd4118e645dc0c496ab4d8f293f4c1a95def210b54c26d9ae0186944aba2688322e6f70cacbcf0d2463bc9ef20d954e14248e252e84c3a4db7d3331f0da966f51493acdcb4"}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0xf0ca}}, {0xb5, &(0x7f0000001000)=@string={0xb5, 0x3, "d72e50e1172d276aa5b4cfe3b46030249a7838492e75e6534e3095dff83a203b0170de6d03e1de342b346d5e10eaa8f26df086f6e9cfd90464c291b444acfed09e6101ed22065b32e848645e752b967f48924a01cadede12c6e9f6cdddb1d3a1077672a103908c4f36061bddf1c457dcebcbd6874064ec6416b670884d445873fb49d0d9dc4bf178d5c0f1f2ebefd9d92684a755e311953bf20df9745b273351f2fd957b309b3ae3f69d653a19664a5df241cd"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x446}}, {0x4, &(0x7f0000001140)=@lang_id={0x4, 0x3, 0x1001}}]}) syz_usb_disconnect(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r2) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000001440)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f00000012c0)={0x134, r5, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x70}}}}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @NL80211_ATTR_HE_OBSS_PD={0x7c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "d79ca7d5b65de1e4"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x2}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x1}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "1842784555e1efe3"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xa}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "9d8669947e8a23f3"}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "eaf8e905db51e743"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x9}]}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x401}, @NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x4}, {0x7, 0x2}, {}, {0x0, 0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0xa}, {0x1, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2f2, 0x9, 0xfffb, 0x80, 0x8, 0x1, 0x2, 0x401]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x0, 0x5, 0x545b, 0x7b0a, 0x7f, 0x4]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x2, 0x1}, {0x7, 0x7}, {0x4, 0x7}, {0x6, 0x6}, {0x0, 0x6}, {0x6, 0x4}, {0x3, 0x3}, {0x2, 0x9}, {0x5}, {0x2, 0x8}, {0x0, 0x9}, {0x1, 0x4}, {0x7, 0x1}, {0x2}, {0x0, 0x2}, {0x2, 0x3}, {0x1, 0x8}, {0x1, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0xfc, 0x931, 0x2, 0x8, 0x2]}}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0xc1}, 0x0) io_setup(0x800, &(0x7f0000001480)) eventfd2(0xde, 0x40001) 433.398648ms ago: executing program 0 (id=3260): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=@newqdisc={0xc8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x98, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x3, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80], [0x0, 0x8, 0x0, 0x0, 0x0, 0x88a]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x4725}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0xffffffff}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xffffffff}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x81}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}]}}]}, 0xc8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) 366.945639ms ago: executing program 0 (id=3261): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xb) close(r3) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000002000010400000000000000000a0000000000000000000000080017004e224e22"], 0x2c}}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xffffffffffffffff}, 0x13) semctl$SETALL(0x0, 0x0, 0x11, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_emit_ethernet(0xfed7, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) ioctl$TIOCL_SETSEL(r8, 0x4b68, 0x0) ioctl$TIOCL_SETSEL(r8, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x300, 0x0, 0x101}}) sendmsg$NFT_MSG_GETFLOWTABLE(r8, 0x0, 0x20000040) 363.592929ms ago: executing program 2 (id=3262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000280)={'wlan0\x00', 0x2, 0x6}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 246.368919ms ago: executing program 0 (id=3263): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000060bfa300000000000007030000f0ffffff620af0fff8ffffff71a4f0ff000000002d040200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0a00fe00ffffffc3030000a0000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebaa2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15f279b513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8d075ffaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac42738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998802008f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00"/2518], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) keyctl$assume_authority(0x10, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x6, @local, 0x5}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000100)) 234.291019ms ago: executing program 6 (id=3264): r0 = gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000080)='+', 0x1}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x48, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x3, 0x1000}]}) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000010140)=0x1) write$ppp(r4, &(0x7f0000000080)="2f12", 0x2) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@func={0x8, 0x0, 0x0, 0xc, 0x5}, @var={0xd, 0x0, 0x0, 0xe, 0x5, 0x2}, @struct={0xb, 0x3, 0x0, 0x4, 0x0, 0xffffffff, [{0x0, 0x0, 0x1}, {0xf, 0x5, 0x984a}, {0x10, 0x4, 0x6}]}, @fwd={0x4}, @const={0xb, 0x0, 0x0, 0xa, 0x1}]}, {0x0, [0x5f, 0x5f, 0x30, 0x61]}}, &(0x7f0000000140)=""/95, 0x82, 0x5f, 0x0, 0x1ff, 0x10000, @value}, 0x28) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xd, 0x4}, {0xa, 0x5}]}]}}, &(0x7f0000000380)=""/168, 0x36, 0xa8, 0x0, 0x800, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x85c, 0xffffffff, 0x0, 0x0, 0x1, 0x5, '\x00', r5, r6, 0x3, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r8 = socket$kcm(0x29, 0x2, 0x0) r9 = socket$inet6(0xa, 0x803, 0x1) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000180)={r9, r7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 84.29273ms ago: executing program 0 (id=3265): socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYRESDEC=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008000100000083000000bf09000000000000550901000000000095000000000000e52cbab7261fba6addc8b900bf91000036707120b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) modify_ldt$write(0x1, 0x0, 0x0) (async) modify_ldt$write(0x1, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x4) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x30100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$selinux_mls(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = gettid() r5 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r4, @ANYRESOCT=r4], 0x1, 0x67e, &(0x7f0000001600)="$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") open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r5, 0x0) (async) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r5, 0x0) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) (async) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r6 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffe, 0x13, r6, 0x0) 0s ago: executing program 1 (id=3266): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000000)=ANY=[], 0xfd, 0x11f3, &(0x7f0000001b80)="$eJzs3E+LW1UYB+C3cWrHqfNHrdV2oQfduLo0s3AlSJApyASU2gitINw6NxpyTUJuGIiI1ZVbP4e4dCeIX2A2fgZ3s3HZhXiFpLVNTdUuOpH6PJv7kvf8cu8hEDjhnBy/8c2n/W6VdfNJNE6disYoIt1KkaIRd7y0P79eu77farf3rqR0uXW1+XpKaevlHz/4/LtXfpqcff/7rR/OxNHOh8e/7v5ydP7owvHvVz/pValXpcFwkvJ0Yzic5DfKIh30qn6W0rtlkVdF6g2qYrzQ75bD0Wia8sHB5sZoXFRVygfT1C+maTJMk/E05R/nvUHKsixtbgQPdPqfh3S+vVXXdURdn44no67r+qnYiLPxdGzGVnwZEc/Es/FcnIvn43y8EC/Ghdmok3h8AAAAAAAAAAAAAAAAAAAA+P/4u/P/27Hj/D8AAAAAAAAAAAAAAAAAAACcgPeuXd9vtdt7V1Jajyi/PuwcdubXeb/VjV6UUcSl2I7fYnb6f25eX367vXcpzezEV+XN2/mbh50nFvPN2d8J3M6vzXp38s15Pi3mz8TGvfnd2I5zy++/uzS/Hq+9ek8+i+34+aMYRhkHs3vfzX/RTOmtd9r35S/OxgEAAMDjIEt/Wrp+z7IH9ef5h/h94L719VpcXFvt3Imopp/187IsxovF+l9eUfz7ovGI3rkR/5EJKh7/YtXfTJyEux/6qp8EAAAAAAAAAACAh/GIdxGuxZKdZW+uZqoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/sAPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgqAAD//99CzUo=") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendfile(r2, r2, 0x0, 0x800000009) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)={0x21c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x40}}}}, [@NL80211_ATTR_TID_CONFIG={0x1fc, 0x11d, 0x0, 0x1, [{0x4}, {0xac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5d}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x0, 0x2, 0x18, 0x9, 0x4a, 0x2, 0x3a, 0x6c, 0xc, 0x9]}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x0, 0x5}, {0x5, 0x6}, {0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x5, 0x8}, {0x5, 0x3}, {0x4, 0x8}, {0x5, 0xa}, {0x5, 0x9}, {0x1, 0x9}, {0x7, 0x2}, {0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x6, 0x8}, {0x7, 0x9}, {0x6, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x6, 0x8}, {0x6}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0xa}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x3}, {0x0, 0x7}, {0x0, 0x4}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x9}, {}, {0x3, 0x6}, {0x3, 0x2}, {0x4, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6dc, 0x59, 0x7, 0x0, 0x8, 0x5, 0x6, 0xffff]}}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0xc, 0x18, 0x48, 0x30, 0x18, 0x6, 0x16, 0x18, 0x24, 0x1, 0x5, 0x16, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x40, 0x7, 0x9727, 0x8, 0xb5d, 0x5, 0x9b1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x4000, 0x40, 0x3, 0xc, 0x7, 0xc, 0xfc44]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}]}, {0x148, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x134, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x5, 0x16, 0x4, 0x3ad6e23d3340c526, 0x12, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x9, 0x5, 0x1, 0x4, 0x1000, 0x7ae, 0xacc]}}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x9}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x6}, {0x5, 0xa}, {0x1, 0x7}, {0x3, 0x3}, {0x0, 0x6}, {0x3, 0x2}, {0x3, 0x2}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x4}, {0x5}, {0x3, 0x6}, {0x0, 0x1}, {0x0, 0xa}, {0x1, 0x7}, {0x6, 0x8}]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x69c, 0x2fa7, 0x9, 0xf13, 0x7ff, 0xa1c, 0x1, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x9, 0x12, 0x24, 0x24, 0x4, 0x3, 0x9, 0x16, 0x6, 0x30, 0x1, 0x12, 0x1b, 0x48, 0x6c, 0x18, 0x5, 0x6, 0x16, 0x5, 0x1, 0x48, 0x6c, 0x1, 0x3, 0x12]}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x2, 0x7e]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0x8}, {0x4, 0x9}, {0x2}, {0x6, 0x4}, {0x2}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x6}, {0x3, 0x4}, {0x6}, {0x6, 0x6}, {0x7}, {0x5, 0x4}, {0x0, 0x4}, {0x2, 0x8}, {0x4, 0x6}, {0x0, 0x9}, {}, {0x4, 0x8}, {0x6, 0x8}, {0x1, 0x9}, {0x5}, {0x5}, {0x5, 0xa}, {0x3, 0x4}, {0x5}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x3, 0x3}, {0x7, 0x7}, {0x6, 0x6}, {0x4, 0x4}, {0x0, 0x9}, {0x4, 0x11}, {0x4, 0x4}, {}, {0x1, 0x1}, {0x4, 0x8}, {0x3, 0x2}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x1}, {0x6, 0x1}, {0x5, 0xa}, {0x6, 0x9}, {0x7, 0x4}, {0x1, 0x9}, {0x4, 0x6}, {0x4, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x0, 0x6}, {0x6, 0x6}, {0x7, 0xa}, {}, {0x7}, {0x4}, {0x4, 0x2}, {0x1, 0x3}, {0x1, 0x9}, {0x2, 0x5}, {0x1, 0xa}, {0x3, 0x7}, {0x3, 0xa}, {0x7, 0x5}, {0x5, 0x4}, {0x2, 0x1}, {0x4, 0x9}, {0x4, 0x9}, {0x7, 0x7}, {0x1, 0x5}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4}, {}, {0x1, 0x6}, {0x7, 0x2}, {0x1, 0x4}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x7ff, 0xfacf, 0x8, 0x0, 0x8, 0x3, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x4d6b5d7a71810825}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x6, 0x1, 0x7, 0x6, 0xdd, 0x3ff]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}]}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x40800}, 0x40040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x30, r5, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}}}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000001811000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) truncate(&(0x7f0000000380)='./file2\x00', 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$SIOCGSTAMP(r7, 0x8906, 0x0) recvmsg$inet_nvme(r7, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x10000) sendmsg$inet(r7, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) kernel console output (not intermixed with test programs): oot:sysadm_r:sysadm_t pid=12864 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 245.991797][ T29] audit: type=1326 audit(1733401030.693:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 246.015416][ T29] audit: type=1326 audit(1733401030.693:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 246.015464][ T29] audit: type=1326 audit(1733401030.693:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 246.015501][ T29] audit: type=1326 audit(1733401030.693:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 246.015584][ T29] audit: type=1326 audit(1733401030.693:8207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f933e0de9cf code=0x7ffc0000 [ 246.015624][ T29] audit: type=1326 audit(1733401030.693:8208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 246.015680][ T29] audit: type=1326 audit(1733401030.693:8209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f933e0de880 code=0x7ffc0000 [ 246.015790][ T29] audit: type=1326 audit(1733401030.723:8210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 246.015829][ T29] audit: type=1326 audit(1733401030.723:8211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12864 comm="syz.0.2814" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 246.216040][ T3372] hid (null): unknown global tag 0xc [ 246.230980][ T3372] hid (null): invalid report_count 1547616459 [ 246.237195][ T3372] hid (null): unknown global tag 0xc [ 246.244544][T12880] siw: device registration error -23 [ 246.260775][ T3372] hid-generic 0003:B8DB:0000.0064: unknown main item tag 0xd [ 246.268364][ T3372] hid-generic 0003:B8DB:0000.0064: unknown global tag 0xc [ 246.275497][ T3372] hid-generic 0003:B8DB:0000.0064: item 0 0 1 12 parsing failed [ 246.283350][ T3372] hid-generic 0003:B8DB:0000.0064: probe with driver hid-generic failed with error -22 [ 246.349595][T12907] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.356902][T12907] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.376660][T12907] bridge0: entered allmulticast mode [ 246.403292][T12911] rdma_rxe: rxe_newlink: failed to add lo [ 246.446076][T12912] bridge_slave_1: left allmulticast mode [ 246.451953][T12912] bridge_slave_1: left promiscuous mode [ 246.457721][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.492029][T12912] bridge_slave_0: left allmulticast mode [ 246.497854][T12912] bridge_slave_0: left promiscuous mode [ 246.503632][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.529499][T12918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.554490][T12918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.575363][T12880] lo speed is unknown, defaulting to 1000 [ 246.660910][T12926] loop0: detected capacity change from 0 to 764 [ 246.669818][T12926] Symlink component flag not implemented [ 246.675609][T12926] Symlink component flag not implemented (129) [ 246.683832][T12926] rock: directory entry would overflow storage [ 246.690178][T12926] rock: sig=0x4f50, size=4, remaining=3 [ 246.695806][T12926] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 246.769816][T12930] x_tables: duplicate underflow at hook 1 [ 246.797405][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2831'. [ 246.817350][T12940] syz2: rxe_newlink: already configured on lo [ 246.894731][ T3375] hid (null): unknown global tag 0xc [ 246.900135][ T3375] hid (null): invalid report_count 1547616459 [ 246.903558][T12934] loop6: detected capacity change from 0 to 8192 [ 246.906430][ T3375] hid (null): unknown global tag 0xc [ 246.936586][T12934] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 246.937246][ T3375] hid-generic 0003:B8DB:0000.0065: unknown main item tag 0xd [ 246.954509][ T3375] hid-generic 0003:B8DB:0000.0065: unknown global tag 0xc [ 246.961783][ T3375] hid-generic 0003:B8DB:0000.0065: item 0 0 1 12 parsing failed [ 247.000046][ T3375] hid-generic 0003:B8DB:0000.0065: probe with driver hid-generic failed with error -22 [ 247.057655][T12944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 247.193684][T12952] siw: device registration error -23 [ 247.285379][T12952] lo speed is unknown, defaulting to 1000 [ 247.551017][T12962] loop2: detected capacity change from 0 to 1024 [ 247.675104][T12962] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 247.814353][T12976] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2846'. [ 247.855471][T12980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.879202][T12980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.910819][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.911208][T12983] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.934955][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.973495][T12990] siw: device registration error -23 [ 248.023122][T12990] lo speed is unknown, defaulting to 1000 [ 248.121566][T12938] 9pnet_fd: Insufficient options for proto=fd [ 248.127975][T12938] tmpfs: Bad value for 'mpol' [ 248.260280][T13002] loop4: detected capacity change from 0 to 8192 [ 248.268228][T13002] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.291937][T13004] loop1: detected capacity change from 0 to 8192 [ 248.303147][T13004] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 248.436677][T13004] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 248.445600][T13004] FAT-fs (loop1): Filesystem has been set read-only [ 248.466555][T13004] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 248.475730][T13004] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 248.485594][T13006] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 248.522730][ T3297] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 248.568812][T13010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'. [ 248.631270][T13014] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2861'. [ 248.697202][T13018] FAULT_INJECTION: forcing a failure. [ 248.697202][T13018] name failslab, interval 1, probability 0, space 0, times 0 [ 248.710175][T13018] CPU: 1 UID: 0 PID: 13018 Comm: syz.1.2863 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 248.722661][T13018] Tainted: [W]=WARN [ 248.726494][T13018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.736573][T13018] Call Trace: [ 248.739866][T13018] [ 248.742816][T13018] dump_stack_lvl+0xf2/0x150 [ 248.747520][T13018] dump_stack+0x15/0x1a [ 248.751711][T13018] should_fail_ex+0x223/0x230 [ 248.756422][T13018] should_failslab+0x8f/0xb0 [ 248.761050][T13018] kmem_cache_alloc_node_noprof+0x59/0x320 [ 248.766942][T13018] ? __alloc_skb+0x10b/0x310 [ 248.771572][T13018] __alloc_skb+0x10b/0x310 [ 248.776150][T13018] tipc_buf_acquire+0x2c/0xb0 [ 248.780877][T13018] tipc_msg_build+0x3c8/0x820 [ 248.785585][T13018] ? __rcu_read_unlock+0x4e/0x70 [ 248.790782][T13018] __tipc_sendmsg+0x180c/0x1c40 [ 248.795700][T13018] ? selinux_socket_sendmsg+0x185/0x1c0 [ 248.801393][T13018] ? __pfx_woken_wake_function+0x10/0x10 [ 248.807143][T13018] ? __pfx_tipc_sendmsg+0x10/0x10 [ 248.812249][T13018] tipc_sendmsg+0x3e/0x60 [ 248.816708][T13018] __sock_sendmsg+0x140/0x180 [ 248.821465][T13018] ____sys_sendmsg+0x312/0x410 [ 248.826277][T13018] __sys_sendmsg+0x19d/0x230 [ 248.830969][T13018] __x64_sys_sendmsg+0x46/0x50 [ 248.835766][T13018] x64_sys_call+0x2734/0x2dc0 [ 248.840626][T13018] do_syscall_64+0xc9/0x1c0 [ 248.845159][T13018] ? clear_bhb_loop+0x55/0xb0 [ 248.849849][T13018] ? clear_bhb_loop+0x55/0xb0 [ 248.854579][T13018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.860571][T13018] RIP: 0033:0x7f9da707ff19 [ 248.865090][T13018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.884723][T13018] RSP: 002b:00007f9da56f7058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.893578][T13018] RAX: ffffffffffffffda RBX: 00007f9da7245fa0 RCX: 00007f9da707ff19 [ 248.901675][T13018] RDX: 0000000000000000 RSI: 0000000020004440 RDI: 0000000000000005 [ 248.912344][T13018] RBP: 00007f9da56f70a0 R08: 0000000000000000 R09: 0000000000000000 [ 248.920369][T13018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.928422][T13018] R13: 0000000000000000 R14: 00007f9da7245fa0 R15: 00007ffd623fed88 [ 248.936405][T13018] [ 248.953814][T13020] siw: device registration error -23 [ 249.078184][T13020] lo speed is unknown, defaulting to 1000 [ 249.147163][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'. [ 249.198374][T13032] loop4: detected capacity change from 0 to 8192 [ 249.213351][T13032] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 249.328066][T13044] loop1: detected capacity change from 0 to 512 [ 249.348820][T13044] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2874: Failed to acquire dquot type 1 [ 249.359264][T13047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.369781][T13047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.384154][T13032] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 249.393057][T13032] FAT-fs (loop4): Filesystem has been set read-only [ 249.394172][T13044] EXT4-fs (loop1): 1 truncate cleaned up [ 249.406410][T13044] EXT4-fs mount: 14 callbacks suppressed [ 249.406429][T13044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.422056][T13032] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 249.424986][T13044] ext4 filesystem being mounted at /574/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.454455][T13032] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 249.469603][T13045] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 249.603235][T13055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.614936][T12983] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.617837][T13055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.670089][T12983] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.700062][T12983] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.765833][T12983] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.778295][T12983] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.789878][T12983] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.803080][T12983] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.839452][T13057] FAULT_INJECTION: forcing a failure. [ 249.839452][T13057] name failslab, interval 1, probability 0, space 0, times 0 [ 249.852197][T13057] CPU: 0 UID: 0 PID: 13057 Comm: syz.2.2877 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 249.864469][T13057] Tainted: [W]=WARN [ 249.868294][T13057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 249.878388][T13057] Call Trace: [ 249.881678][T13057] [ 249.884622][T13057] dump_stack_lvl+0xf2/0x150 [ 249.889287][T13057] dump_stack+0x15/0x1a [ 249.893531][T13057] should_fail_ex+0x223/0x230 [ 249.898302][T13057] should_failslab+0x8f/0xb0 [ 249.902995][T13057] kmem_cache_alloc_node_noprof+0x59/0x320 [ 249.908825][T13057] ? __alloc_skb+0x10b/0x310 [ 249.913468][T13057] __alloc_skb+0x10b/0x310 [ 249.917995][T13057] netlink_alloc_large_skb+0xad/0xe0 [ 249.923308][T13057] netlink_sendmsg+0x3b4/0x6e0 [ 249.928168][T13057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.933508][T13057] __sock_sendmsg+0x140/0x180 [ 249.938259][T13057] __sys_sendto+0x1a8/0x230 [ 249.942804][T13057] __x64_sys_sendto+0x78/0x90 [ 249.947505][T13057] x64_sys_call+0x29fa/0x2dc0 [ 249.952203][T13057] do_syscall_64+0xc9/0x1c0 [ 249.956735][T13057] ? clear_bhb_loop+0x55/0xb0 [ 249.961438][T13057] ? clear_bhb_loop+0x55/0xb0 [ 249.966156][T13057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.972083][T13057] RIP: 0033:0x7f1d2811ff19 [ 249.976495][T13057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.996115][T13057] RSP: 002b:00007f1d26797058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 250.004614][T13057] RAX: ffffffffffffffda RBX: 00007f1d282e5fa0 RCX: 00007f1d2811ff19 [ 250.012633][T13057] RDX: 000000000000001c RSI: 00000000200002c0 RDI: 0000000000000004 [ 250.020674][T13057] RBP: 00007f1d267970a0 R08: 0000000000000000 R09: 0000000000000000 [ 250.028645][T13057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.036739][T13057] R13: 0000000000000000 R14: 00007f1d282e5fa0 R15: 00007ffd34585c58 [ 250.044761][T13057] [ 250.111041][T13061] loop2: detected capacity change from 0 to 8192 [ 250.120171][T13061] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.147538][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.213430][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2883'. [ 250.231315][T13072] siw: device registration error -23 [ 250.355226][T13072] lo speed is unknown, defaulting to 1000 [ 250.377304][T13079] loop6: detected capacity change from 0 to 8192 [ 250.408148][T13079] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 250.523104][T13083] rdma_rxe: rxe_newlink: failed to add lo [ 250.572158][T13079] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 250.581051][T13079] FAT-fs (loop6): Filesystem has been set read-only [ 250.589354][T13079] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 250.598753][T13079] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 250.608557][T13082] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 250.630345][T13087] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.681066][T13087] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.705906][T10996] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 250.749641][T13093] veth1_to_bridge: entered promiscuous mode [ 250.755813][T13093] vlan2: entered promiscuous mode [ 250.762703][T13093] veth1_to_bridge: left promiscuous mode [ 250.771525][T13094] loop4: detected capacity change from 0 to 256 [ 250.781204][T13094] FAT-fs (loop4): bogus number of FAT sectors [ 250.787415][T13094] FAT-fs (loop4): Can't find a valid FAT filesystem [ 250.805597][T13087] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.871392][T13087] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.915359][T13098] loop6: detected capacity change from 0 to 512 [ 250.936379][T13087] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.949718][T13087] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.958970][T13098] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2892: Failed to acquire dquot type 1 [ 250.962249][T13087] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.973643][T13098] EXT4-fs (loop6): 1 truncate cleaned up [ 250.984141][T13087] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.987294][T13102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.001041][T13102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.003402][T13098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.021496][T13098] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.043202][ T29] kauditd_printk_skb: 172 callbacks suppressed [ 251.043220][ T29] audit: type=1326 audit(1733401291.769:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 251.073174][ T29] audit: type=1326 audit(1733401291.779:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 251.096885][ T29] audit: type=1326 audit(1733401291.779:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 251.120525][ T29] audit: type=1326 audit(1733401291.779:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 251.144120][ T29] audit: type=1326 audit(1733401291.779:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 251.168373][ T29] audit: type=1326 audit(1733401291.779:8385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 251.192154][ T29] audit: type=1326 audit(1733401291.779:8386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5814d9ff53 code=0x7ffc0000 [ 251.215520][ T29] audit: type=1326 audit(1733401291.779:8387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5814d9ff53 code=0x7ffc0000 [ 251.238950][ T29] audit: type=1326 audit(1733401291.779:8388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 251.262513][ T29] audit: type=1326 audit(1733401291.779:8389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13097 comm="syz.6.2892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 251.376537][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2897'. [ 251.439766][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.448506][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.470339][T13121] rdma_rxe: rxe_newlink: failed to add lo [ 251.619146][T13127] loop4: detected capacity change from 0 to 8192 [ 251.637343][T13127] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.759115][T10996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.794061][T13133] syz.6.2904[13133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.794235][T13133] syz.6.2904[13133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.828505][T13133] syz.6.2904[13133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.844627][T13135] FAULT_INJECTION: forcing a failure. [ 251.844627][T13135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.869245][T13135] CPU: 1 UID: 0 PID: 13135 Comm: syz.6.2904 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 251.881563][T13135] Tainted: [W]=WARN [ 251.885388][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.895610][T13135] Call Trace: [ 251.898906][T13135] [ 251.901932][T13135] dump_stack_lvl+0xf2/0x150 [ 251.906892][T13135] dump_stack+0x15/0x1a [ 251.911106][T13135] should_fail_ex+0x223/0x230 [ 251.915801][T13135] should_fail+0xb/0x10 [ 251.919978][T13135] should_fail_usercopy+0x1a/0x20 [ 251.925072][T13135] strncpy_from_user+0x25/0x210 [ 251.930037][T13135] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 251.935709][T13135] ? getname_flags+0x81/0x3b0 [ 251.940417][T13135] getname_flags+0xb0/0x3b0 [ 251.945001][T13135] user_path_at+0x26/0x120 [ 251.949466][T13135] __se_sys_mount+0x248/0x2d0 [ 251.954184][T13135] __x64_sys_mount+0x67/0x80 [ 251.958898][T13135] x64_sys_call+0x2c84/0x2dc0 [ 251.963648][T13135] do_syscall_64+0xc9/0x1c0 [ 251.968155][T13135] ? clear_bhb_loop+0x55/0xb0 [ 251.972897][T13135] ? clear_bhb_loop+0x55/0xb0 [ 251.977766][T13135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.983705][T13135] RIP: 0033:0x7f5814d9ff19 [ 251.988138][T13135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.007800][T13135] RSP: 002b:00007f58133f6058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 252.016221][T13135] RAX: ffffffffffffffda RBX: 00007f5814f66080 RCX: 00007f5814d9ff19 [ 252.024261][T13135] RDX: 0000000020000140 RSI: 0000000020000040 RDI: 0000000000000000 [ 252.032304][T13135] RBP: 00007f58133f60a0 R08: 00000000200002c0 R09: 0000000000000000 [ 252.040483][T13135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.048464][T13135] R13: 0000000000000000 R14: 00007f5814f66080 R15: 00007fff2216c818 [ 252.056517][T13135] [ 252.221275][T13151] loop2: detected capacity change from 0 to 256 [ 252.228599][T13151] FAT-fs (loop2): bogus number of FAT sectors [ 252.234735][T13151] FAT-fs (loop2): Can't find a valid FAT filesystem [ 252.244198][T13152] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.303019][T13152] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.347136][T13155] syz2: rxe_newlink: already configured on lo [ 252.378369][T13152] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.428846][T13152] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.492242][T13158] loop1: detected capacity change from 0 to 256 [ 252.502968][T13158] FAT-fs (loop1): bogus number of FAT sectors [ 252.509171][T13158] FAT-fs (loop1): Can't find a valid FAT filesystem [ 252.571447][T13162] loop4: detected capacity change from 0 to 512 [ 252.608885][T13162] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.2915: Failed to acquire dquot type 1 [ 252.637345][T13162] EXT4-fs (loop4): 1 truncate cleaned up [ 252.643505][T13162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.669704][T13162] ext4 filesystem being mounted at /546/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.011971][T13167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.028120][T13167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.054788][T13169] loop2: detected capacity change from 0 to 8192 [ 253.062721][T13169] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 253.187455][T13169] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 253.196365][T13169] FAT-fs (loop2): Filesystem has been set read-only [ 253.203345][T13169] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 253.212392][T13169] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 253.222082][T13170] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 253.293030][T12633] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 253.373934][T13181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.383592][T13181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.410811][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.433886][T13184] rdma_rxe: rxe_newlink: failed to add lo [ 253.445416][T13185] loop2: detected capacity change from 0 to 512 [ 253.456307][T13185] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.2919: casefold flag without casefold feature [ 253.471387][T13185] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2919: couldn't read orphan inode 15 (err -117) [ 253.483965][T13185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.484851][T13188] tipc: Started in network mode [ 253.501456][T13188] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 253.510696][T13188] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 253.519055][T13188] tipc: Enabled bearer , priority 10 [ 253.561024][T13191] loop4: detected capacity change from 0 to 4096 [ 253.570021][T13191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.593643][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.911045][T13200] loop6: detected capacity change from 0 to 256 [ 253.917907][T13200] FAT-fs (loop6): bogus number of FAT sectors [ 253.924115][T13200] FAT-fs (loop6): Can't find a valid FAT filesystem [ 254.177366][T12633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.229472][T13202] loop1: detected capacity change from 0 to 8192 [ 254.237411][T13202] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 254.262220][T13205] loop2: detected capacity change from 0 to 256 [ 254.269744][T13205] FAT-fs (loop2): bogus number of FAT sectors [ 254.275869][T13205] FAT-fs (loop2): Can't find a valid FAT filesystem [ 254.379642][T13202] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 254.388555][T13202] FAT-fs (loop1): Filesystem has been set read-only [ 254.395515][T13202] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 254.404894][T13202] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 254.414546][T13206] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 254.526171][T13213] loop1: detected capacity change from 0 to 512 [ 254.532583][ T9] tipc: Node number set to 1 [ 254.548655][T13213] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2933: Failed to acquire dquot type 1 [ 254.560813][T13213] EXT4-fs (loop1): 1 truncate cleaned up [ 254.567681][T13213] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.580858][T13213] ext4 filesystem being mounted at /589/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.592665][T13219] rdma_rxe: rxe_newlink: failed to add lo [ 254.647644][T13224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.656566][T13224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.721206][T13226] loop6: detected capacity change from 0 to 4096 [ 254.739629][T13226] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.752865][T13226] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.811600][T13231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.820396][T13231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.054882][T13233] loop2: detected capacity change from 0 to 512 [ 255.062042][T13233] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 255.071082][T13233] EXT4-fs (loop2): orphan cleanup on readonly fs [ 255.077947][T13233] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 255.092576][T13233] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #11: comm syz.2.2941: corrupted inode contents [ 255.104910][T13233] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #11: comm syz.2.2941: mark_inode_dirty error [ 255.116816][T13233] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2941: invalid indirect mapped block 1 (level 1) [ 255.130185][T13233] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #11: comm syz.2.2941: corrupted inode contents [ 255.142295][T13233] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 255.151099][T13233] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #11: comm syz.2.2941: corrupted inode contents [ 255.163223][T13233] EXT4-fs error (device loop2): ext4_truncate:4240: inode #11: comm syz.2.2941: mark_inode_dirty error [ 255.174601][T13233] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 255.183700][T13233] EXT4-fs (loop2): 1 truncate cleaned up [ 255.189858][T13233] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 255.226520][T13152] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.239067][T13152] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.250336][T13152] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.261500][T13152] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.295906][T12633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.366367][T13240] loop2: detected capacity change from 0 to 8192 [ 255.374963][T13240] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 255.379236][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.522426][T13240] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 255.531322][T13253] syz2: rxe_newlink: already configured on lo [ 255.531330][T13240] FAT-fs (loop2): Filesystem has been set read-only [ 255.535262][T13240] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 255.561605][T13240] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 255.561914][T13255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2950'. [ 255.580732][T13244] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 255.611047][T13256] loop4: detected capacity change from 0 to 256 [ 255.620962][T13256] FAT-fs (loop4): bogus number of FAT sectors [ 255.627234][T13256] FAT-fs (loop4): Can't find a valid FAT filesystem [ 255.641738][T12633] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 255.670847][T13258] pim6reg1: entered promiscuous mode [ 255.676404][T13258] pim6reg1: entered allmulticast mode [ 255.724084][T13263] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.738445][T13264] loop2: detected capacity change from 0 to 256 [ 255.745489][T13264] FAT-fs (loop2): bogus number of FAT sectors [ 255.751681][T13264] FAT-fs (loop2): Can't find a valid FAT filesystem [ 255.782734][T13263] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.804601][T13269] loop6: detected capacity change from 0 to 512 [ 255.818667][T13269] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2955: Failed to acquire dquot type 1 [ 255.830692][T13269] EXT4-fs (loop6): 1 truncate cleaned up [ 255.837312][T13269] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.838093][T13263] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.850107][T13269] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.907859][T13263] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.973539][T13263] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.984866][T13263] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.996110][T13263] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.007374][T13263] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.193538][T13276] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2957'. [ 256.220172][T13278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.228742][T13278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.440172][T13284] loop4: detected capacity change from 0 to 8192 [ 256.447678][T13284] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.540518][T13287] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2962'. [ 256.568307][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 256.568325][ T29] audit: type=1326 audit(1733401297.299:8807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13286 comm="syz.2.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2811ff19 code=0x7ffc0000 [ 256.576074][T13290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.598084][ T29] audit: type=1326 audit(1733401297.299:8808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13286 comm="syz.2.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2811ff19 code=0x7ffc0000 [ 256.607885][T13290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.629943][ T29] audit: type=1326 audit(1733401297.299:8809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13286 comm="syz.2.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f1d2811ff19 code=0x7ffc0000 [ 256.641774][T13284] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 256.662875][ T29] audit: type=1326 audit(1733401297.299:8810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13286 comm="syz.2.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2811ff19 code=0x7ffc0000 [ 256.670293][T13284] FAT-fs (loop4): Filesystem has been set read-only [ 256.693892][ T29] audit: type=1326 audit(1733401297.299:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13286 comm="syz.2.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d2811ff19 code=0x7ffc0000 [ 256.706433][T13284] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 256.723997][ T29] audit: type=1326 audit(1733401297.299:8812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13286 comm="syz.2.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2811ff19 code=0x7ffc0000 [ 256.746155][T13284] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 256.756342][ T29] audit: type=1326 audit(1733401297.299:8813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13286 comm="syz.2.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1d2811e9cf code=0x7ffc0000 [ 256.767640][T13285] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 256.788516][ T29] audit: type=1326 audit(1733401297.299:8814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13286 comm="syz.2.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2811ff19 code=0x7ffc0000 [ 256.820989][ T29] audit: type=1326 audit(1733401297.299:8815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13286 comm="syz.2.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1d2811e880 code=0x7ffc0000 [ 256.848056][T10996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.848033][ T29] audit: type=1326 audit(1733401297.579:8816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13286 comm="syz.2.2962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2811ff19 code=0x7ffc0000 [ 256.921991][T13297] rdma_rxe: rxe_newlink: failed to add lo [ 256.922658][ T3295] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 256.970030][ T5829] hid (null): unknown global tag 0xc [ 256.975424][ T5829] hid (null): invalid report_count 1547616459 [ 256.981669][ T5829] hid (null): unknown global tag 0xc [ 256.989210][ T5829] hid-generic 0003:B8DB:0000.0066: unknown main item tag 0xd [ 256.996662][ T5829] hid-generic 0003:B8DB:0000.0066: unknown global tag 0xc [ 257.003812][ T5829] hid-generic 0003:B8DB:0000.0066: item 0 0 1 12 parsing failed [ 257.012467][ T5829] hid-generic 0003:B8DB:0000.0066: probe with driver hid-generic failed with error -22 [ 257.068488][T13304] xt_TCPMSS: Only works on TCP SYN packets [ 257.104577][T13309] loop6: detected capacity change from 0 to 256 [ 257.125182][T13309] FAT-fs (loop6): bogus number of FAT sectors [ 257.131364][T13309] FAT-fs (loop6): Can't find a valid FAT filesystem [ 257.163791][T13313] FAULT_INJECTION: forcing a failure. [ 257.163791][T13313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.177080][T13313] CPU: 1 UID: 0 PID: 13313 Comm: syz.0.2973 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 257.189423][T13313] Tainted: [W]=WARN [ 257.193243][T13313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.203331][T13313] Call Trace: [ 257.206731][T13313] [ 257.209696][T13313] dump_stack_lvl+0xf2/0x150 [ 257.214396][T13313] dump_stack+0x15/0x1a [ 257.218797][T13313] should_fail_ex+0x223/0x230 [ 257.223623][T13313] should_fail+0xb/0x10 [ 257.227913][T13313] should_fail_usercopy+0x1a/0x20 [ 257.233150][T13313] _copy_from_user+0x1e/0xb0 [ 257.237865][T13313] move_addr_to_kernel+0x82/0x120 [ 257.243003][T13313] __sys_sendto+0x12e/0x230 [ 257.247540][T13313] __x64_sys_sendto+0x78/0x90 [ 257.252313][T13313] x64_sys_call+0x29fa/0x2dc0 [ 257.257011][T13313] do_syscall_64+0xc9/0x1c0 [ 257.261538][T13313] ? clear_bhb_loop+0x55/0xb0 [ 257.266256][T13313] ? clear_bhb_loop+0x55/0xb0 [ 257.271040][T13313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.276997][T13313] RIP: 0033:0x7f933e0dff19 [ 257.281439][T13313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.301105][T13313] RSP: 002b:00007f933c757058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 257.309567][T13313] RAX: ffffffffffffffda RBX: 00007f933e2a5fa0 RCX: 00007f933e0dff19 [ 257.317583][T13313] RDX: 0000000000034000 RSI: 0000000020847fff RDI: 0000000000000004 [ 257.325612][T13313] RBP: 00007f933c7570a0 R08: 000000002005ffe4 R09: 000000000000001c [ 257.333667][T13313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.341665][T13313] R13: 0000000000000000 R14: 00007f933e2a5fa0 R15: 00007ffe929d1558 [ 257.349681][T13313] [ 257.422107][T13315] loop4: detected capacity change from 0 to 256 [ 257.439365][T13315] FAT-fs (loop4): bogus number of FAT sectors [ 257.445593][T13315] FAT-fs (loop4): Can't find a valid FAT filesystem [ 257.507583][T13319] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.569505][T13319] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.608276][T13319] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.648343][T13319] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.756171][T13322] loop1: detected capacity change from 0 to 512 [ 257.836693][T13322] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2975: Failed to acquire dquot type 1 [ 257.882632][T13322] EXT4-fs (loop1): 1 truncate cleaned up [ 257.885087][T13329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2977'. [ 257.890159][T13322] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.916383][T13322] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.955447][ T3376] hid (null): unknown global tag 0xc [ 257.960869][ T3376] hid (null): invalid report_count 1547616459 [ 257.963969][T13331] loop6: detected capacity change from 0 to 8192 [ 257.967138][ T3376] hid (null): unknown global tag 0xc [ 257.977297][ T3376] hid-generic 0003:B8DB:0000.0067: unknown main item tag 0xd [ 257.986506][ T3376] hid-generic 0003:B8DB:0000.0067: unknown global tag 0xc [ 257.993211][T13331] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 257.993621][ T3376] hid-generic 0003:B8DB:0000.0067: item 0 0 1 12 parsing failed [ 258.014071][ T3376] hid-generic 0003:B8DB:0000.0067: probe with driver hid-generic failed with error -22 [ 258.087125][T13339] rdma_rxe: rxe_newlink: failed to add lo [ 258.131578][T13331] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 258.140628][T13331] FAT-fs (loop6): Filesystem has been set read-only [ 258.156066][T13331] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 258.167938][T13331] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 258.170975][T13346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.180124][T13337] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 258.194702][T13346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.200112][T13348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.212256][T13348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.237647][T10996] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 258.592078][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.689913][T13356] loop1: detected capacity change from 0 to 256 [ 258.697097][T13356] FAT-fs (loop1): bogus number of FAT sectors [ 258.703239][T13356] FAT-fs (loop1): Can't find a valid FAT filesystem [ 259.021453][T13358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2989'. [ 259.050393][ T5829] hid (null): unknown global tag 0xc [ 259.055785][ T5829] hid (null): invalid report_count 1547616459 [ 259.061955][ T5829] hid (null): unknown global tag 0xc [ 259.098432][ T5829] hid-generic 0003:B8DB:0000.0068: unknown main item tag 0xd [ 259.105860][ T5829] hid-generic 0003:B8DB:0000.0068: unknown global tag 0xc [ 259.113046][ T5829] hid-generic 0003:B8DB:0000.0068: item 0 0 1 12 parsing failed [ 259.121473][ T5829] hid-generic 0003:B8DB:0000.0068: probe with driver hid-generic failed with error -22 [ 259.181793][T13366] rdma_rxe: rxe_newlink: failed to add lo [ 259.198654][T13364] siw: device registration error -23 [ 259.494948][T13364] lo speed is unknown, defaulting to 1000 [ 259.503952][T13374] loop4: detected capacity change from 0 to 256 [ 259.518170][T13319] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.533427][T13319] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.545505][T13374] FAT-fs (loop4): bogus number of FAT sectors [ 259.551710][T13374] FAT-fs (loop4): Can't find a valid FAT filesystem [ 259.566058][T13319] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.594257][T13377] loop2: detected capacity change from 0 to 8192 [ 259.600791][T13319] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.618551][T13377] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 259.757665][T13385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.802870][T13387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3001'. [ 259.829437][T13377] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 259.838314][T13377] FAT-fs (loop2): Filesystem has been set read-only [ 259.856395][T13385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.871778][T13377] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 259.882375][T13377] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 259.893567][T13380] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 259.957745][T12633] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 260.012578][ T3376] hid (null): unknown global tag 0xc [ 260.018148][ T3376] hid (null): invalid report_count 1547616459 [ 260.024266][ T3376] hid (null): unknown global tag 0xc [ 260.037571][ T3376] hid-generic 0003:B8DB:0000.0069: unknown main item tag 0xd [ 260.045058][ T3376] hid-generic 0003:B8DB:0000.0069: unknown global tag 0xc [ 260.052259][ T3376] hid-generic 0003:B8DB:0000.0069: item 0 0 1 12 parsing failed [ 260.056767][T13389] lo speed is unknown, defaulting to 1000 [ 260.071366][ T3376] hid-generic 0003:B8DB:0000.0069: probe with driver hid-generic failed with error -22 [ 260.101714][T13404] loop2: detected capacity change from 0 to 512 [ 260.108507][T13404] ext4: Unknown parameter 'obj_role' [ 260.194479][T13389] chnl_net:caif_netlink_parms(): no params data found [ 260.235560][T13389] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.242818][T13389] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.251513][T13389] bridge_slave_0: entered allmulticast mode [ 260.258229][T13389] bridge_slave_0: entered promiscuous mode [ 260.265221][T13389] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.272602][T13389] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.287098][T13389] bridge_slave_1: entered allmulticast mode [ 260.293666][T13389] bridge_slave_1: entered promiscuous mode [ 260.304064][ T3404] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.335286][T13389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.348149][T13389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.358654][ T3404] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.370344][T13405] loop2: detected capacity change from 0 to 256 [ 260.396128][T13405] loop2: detected capacity change from 0 to 1024 [ 260.418904][T13405] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 260.430398][T13389] team0: Port device team_slave_0 added [ 260.458032][T13405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.458040][ T3404] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.514040][T13416] loop4: detected capacity change from 0 to 256 [ 260.537247][T13416] FAT-fs (loop4): bogus number of FAT sectors [ 260.543397][T13416] FAT-fs (loop4): Can't find a valid FAT filesystem [ 260.565328][T13389] team0: Port device team_slave_1 added [ 260.576675][T13404] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 260.614963][T13389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.622108][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.648123][T13389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.708567][ T3404] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.778948][T13389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.785997][T13389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.811962][T13389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.856635][T12633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.900517][T13426] rdma_rxe: rxe_newlink: failed to add lo [ 260.916727][T13423] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.953565][T13427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3011'. [ 260.978823][T13429] siw: device registration error -23 [ 260.997199][T13423] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.199130][T13389] hsr_slave_0: entered promiscuous mode [ 261.205826][T13389] hsr_slave_1: entered promiscuous mode [ 261.252192][T13389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.259861][T13389] Cannot create hsr debugfs directory [ 261.280545][ T3404] macvlan0: left allmulticast mode [ 261.285731][ T3404] veth1_vlan: left allmulticast mode [ 261.291087][ T3404] macvlan0: left promiscuous mode [ 261.296419][ T3404] bridge0: port 3(macvlan0) entered disabled state [ 261.308676][ T3404] bridge_slave_1: left allmulticast mode [ 261.311373][ T3374] hid (null): unknown global tag 0xc [ 261.314356][ T3404] bridge_slave_1: left promiscuous mode [ 261.319726][ T3374] hid (null): invalid report_count 1547616459 [ 261.325394][ T3404] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.331434][ T3374] hid (null): unknown global tag 0xc [ 261.355649][ T3374] hid-generic 0003:B8DB:0000.006A: unknown main item tag 0xd [ 261.363160][ T3374] hid-generic 0003:B8DB:0000.006A: unknown global tag 0xc [ 261.370327][ T3374] hid-generic 0003:B8DB:0000.006A: item 0 0 1 12 parsing failed [ 261.380844][ T3404] bridge_slave_0: left allmulticast mode [ 261.380847][ T3374] hid-generic 0003:B8DB:0000.006A: probe with driver hid-generic failed with error -22 [ 261.396451][ T3404] bridge_slave_0: left promiscuous mode [ 261.402177][ T3404] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.508879][ T3404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.520227][ T3404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.533691][ T3404] bond0 (unregistering): Released all slaves [ 261.567486][T13423] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.584780][T13442] batadv_slave_0: entered promiscuous mode [ 261.592202][ T3404] IPVS: stopping master sync thread 9307 ... [ 261.632939][T13429] lo speed is unknown, defaulting to 1000 [ 261.646121][T13423] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.692451][T13445] loop4: detected capacity change from 0 to 8192 [ 261.701838][T13445] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.831327][T13423] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.849803][ T3404] hsr_slave_0: left promiscuous mode [ 261.863152][ T3404] hsr_slave_1: left promiscuous mode [ 261.871599][ T3404] veth1_vlan: left promiscuous mode [ 261.876940][ T3404] veth0_vlan: left promiscuous mode [ 261.929429][ T3404] infiniband syz2: set down [ 261.970110][ T3404] team0 (unregistering): Port device team_slave_1 removed [ 261.980769][ T3404] team0 (unregistering): Port device team_slave_0 removed [ 262.016027][ T57] smc: removing ib device syz2 [ 262.037596][T13423] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.062021][ T3374] lo speed is unknown, defaulting to 1000 [ 262.102456][T13423] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.124570][T13423] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.287391][T13470] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3018'. [ 262.484374][T13389] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 262.496815][T13389] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 262.513342][T13389] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 262.534497][T13389] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 262.659950][T13389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.661806][T13489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.683527][T13489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.688224][T13389] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.702086][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.709199][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.720997][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.728390][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.747893][T13389] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.758470][T13389] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.829800][T13389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.913416][T13389] veth0_vlan: entered promiscuous mode [ 262.923230][T13389] veth1_vlan: entered promiscuous mode [ 262.933960][T13504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3022'. [ 262.945488][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 262.945504][ T29] audit: type=1326 audit(1733401303.679:8943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 262.950575][T13389] veth0_macvtap: entered promiscuous mode [ 262.953597][ T29] audit: type=1326 audit(1733401303.679:8944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 262.979569][T13389] veth1_macvtap: entered promiscuous mode [ 263.008199][ T29] audit: type=1326 audit(1733401303.709:8945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 263.020094][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.034847][ T29] audit: type=1326 audit(1733401303.709:8946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 263.045205][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.045224][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.068717][ T29] audit: type=1326 audit(1733401303.709:8947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 263.078505][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.078525][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.088964][ T29] audit: type=1326 audit(1733401303.709:8948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f933e0de9cf code=0x7ffc0000 [ 263.112879][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.122671][ T29] audit: type=1326 audit(1733401303.709:8949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 263.190060][ T29] audit: type=1326 audit(1733401303.709:8950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f933e0de880 code=0x7ffc0000 [ 263.191454][T13389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.216200][ T29] audit: type=1326 audit(1733401303.949:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 263.226868][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.245583][ T29] audit: type=1326 audit(1733401303.949:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13503 comm="syz.0.3022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 263.256200][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.256226][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.256260][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.256275][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.321332][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.321354][T13389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.341854][T13389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.353759][T13389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.364074][T13389] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.373086][T13389] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.381886][T13389] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.390805][T13389] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.459649][T13510] loop1: detected capacity change from 0 to 512 [ 263.508621][T13510] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.2998: Failed to acquire dquot type 1 [ 263.524322][ T3372] hid (null): unknown global tag 0xc [ 263.529715][ T3372] hid (null): invalid report_count 1547616459 [ 263.535943][ T3372] hid (null): unknown global tag 0xc [ 263.564932][T13510] EXT4-fs (loop1): 1 truncate cleaned up [ 263.590052][ T3372] hid-generic 0003:B8DB:0000.006B: unknown main item tag 0xd [ 263.597525][ T3372] hid-generic 0003:B8DB:0000.006B: unknown global tag 0xc [ 263.604738][ T3372] hid-generic 0003:B8DB:0000.006B: item 0 0 1 12 parsing failed [ 263.615001][T13510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.639840][T13518] rdma_rxe: rxe_newlink: failed to add lo [ 263.645772][T13510] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.666555][ T3372] hid-generic 0003:B8DB:0000.006B: probe with driver hid-generic failed with error -22 [ 263.736810][T13523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.755719][T13523] batadv_slave_0: entered promiscuous mode [ 263.788227][T13524] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.868400][T13524] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.884274][T13528] loop2: detected capacity change from 0 to 256 [ 263.897696][T13528] FAT-fs (loop2): bogus number of FAT sectors [ 263.903909][T13528] FAT-fs (loop2): Can't find a valid FAT filesystem [ 263.916837][T13515] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 263.933317][T13524] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.008121][T13524] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.098779][T13524] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.128631][T13524] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.150818][T13524] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.179411][T13524] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.222192][T13534] siw: device registration error -23 [ 264.225327][T13532] loop2: detected capacity change from 0 to 8192 [ 264.242232][T13532] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.297982][T13389] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.422400][T13539] loop1: detected capacity change from 0 to 8192 [ 264.444259][T13539] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 264.457298][T13544] siw: device registration error -23 [ 264.579343][T13539] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 264.588907][T13539] FAT-fs (loop1): Filesystem has been set read-only [ 264.596293][T13539] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 264.605490][T13539] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 264.658888][T13546] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 264.745333][T13552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3036'. [ 264.781168][T13389] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 264.809334][ T9] hid (null): unknown global tag 0xc [ 264.814711][ T9] hid (null): invalid report_count 1547616459 [ 264.820927][ T9] hid (null): unknown global tag 0xc [ 264.851249][ T9] hid-generic 0003:B8DB:0000.006C: unknown main item tag 0xd [ 264.858757][ T9] hid-generic 0003:B8DB:0000.006C: unknown global tag 0xc [ 264.865886][ T9] hid-generic 0003:B8DB:0000.006C: item 0 0 1 12 parsing failed [ 264.877535][ T9] hid-generic 0003:B8DB:0000.006C: probe with driver hid-generic failed with error -22 [ 264.890888][T13557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.900676][T13557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.911559][T13559] rdma_rxe: rxe_newlink: failed to add lo [ 265.080632][T13566] loop2: detected capacity change from 0 to 256 [ 265.102201][T13566] FAT-fs (loop2): bogus number of FAT sectors [ 265.108485][T13566] FAT-fs (loop2): Can't find a valid FAT filesystem [ 265.569917][T13572] pim6reg1: entered promiscuous mode [ 265.575535][T13572] pim6reg1: entered allmulticast mode [ 265.804850][T13577] siw: device registration error -23 [ 265.915867][T13582] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.948383][T13584] loop1: detected capacity change from 0 to 8192 [ 265.955754][T13584] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.978703][T13582] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.071877][T13582] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.083671][ T9] hid (null): unknown global tag 0xc [ 266.089122][ T9] hid (null): invalid report_count 1547616459 [ 266.095332][ T9] hid (null): unknown global tag 0xc [ 266.102418][ T9] hid-generic 0003:B8DB:0000.006D: unknown main item tag 0xd [ 266.109904][ T9] hid-generic 0003:B8DB:0000.006D: unknown global tag 0xc [ 266.117209][ T9] hid-generic 0003:B8DB:0000.006D: item 0 0 1 12 parsing failed [ 266.125124][ T9] hid-generic 0003:B8DB:0000.006D: probe with driver hid-generic failed with error -22 [ 266.157589][T13584] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 266.166586][T13584] FAT-fs (loop1): Filesystem has been set read-only [ 266.173790][T13584] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 266.182989][T13584] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 266.193148][T13590] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 266.279027][T13582] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.337882][T13389] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 266.499783][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3053'. [ 266.555920][T13600] loop6: detected capacity change from 0 to 8192 [ 266.569078][T13604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.572197][T13582] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.590783][T13582] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.600673][T13604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.602437][T13582] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.621599][T13582] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.631022][T13600] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 267.404458][T13612] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.466012][T13618] siw: device registration error -23 [ 267.473098][T13612] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.507989][T13623] rdma_rxe: rxe_newlink: failed to add lo [ 267.539650][T13612] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.608318][T13612] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.738764][T13626] loop6: detected capacity change from 0 to 512 [ 267.778570][T13626] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.3061: Failed to acquire dquot type 1 [ 267.804427][T13626] EXT4-fs (loop6): 1 truncate cleaned up [ 267.819249][T13626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.833668][T13632] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3060'. [ 267.873486][T13626] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.946393][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 267.946412][ T29] audit: type=1326 audit(1733401308.669:9107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.6.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 267.988398][ T29] audit: type=1326 audit(1733401308.689:9108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.6.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 268.012046][ T29] audit: type=1326 audit(1733401308.689:9109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.6.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 268.035828][ T29] audit: type=1326 audit(1733401308.689:9110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.6.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 268.059770][ T29] audit: type=1326 audit(1733401308.689:9111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.6.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 268.083458][ T29] audit: type=1326 audit(1733401308.689:9112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.6.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 268.107458][ T29] audit: type=1326 audit(1733401308.699:9113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.6.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 268.131087][ T29] audit: type=1326 audit(1733401308.699:9114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.6.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 268.154773][ T29] audit: type=1326 audit(1733401308.699:9115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.6.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 268.178411][ T29] audit: type=1326 audit(1733401308.699:9116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13625 comm="syz.6.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f5814d9ff19 code=0x7ffc0000 [ 268.263380][T13641] loop4: detected capacity change from 0 to 256 [ 268.286488][T13641] FAT-fs (loop4): bogus number of FAT sectors [ 268.292625][T13641] FAT-fs (loop4): Can't find a valid FAT filesystem [ 268.311447][T13640] loop1: detected capacity change from 0 to 8192 [ 268.349433][T13640] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 268.490356][T13640] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 268.499235][T13640] FAT-fs (loop1): Filesystem has been set read-only [ 268.506504][T13640] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 268.517355][T13640] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 268.527347][T13647] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 268.570920][T10996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.613142][T13389] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 268.623260][T13653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.631896][T13653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.739960][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3070'. [ 268.775965][T13660] siw: device registration error -23 [ 268.863986][T13664] rdma_rxe: rxe_newlink: failed to add lo [ 268.890767][T13666] siw: device registration error -23 [ 269.059053][T13672] loop1: detected capacity change from 0 to 512 [ 269.070578][T13673] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3074'. [ 269.082359][T13672] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3084: Failed to acquire dquot type 1 [ 269.095805][T13672] EXT4-fs (loop1): 1 truncate cleaned up [ 269.108059][T13672] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.124745][T13672] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.166963][ T3363] hid (null): unknown global tag 0xc [ 269.172385][ T3363] hid (null): invalid report_count 1547616459 [ 269.178561][ T3363] hid (null): unknown global tag 0xc [ 269.184826][ T3363] hid-generic 0003:B8DB:0000.006E: unknown main item tag 0xd [ 269.192435][ T3363] hid-generic 0003:B8DB:0000.006E: unknown global tag 0xc [ 269.199626][ T3363] hid-generic 0003:B8DB:0000.006E: item 0 0 1 12 parsing failed [ 269.208062][ T3363] hid-generic 0003:B8DB:0000.006E: probe with driver hid-generic failed with error -22 [ 269.287874][T13681] loop4: detected capacity change from 0 to 256 [ 269.294601][T13681] FAT-fs (loop4): bogus number of FAT sectors [ 269.300836][T13681] FAT-fs (loop4): Can't find a valid FAT filesystem [ 269.535213][T13684] loop6: detected capacity change from 0 to 256 [ 269.553665][T13684] FAT-fs (loop6): bogus number of FAT sectors [ 269.559847][T13684] FAT-fs (loop6): Can't find a valid FAT filesystem [ 269.610537][T13686] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 269.704813][T13690] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.3079'. [ 269.734831][T13690] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.3079'. [ 269.744023][T13690] netlink: 508 bytes leftover after parsing attributes in process `syz.0.3079'. [ 269.817444][T13694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3080'. [ 269.888023][T13693] loop6: detected capacity change from 0 to 8192 [ 269.909201][T13389] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.928360][T13693] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 269.973934][T13698] wireguard0: entered promiscuous mode [ 269.979801][T13698] wireguard0: entered allmulticast mode [ 270.027073][T13701] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.3083'. [ 270.061713][T13693] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 270.070645][T13693] FAT-fs (loop6): Filesystem has been set read-only [ 270.070873][T13701] netlink: 4696 bytes leftover after parsing attributes in process `syz.1.3083'. [ 270.091596][T13693] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 270.102125][T13693] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 270.111920][T13700] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 270.185211][T13710] loop4: detected capacity change from 0 to 256 [ 270.204435][T13710] FAT-fs (loop4): bogus number of FAT sectors [ 270.205880][T10996] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 270.210707][T13710] FAT-fs (loop4): Can't find a valid FAT filesystem [ 270.367764][ T3372] hid (null): unknown global tag 0xc [ 270.373153][ T3372] hid (null): invalid report_count 1547616459 [ 270.379420][ T3372] hid (null): unknown global tag 0xc [ 270.424828][ T3372] hid-generic 0003:B8DB:0000.006F: unknown main item tag 0xd [ 270.432420][ T3372] hid-generic 0003:B8DB:0000.006F: unknown global tag 0xc [ 270.439676][ T3372] hid-generic 0003:B8DB:0000.006F: item 0 0 1 12 parsing failed [ 270.491459][T13718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.505571][ T3372] hid-generic 0003:B8DB:0000.006F: probe with driver hid-generic failed with error -22 [ 270.521750][T13718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.607366][T13721] siw: device registration error -23 [ 271.064628][T13729] loop6: detected capacity change from 0 to 256 [ 271.082684][T13731] rdma_rxe: rxe_newlink: failed to add lo [ 271.131569][T13612] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.150482][T13729] FAT-fs (loop6): bogus number of FAT sectors [ 271.156662][T13729] FAT-fs (loop6): Can't find a valid FAT filesystem [ 271.178065][T13612] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.189671][T13612] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.200853][T13612] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.378552][T13737] IPv6: NLM_F_CREATE should be specified when creating new route [ 271.390028][T13737] loop2: detected capacity change from 0 to 512 [ 271.404371][T13733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=13733 comm=syz.1.3094 [ 271.422336][T13737] EXT4-fs: Ignoring removed orlov option [ 271.435038][T13737] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 271.529563][T13737] EXT4-fs (loop2): 1 orphan inode deleted [ 271.535450][T13737] EXT4-fs (loop2): 1 truncate cleaned up [ 271.557095][T13737] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.593567][T13737] EXT4-fs error (device loop2): ext4_check_all_de:656: inode #12: block 7: comm syz.2.3096: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=272, size=124 fake=0 [ 271.631243][T13742] loop4: detected capacity change from 0 to 512 [ 271.769675][T13748] loop1: detected capacity change from 0 to 256 [ 271.814744][T13748] FAT-fs (loop1): bogus number of FAT sectors [ 271.820916][T13748] FAT-fs (loop1): Can't find a valid FAT filesystem [ 271.852571][T12633] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.934846][T13742] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3098: Failed to acquire dquot type 1 [ 271.993679][T13742] EXT4-fs (loop4): 1 truncate cleaned up [ 272.000866][T13742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.015432][T13759] loop2: detected capacity change from 0 to 256 [ 272.029899][ T3376] hid (null): unknown global tag 0xc [ 272.035278][ T3376] hid (null): invalid report_count 1547616459 [ 272.041477][ T3376] hid (null): unknown global tag 0xc [ 272.048072][T13762] siw: device registration error -23 [ 272.053558][T13759] FAT-fs (loop2): bogus number of FAT sectors [ 272.059734][T13759] FAT-fs (loop2): Can't find a valid FAT filesystem [ 272.112245][ T3376] hid-generic 0003:B8DB:0000.0070: unknown main item tag 0xd [ 272.119794][ T3376] hid-generic 0003:B8DB:0000.0070: unknown global tag 0xc [ 272.126984][ T3376] hid-generic 0003:B8DB:0000.0070: item 0 0 1 12 parsing failed [ 272.135757][T13742] ext4 filesystem being mounted at /586/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.178095][ T3376] hid-generic 0003:B8DB:0000.0070: probe with driver hid-generic failed with error -22 [ 272.283319][T13769] rdma_rxe: rxe_newlink: failed to add lo [ 272.402436][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.447309][T13776] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.479924][T13780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.501449][T13780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.579093][T13776] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.642206][T13776] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.670629][T13783] wireguard0: entered promiscuous mode [ 272.676263][T13783] wireguard0: entered allmulticast mode [ 272.751246][T13776] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.861224][T13790] __nla_validate_parse: 7 callbacks suppressed [ 272.861245][T13790] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3112'. [ 272.904579][T13791] loop6: detected capacity change from 0 to 256 [ 272.925410][T13791] FAT-fs (loop6): bogus number of FAT sectors [ 272.931581][T13791] FAT-fs (loop6): Can't find a valid FAT filesystem [ 273.041795][T13794] loop1: detected capacity change from 0 to 256 [ 273.054730][T13794] FAT-fs (loop1): bogus number of FAT sectors [ 273.060994][T13794] FAT-fs (loop1): Can't find a valid FAT filesystem [ 273.388020][T13802] loop4: detected capacity change from 0 to 256 [ 273.410310][T13802] FAT-fs (loop4): bogus number of FAT sectors [ 273.416545][T13802] FAT-fs (loop4): Can't find a valid FAT filesystem [ 273.719335][T13809] siw: device registration error -23 [ 273.859739][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 273.859759][ T29] audit: type=1326 audit(1733401314.589:9502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 273.914679][ T3374] hid (null): unknown global tag 0xc [ 273.920120][ T3374] hid (null): invalid report_count 1547616459 [ 273.926233][ T3374] hid (null): unknown global tag 0xc [ 273.961519][ T3374] hid-generic 0003:B8DB:0000.0071: unknown main item tag 0xd [ 273.969041][ T3374] hid-generic 0003:B8DB:0000.0071: unknown global tag 0xc [ 273.976192][ T3374] hid-generic 0003:B8DB:0000.0071: item 0 0 1 12 parsing failed [ 273.976213][ T29] audit: type=1326 audit(1733401314.619:9503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 274.007475][ T29] audit: type=1326 audit(1733401314.619:9504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 274.031116][ T29] audit: type=1326 audit(1733401314.619:9505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 274.040579][ T3374] hid-generic 0003:B8DB:0000.0071: probe with driver hid-generic failed with error -22 [ 274.054657][ T29] audit: type=1326 audit(1733401314.619:9506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f933e0dff53 code=0x7ffc0000 [ 274.087669][ T29] audit: type=1326 audit(1733401314.619:9507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f933e0dff53 code=0x7ffc0000 [ 274.111174][ T29] audit: type=1326 audit(1733401314.619:9508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 274.134702][ T29] audit: type=1326 audit(1733401314.619:9509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 274.158490][ T29] audit: type=1326 audit(1733401314.619:9510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 274.182069][ T29] audit: type=1326 audit(1733401314.619:9511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13812 comm="syz.0.3118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 274.249810][T13823] rdma_rxe: rxe_newlink: failed to add lo [ 274.265591][T13824] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 274.299710][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3123'. [ 274.358037][T13831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.387738][T13831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.478896][T13833] loop6: detected capacity change from 0 to 8192 [ 274.538711][T13833] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.154802][T13841] loop1: detected capacity change from 0 to 8192 [ 275.166689][T13841] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 275.291708][T13841] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 275.300676][T13841] FAT-fs (loop1): Filesystem has been set read-only [ 275.311606][T13841] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 275.321720][T13841] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 275.322482][T13848] loop4: detected capacity change from 0 to 256 [ 275.333210][T13842] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 275.347912][T13849] loop6: detected capacity change from 0 to 256 [ 275.355940][T13849] FAT-fs (loop6): bogus number of FAT sectors [ 275.362193][T13849] FAT-fs (loop6): Can't find a valid FAT filesystem [ 275.369603][T13848] FAT-fs (loop4): bogus number of FAT sectors [ 275.375924][T13848] FAT-fs (loop4): Can't find a valid FAT filesystem [ 275.523124][ T24] hid (null): unknown global tag 0xc [ 275.528573][ T24] hid (null): invalid report_count 1547616459 [ 275.534753][ T24] hid (null): unknown global tag 0xc [ 275.557301][ T24] hid-generic 0003:B8DB:0000.0072: unknown main item tag 0xd [ 275.564735][ T24] hid-generic 0003:B8DB:0000.0072: unknown global tag 0xc [ 275.572087][ T24] hid-generic 0003:B8DB:0000.0072: item 0 0 1 12 parsing failed [ 275.581743][T13855] siw: device registration error -23 [ 275.606400][ T24] hid-generic 0003:B8DB:0000.0072: probe with driver hid-generic failed with error -22 [ 275.977011][T13864] rdma_rxe: rxe_newlink: failed to add lo [ 276.058740][T13776] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.125734][T13776] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.190492][T13866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3136'. [ 276.219956][T13869] loop4: detected capacity change from 0 to 512 [ 276.289471][T13869] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3137: Failed to acquire dquot type 1 [ 276.307707][T13776] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.488887][T13869] EXT4-fs (loop4): 1 truncate cleaned up [ 276.498551][T13776] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.573750][T13869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.589176][T13869] ext4 filesystem being mounted at /593/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.666766][T13882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.676437][T13886] loop2: detected capacity change from 0 to 8192 [ 276.694030][T13882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.708387][T13886] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.004280][T13886] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 277.013364][T13886] FAT-fs (loop2): Filesystem has been set read-only [ 277.062522][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.086528][T13886] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 277.130985][T13886] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 277.166919][T13889] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 277.227778][T13895] wireguard0: entered promiscuous mode [ 277.233306][T13895] wireguard0: entered allmulticast mode [ 277.256396][T12633] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 277.272917][T13897] netlink: 4696 bytes leftover after parsing attributes in process `syz.6.3145'. [ 277.293970][T13897] netlink: 4696 bytes leftover after parsing attributes in process `syz.6.3145'. [ 277.303316][T13897] netlink: 508 bytes leftover after parsing attributes in process `syz.6.3145'. [ 277.314838][T13899] loop4: detected capacity change from 0 to 256 [ 277.326508][T13900] siw: device registration error -23 [ 277.346651][T13899] FAT-fs (loop4): bogus number of FAT sectors [ 277.352784][T13899] FAT-fs (loop4): Can't find a valid FAT filesystem [ 277.654468][ T5829] hid (null): unknown global tag 0xc [ 277.659924][ T5829] hid (null): invalid report_count 1547616459 [ 277.666133][ T5829] hid (null): unknown global tag 0xc [ 277.696600][T13908] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3149'. [ 277.728372][ T5829] hid-generic 0003:B8DB:0000.0073: unknown main item tag 0xd [ 277.735971][ T5829] hid-generic 0003:B8DB:0000.0073: unknown global tag 0xc [ 277.743174][ T5829] hid-generic 0003:B8DB:0000.0073: item 0 0 1 12 parsing failed [ 277.811610][ T5829] hid-generic 0003:B8DB:0000.0073: probe with driver hid-generic failed with error -22 [ 277.823780][T13915] loop6: detected capacity change from 0 to 256 [ 277.839370][T13915] FAT-fs (loop6): bogus number of FAT sectors [ 277.845515][T13915] FAT-fs (loop6): Can't find a valid FAT filesystem [ 277.939780][T13917] rdma_rxe: rxe_newlink: failed to add lo [ 278.268679][T13924] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.418811][T13924] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.511443][T13924] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.656309][T13931] loop6: detected capacity change from 0 to 8192 [ 278.661167][T13932] loop2: detected capacity change from 0 to 8192 [ 278.679440][T13931] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 278.682562][T13932] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 278.739418][T13934] siw: device registration error -23 [ 278.816537][T13924] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.862189][T13931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 278.871045][T13931] FAT-fs (loop6): Filesystem has been set read-only [ 278.883130][T13931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 278.892406][T13931] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 278.902068][T13936] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 278.920666][T13924] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.932044][T13924] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.949678][T13924] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.962864][T13924] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.012659][T10996] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 279.088623][T13946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.110267][T13946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.159740][T13950] loop4: detected capacity change from 0 to 256 [ 279.166749][T13950] FAT-fs (loop4): bogus number of FAT sectors [ 279.172906][T13950] FAT-fs (loop4): Can't find a valid FAT filesystem [ 279.206078][T13949] siw: device registration error -23 [ 279.534954][T13956] rdma_rxe: rxe_newlink: failed to add lo [ 279.753346][T13960] loop4: detected capacity change from 0 to 256 [ 279.785725][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3166'. [ 279.805420][T13960] FAT-fs (loop4): bogus number of FAT sectors [ 279.811627][T13960] FAT-fs (loop4): Can't find a valid FAT filesystem [ 279.835418][T13964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3164'. [ 279.856207][ T29] kauditd_printk_skb: 257 callbacks suppressed [ 279.856223][ T29] audit: type=1326 audit(1733401320.579:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72db5ff19 code=0x7ffc0000 [ 279.927373][ T29] audit: type=1326 audit(1733401320.589:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fc72db5ff19 code=0x7ffc0000 [ 279.951762][ T29] audit: type=1326 audit(1733401320.589:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72db5ff19 code=0x7ffc0000 [ 279.975463][ T29] audit: type=1326 audit(1733401320.589:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc72db5ff19 code=0x7ffc0000 [ 279.999072][ T29] audit: type=1326 audit(1733401320.589:9771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72db5ff19 code=0x7ffc0000 [ 280.022705][ T29] audit: type=1326 audit(1733401320.589:9772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc72db5e9cf code=0x7ffc0000 [ 280.046233][ T29] audit: type=1326 audit(1733401320.589:9773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72db5ff19 code=0x7ffc0000 [ 280.069923][ T29] audit: type=1326 audit(1733401320.589:9774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc72db5e880 code=0x7ffc0000 [ 280.093465][ T29] audit: type=1326 audit(1733401320.629:9775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc72db5ff19 code=0x7ffc0000 [ 280.093558][ T29] audit: type=1326 audit(1733401320.639:9776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13961 comm="syz.1.3166" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fc72db5ff19 code=0x7ffc0000 [ 280.274874][ T3376] hid (null): unknown global tag 0xc [ 280.280470][ T3376] hid (null): invalid report_count 1547616459 [ 280.286666][ T3376] hid (null): unknown global tag 0xc [ 280.304006][ T3376] hid-generic 0003:B8DB:0000.0074: unknown main item tag 0xd [ 280.311614][ T3376] hid-generic 0003:B8DB:0000.0074: unknown global tag 0xc [ 280.318796][ T3376] hid-generic 0003:B8DB:0000.0074: item 0 0 1 12 parsing failed [ 280.345292][ T3376] hid-generic 0003:B8DB:0000.0074: probe with driver hid-generic failed with error -22 [ 280.475625][T13979] loop1: detected capacity change from 0 to 512 [ 280.578927][T13976] loop6: detected capacity change from 0 to 8192 [ 280.595608][T13976] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 280.828663][T13976] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 280.837521][T13976] FAT-fs (loop6): Filesystem has been set read-only [ 280.895208][T13976] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 280.957195][T13976] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 281.011483][T13983] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 281.014252][T13979] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.3172: Failed to acquire dquot type 1 [ 281.033048][T13979] EXT4-fs (loop1): 1 truncate cleaned up [ 281.039187][T13979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.051822][T13979] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.128346][T13997] loop2: detected capacity change from 0 to 256 [ 281.157348][T13997] FAT-fs (loop2): bogus number of FAT sectors [ 281.163564][T13997] FAT-fs (loop2): Can't find a valid FAT filesystem [ 281.173506][T13999] rdma_rxe: rxe_newlink: failed to add lo [ 281.411089][T14005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.481021][T13389] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.492171][T14005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.629448][T14010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3178'. [ 281.709634][T14013] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.3180'. [ 281.711352][T13985] chnl_net:caif_netlink_parms(): no params data found [ 281.719004][T14013] netlink: 4696 bytes leftover after parsing attributes in process `syz.2.3180'. [ 281.735001][T14013] netlink: 508 bytes leftover after parsing attributes in process `syz.2.3180'. [ 281.750107][T14015] siw: device registration error -23 [ 281.793716][T13985] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.800974][T13985] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.809778][T13985] bridge_slave_0: entered allmulticast mode [ 281.816918][T13985] bridge_slave_0: entered promiscuous mode [ 281.824180][T13985] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.831512][T13985] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.838840][T13985] bridge_slave_1: entered allmulticast mode [ 281.845321][T13985] bridge_slave_1: entered promiscuous mode [ 281.871043][T13985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.885115][T13985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.924534][T13985] team0: Port device team_slave_0 added [ 281.932684][T13985] team0: Port device team_slave_1 added [ 281.956336][T13985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.963472][T13985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.964409][ T3363] hid (null): unknown global tag 0xc [ 281.989438][T13985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.005433][ T3363] hid (null): invalid report_count 1547616459 [ 282.011718][ T3363] hid (null): unknown global tag 0xc [ 282.021904][T13985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.028989][T13985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.054916][T13985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.094599][ T3363] hid-generic 0003:B8DB:0000.0075: unknown main item tag 0xd [ 282.102098][ T3363] hid-generic 0003:B8DB:0000.0075: unknown global tag 0xc [ 282.109306][ T3363] hid-generic 0003:B8DB:0000.0075: item 0 0 1 12 parsing failed [ 282.126697][ T3363] hid-generic 0003:B8DB:0000.0075: probe with driver hid-generic failed with error -22 [ 282.162096][T13985] hsr_slave_0: entered promiscuous mode [ 282.176852][T13985] hsr_slave_1: entered promiscuous mode [ 282.184452][T13985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.192255][T13985] Cannot create hsr debugfs directory [ 282.345526][T14036] loop1: detected capacity change from 0 to 256 [ 282.360744][T14036] FAT-fs (loop1): bogus number of FAT sectors [ 282.366901][T14036] FAT-fs (loop1): Can't find a valid FAT filesystem [ 282.421845][T13985] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.426472][T14035] loop6: detected capacity change from 0 to 8192 [ 282.452760][T14035] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 282.497767][T13985] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.539346][T13985] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.613693][T13985] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.624909][T14035] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 282.633889][T14035] FAT-fs (loop6): Filesystem has been set read-only [ 282.655543][T14035] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 282.694518][T14035] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 282.706748][T14040] loop2: detected capacity change from 0 to 4096 [ 282.711475][T13985] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 282.728293][T14037] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 282.740590][T13985] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 282.773221][T14040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 282.811612][T13985] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 282.825421][T10996] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 282.846847][T14040] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.868688][T13985] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 282.961375][T14048] loop6: detected capacity change from 0 to 512 [ 282.994067][T14050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3190'. [ 283.021212][T14048] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.3188: Failed to acquire dquot type 1 [ 283.047180][T14048] EXT4-fs (loop6): 1 truncate cleaned up [ 283.058948][T13985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.066030][T14048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.090307][T14057] rdma_rxe: rxe_newlink: failed to add lo [ 283.100089][T14048] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.114341][T13985] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.145001][ T3404] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.152134][ T3404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.170206][ T3363] hid (null): unknown global tag 0xc [ 283.175586][ T3363] hid (null): invalid report_count 1547616459 [ 283.176912][T13985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.181756][ T3363] hid (null): unknown global tag 0xc [ 283.192146][T13985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 283.213368][ T3404] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.220584][ T3404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.259165][T14061] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 283.270422][ T3363] hid-generic 0003:B8DB:0000.0076: unknown main item tag 0xd [ 283.277896][ T3363] hid-generic 0003:B8DB:0000.0076: unknown global tag 0xc [ 283.285148][ T3363] hid-generic 0003:B8DB:0000.0076: item 0 0 1 12 parsing failed [ 283.293667][T13985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.307414][T14059] loop2: detected capacity change from 0 to 8192 [ 283.337655][ T3363] hid-generic 0003:B8DB:0000.0076: probe with driver hid-generic failed with error -22 [ 283.349440][T14059] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 283.395034][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 283.414010][T14078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.441433][T14078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.509782][T13985] veth0_vlan: entered promiscuous mode [ 283.519929][T13985] veth1_vlan: entered promiscuous mode [ 283.539464][T13985] veth0_macvtap: entered promiscuous mode [ 283.549060][T13985] veth1_macvtap: entered promiscuous mode [ 283.561974][T13985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.572596][T13985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.582535][T13985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.592980][T13985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.602869][T13985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.613445][T13985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.626617][T13985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.638458][T13985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.648957][T13985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.658920][T13985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.669456][T13985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.679373][T13985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.689884][T13985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.699816][T13985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.710281][T13985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.720316][T13985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.730807][T13985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.741624][T13985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.752219][T13985] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.761090][T13985] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.769835][T13985] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.778801][T13985] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.800370][T10996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.960594][T14092] loop6: detected capacity change from 0 to 8192 [ 283.977655][T14095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.982147][T14092] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 284.029248][T14095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.099345][T14095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.128427][T14092] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 284.137385][T14092] FAT-fs (loop6): Filesystem has been set read-only [ 284.145861][T14092] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 284.157421][T14092] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 284.168215][T14097] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 284.179225][T14095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.243370][T14101] loop2: detected capacity change from 0 to 256 [ 284.250497][T14101] FAT-fs (loop2): bogus number of FAT sectors [ 284.256771][T14101] FAT-fs (loop2): Can't find a valid FAT filesystem [ 284.339638][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3201'. [ 284.393797][T14107] siw: device registration error -23 [ 284.411461][T14108] loop6: detected capacity change from 0 to 256 [ 284.437715][T14108] FAT-fs (loop6): bogus number of FAT sectors [ 284.443849][T14108] FAT-fs (loop6): Can't find a valid FAT filesystem [ 284.540149][T14113] loop1: detected capacity change from 0 to 256 [ 284.590890][T14113] FAT-fs (loop1): bogus number of FAT sectors [ 284.597068][T14113] FAT-fs (loop1): Can't find a valid FAT filesystem [ 284.605524][T14117] rdma_rxe: rxe_newlink: failed to add lo [ 284.636063][ T3374] hid (null): unknown global tag 0xc [ 284.641475][ T3374] hid (null): invalid report_count 1547616459 [ 284.647664][ T3374] hid (null): unknown global tag 0xc [ 284.672794][ T3374] hid-generic 0003:B8DB:0000.0077: unknown main item tag 0xd [ 284.680459][ T3374] hid-generic 0003:B8DB:0000.0077: unknown global tag 0xc [ 284.687699][ T3374] hid-generic 0003:B8DB:0000.0077: item 0 0 1 12 parsing failed [ 284.733478][ T3374] hid-generic 0003:B8DB:0000.0077: probe with driver hid-generic failed with error -22 [ 284.867129][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 284.867148][ T29] audit: type=1326 audit(1733401325.599:10048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 284.917917][T14125] loop6: detected capacity change from 0 to 512 [ 284.927572][T14123] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 284.948534][ T29] audit: type=1326 audit(1733401325.629:10049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 284.971754][ T29] audit: type=1326 audit(1733401325.629:10050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 284.994944][ T29] audit: type=1326 audit(1733401325.629:10051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 285.018152][ T29] audit: type=1326 audit(1733401325.629:10052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 285.041114][ T29] audit: type=1326 audit(1733401325.629:10053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 285.064255][ T29] audit: type=1326 audit(1733401325.629:10054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 285.087347][ T29] audit: type=1326 audit(1733401325.629:10055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 285.111086][ T29] audit: type=1326 audit(1733401325.629:10056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 285.134570][ T29] audit: type=1326 audit(1733401325.649:10057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14122 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=243 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 285.193971][T14125] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.3207: Failed to acquire dquot type 1 [ 285.207697][T14125] EXT4-fs (loop6): 1 truncate cleaned up [ 285.228025][T14125] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.252178][T14095] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.266434][T14131] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.3210'. [ 285.267835][T14125] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.290248][T14095] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.298748][T14131] netlink: 4696 bytes leftover after parsing attributes in process `syz.0.3210'. [ 285.307996][T14131] netlink: 508 bytes leftover after parsing attributes in process `syz.0.3210'. [ 285.323612][T14129] loop2: detected capacity change from 0 to 8192 [ 285.336711][T14095] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.345606][T14133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.361107][T14133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.369216][T14129] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 285.374455][T14095] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.633804][T14144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3214'. [ 285.670204][T14146] siw: device registration error -23 [ 285.712650][T10996] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.057108][ T3363] hid (null): unknown global tag 0xc [ 286.062495][ T3363] hid (null): invalid report_count 1547616459 [ 286.068780][ T3363] hid (null): unknown global tag 0xc [ 286.100844][ T3363] hid-generic 0003:B8DB:0000.0078: unknown main item tag 0xd [ 286.108428][ T3363] hid-generic 0003:B8DB:0000.0078: unknown global tag 0xc [ 286.115690][ T3363] hid-generic 0003:B8DB:0000.0078: item 0 0 1 12 parsing failed [ 286.134374][ T3363] hid-generic 0003:B8DB:0000.0078: probe with driver hid-generic failed with error -22 [ 286.267183][T14155] rdma_rxe: rxe_newlink: failed to add lo [ 286.278716][T14157] loop6: detected capacity change from 0 to 256 [ 286.304800][T14157] FAT-fs (loop6): bogus number of FAT sectors [ 286.311036][T14157] FAT-fs (loop6): Can't find a valid FAT filesystem [ 286.324856][T14158] loop1: detected capacity change from 0 to 256 [ 286.389324][T14158] FAT-fs (loop1): bogus number of FAT sectors [ 286.395496][T14158] FAT-fs (loop1): Can't find a valid FAT filesystem [ 286.462587][T14166] loop2: detected capacity change from 0 to 256 [ 286.502161][T14165] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 286.525103][T14166] FAT-fs (loop2): bogus number of FAT sectors [ 286.531343][T14166] FAT-fs (loop2): Can't find a valid FAT filesystem [ 286.677340][T14171] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.3224'. [ 286.724631][T14171] netlink: 4696 bytes leftover after parsing attributes in process `syz.4.3224'. [ 286.733945][T14171] netlink: 508 bytes leftover after parsing attributes in process `syz.4.3224'. [ 287.085052][T14176] loop4: detected capacity change from 0 to 512 [ 287.112511][T14174] loop6: detected capacity change from 0 to 8192 [ 287.127689][T14177] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.181432][T14174] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.198142][T14176] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3226: Failed to acquire dquot type 1 [ 287.224411][T14179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3227'. [ 287.234555][T14176] EXT4-fs (loop4): 1 truncate cleaned up [ 287.240727][T14176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.253307][T14176] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.269097][T14177] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.297307][T14185] siw: device registration error -23 [ 287.316317][T14182] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 287.341505][T14190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.351462][T14190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.427604][T14174] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 287.436558][T14174] FAT-fs (loop6): Filesystem has been set read-only [ 287.443667][T14174] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 287.453146][T14174] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 287.462947][T14188] FAT-fs (loop6): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 287.467393][T14177] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.481537][T14194] loop2: detected capacity change from 0 to 8192 [ 287.488745][T14194] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 287.527905][T14177] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.604969][T14177] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.617343][T14177] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.629973][T14177] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.643616][T14177] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.848365][ T3374] hid (null): unknown global tag 0xc [ 287.853715][ T3374] hid (null): invalid report_count 1547616459 [ 287.859882][ T3374] hid (null): unknown global tag 0xc [ 287.887421][ T3374] hid-generic 0003:B8DB:0000.0079: unknown main item tag 0xd [ 287.894949][ T3374] hid-generic 0003:B8DB:0000.0079: unknown global tag 0xc [ 287.902139][ T3374] hid-generic 0003:B8DB:0000.0079: item 0 0 1 12 parsing failed [ 287.910715][ T3374] hid-generic 0003:B8DB:0000.0079: probe with driver hid-generic failed with error -22 [ 287.940146][T13985] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.962008][T14207] rdma_rxe: rxe_newlink: failed to add lo [ 288.058488][T14212] loop4: detected capacity change from 0 to 256 [ 288.079686][T14212] FAT-fs (loop4): bogus number of FAT sectors [ 288.085834][T14212] FAT-fs (loop4): Can't find a valid FAT filesystem [ 288.246483][T14218] loop1: detected capacity change from 0 to 256 [ 288.286142][T14218] FAT-fs (loop1): bogus number of FAT sectors [ 288.292343][T14218] FAT-fs (loop1): Can't find a valid FAT filesystem [ 288.436634][T14226] siw: device registration error -23 [ 288.478416][T14224] loop4: detected capacity change from 0 to 8192 [ 288.492518][T14224] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 288.522480][T14230] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.618200][T14230] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.682291][T14224] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 288.691261][T14224] FAT-fs (loop4): Filesystem has been set read-only [ 288.711164][T14230] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.728684][T14224] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 288.750258][T14224] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 288.767341][T14232] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 288.787894][T14230] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.845446][T14230] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.860013][T13985] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 288.880128][T14230] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.928391][T14230] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.931139][ T3374] hid (null): unknown global tag 0xc [ 288.942219][ T3374] hid (null): invalid report_count 1547616459 [ 288.948375][ T3374] hid (null): unknown global tag 0xc [ 288.971443][T14230] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.992659][T14242] rdma_rxe: rxe_newlink: failed to add lo [ 288.997226][ T3374] hid-generic 0003:B8DB:0000.007A: unknown main item tag 0xd [ 289.005863][ T3374] hid-generic 0003:B8DB:0000.007A: unknown global tag 0xc [ 289.007690][T14240] loop4: detected capacity change from 0 to 512 [ 289.013159][ T3374] hid-generic 0003:B8DB:0000.007A: item 0 0 1 12 parsing failed [ 289.029244][ T3374] hid-generic 0003:B8DB:0000.007A: probe with driver hid-generic failed with error -22 [ 289.058511][T14244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.070467][T14240] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.3245: Failed to acquire dquot type 1 [ 289.072930][T14244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.112943][T14240] EXT4-fs (loop4): 1 truncate cleaned up [ 289.120780][T14240] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.135883][T14240] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 289.188545][T14255] loop1: detected capacity change from 0 to 256 [ 289.210592][T14255] FAT-fs (loop1): bogus number of FAT sectors [ 289.216770][T14255] FAT-fs (loop1): Can't find a valid FAT filesystem [ 289.426211][T14268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.436769][T14268] batadv_slave_0: entered promiscuous mode [ 289.869042][T13985] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.006621][T14273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.015217][T14273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.113270][T14279] __nla_validate_parse: 4 callbacks suppressed [ 290.113291][T14279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3261'. [ 290.152691][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 290.152710][ T29] audit: type=1326 audit(1733401330.879:10412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.0.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 290.214584][T14281] pim6reg1: entered promiscuous mode [ 290.220243][T14281] pim6reg1: entered allmulticast mode [ 290.231841][ T29] audit: type=1326 audit(1733401330.919:10413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.0.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 290.256006][ T29] audit: type=1326 audit(1733401330.919:10414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.0.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 290.279833][ T29] audit: type=1326 audit(1733401330.919:10415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.0.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 290.303568][ T29] audit: type=1326 audit(1733401330.919:10416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.0.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 290.327307][ T29] audit: type=1326 audit(1733401330.919:10417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.0.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f933e0de9cf code=0x7ffc0000 [ 290.350812][ T29] audit: type=1326 audit(1733401330.919:10418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.0.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 290.374583][ T29] audit: type=1326 audit(1733401330.919:10419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.0.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f933e0de880 code=0x7ffc0000 [ 290.399066][ T29] audit: type=1326 audit(1733401330.919:10420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.0.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 290.422661][ T29] audit: type=1326 audit(1733401330.919:10421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14278 comm="syz.0.3261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f933e0dff19 code=0x7ffc0000 [ 290.474641][T14290] ================================================================== [ 290.482781][T14290] BUG: KCSAN: data-race in _copy_from_iter / _copy_from_iter [ 290.490193][T14290] [ 290.492624][T14290] write to 0xffff8881258fd000 of 4096 bytes by task 14289 on cpu 0: [ 290.500614][T14290] _copy_from_iter+0x133/0xd00 [ 290.505401][T14290] copy_page_from_iter+0x14f/0x280 [ 290.510616][T14290] process_vm_rw+0x59c/0x890 [ 290.515247][T14290] __x64_sys_process_vm_writev+0x7a/0x90 [ 290.520890][T14290] x64_sys_call+0x2c48/0x2dc0 [ 290.525579][T14290] do_syscall_64+0xc9/0x1c0 [ 290.530088][T14290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.536009][T14290] [ 290.538338][T14290] write to 0xffff8881258fd000 of 4096 bytes by task 14290 on cpu 1: [ 290.546318][T14290] _copy_from_iter+0x133/0xd00 [ 290.551182][T14290] copy_page_from_iter+0x14f/0x280 [ 290.556312][T14290] process_vm_rw+0x59c/0x890 [ 290.560917][T14290] __x64_sys_process_vm_writev+0x7a/0x90 [ 290.566562][T14290] x64_sys_call+0x2c48/0x2dc0 [ 290.571249][T14290] do_syscall_64+0xc9/0x1c0 [ 290.575756][T14290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.581669][T14290] [ 290.583991][T14290] Reported by Kernel Concurrency Sanitizer on: [ 290.590143][T14290] CPU: 1 UID: 0 PID: 14290 Comm: syz.0.3265 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 290.602423][T14290] Tainted: [W]=WARN [ 290.606231][T14290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 290.616296][T14290] ================================================================== [ 290.659293][T14293] loop1: detected capacity change from 0 to 8192 [ 290.668300][T14293] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 290.793481][T14293] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 290.802405][T14293] FAT-fs (loop1): Filesystem has been set read-only [ 290.809562][T14293] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 290.818590][T14293] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 290.829156][T14294] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 290.879075][T13389] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044)