last executing test programs: 13m52.074845542s ago: executing program 32 (id=1835): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000007000000008000000100000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000035be000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a000000010000000c00000009000000"], 0x50) r3 = fcntl$dupfd(r0, 0x0, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) statx(r3, &(0x7f0000000500)='./file0\x00', 0x4000, 0x100, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 3) mount$9p_tcp(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', &(0x7f00000004c0), 0x1810000, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030300130303030346532342c6361636871762c706f73697861636c2c6d6d61702c7569643e6b8e85bd7b5eb2edd886052d4d908e1b69852f8cbd6e8aa23c52d526b806de413de5ff", @ANYRESDEC=r4, @ANYBLOB=',appraise,uid=', @ANYRESDEC=0x0, @ANYBLOB=',hash,defcontext=root,smackfstransmute=@@,func=BPRM_CHECK,appraise,\x00']) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0xc}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r6}, &(0x7f0000000000), &(0x7f0000000200)=r7}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r9, 0x0, 0x4}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002000)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xbc5c, 0x9, 0x6, 0x3, 0x9}, 0x27, 0xf8}, [{0x2, 0x80000000, 0x6, 0xa46, 0x545, 0x1}, {0x0, 0x7f, 0x65e26ac6, 0x200, 0x3, 0xbd}, {0x1, 0xa31, 0x3, 0x2, 0x7f, 0x4}, {0x7, 0x9c3e, 0x3, 0x7f, 0x7, 0x7}, {0x6f5, 0x1, 0x1, 0x2, 0x1, 0x2}, {0x7, 0x59, 0x9, 0xb, 0x0, 0x3}, {0x9, 0x0, 0x5, 0x1, 0x2, 0x6}, {0x450347e3, 0x7fffffff, 0x4, 0xd, 0x3560, 0x3bc7}, {0x8, 0xf, 0x6, 0x2, 0x1000, 0x1}, {0x7ff, 0x84, 0x9, 0x9, 0x7, 0x1}, {0xce3, 0x592, 0x0, 0x2, 0x8, 0x9}, {0x27878b63, 0x401, 0x2, 0x3, 0x16, 0x3}, {0x7ff, 0x9, 0x40000000, 0x4, 0xffffffff, 0x5}, {0x4, 0x7f, 0x93ba, 0x7, 0x17, 0xfffffffd}, {0x9, 0x9, 0x40, 0x5, 0x9, 0x9}, {0x0, 0x83, 0x428, 0x5, 0xdda, 0x2}, {0x101, 0x9, 0x79d5, 0x4, 0x10000, 0x4}, {0x1, 0x1d82, 0x6, 0x93f, 0x1, 0x2}, {0xf98, 0x6, 0x8, 0x2, 0x8, 0x9}, {0x9, 0xe70, 0xffffff01, 0x6, 0x0, 0xffffff01}, {0x4, 0xfffffff8, 0x9, 0x1409, 0x1, 0x82d}, {0x5d, 0x10000, 0x9, 0x800, 0x9, 0x830}, {0x2, 0x6, 0x6, 0x3, 0x1000, 0xffff}, {0x5, 0x5, 0x7f, 0x1, 0x7fffffff, 0x15eb}, {0x2, 0x3, 0xdaeb, 0x6b5f, 0x9}, {0xffffffb4, 0x7, 0x23a, 0x400, 0x4, 0x2}, {0x5a, 0x7, 0x7ff, 0xfffffff7, 0xc9d3, 0x2}, {0x4, 0x9, 0x81, 0x0, 0x6, 0x64a}, {0x7, 0x10, 0xa137, 0x1, 0xcc0, 0x8}, {0x1000, 0x2, 0x9, 0x0, 0x9, 0x1a9}, {0x5, 0x200, 0x5cd4, 0xd6cb, 0x5, 0x3}, {0x6b64, 0x1, 0x800, 0xfffffffb, 0xfff, 0x3ff}, {0xfff, 0x4, 0x9, 0x1, 0x3, 0x9}, {0x0, 0x3, 0x6, 0x400, 0x5, 0x8}, {0xa6b, 0x7, 0xd0000, 0x0, 0x1, 0x2}, {0x4, 0x5, 0x6, 0x4, 0x6, 0x3}, {0x2, 0x0, 0xcfbc, 0x6490, 0x755, 0xed31}, {0x3, 0xdd1, 0x4, 0x4, 0x353cf1d9}, {0x9, 0x2444b34b, 0x0, 0xab9d, 0xcd50, 0xfffffbff}, {0xe0, 0xf0000000, 0xe, 0x0, 0x2, 0xb}, {0x0, 0x85, 0x146, 0x7fffffff, 0x4, 0x7fffffff}, {0x2, 0x6, 0x1af3, 0x0, 0x8, 0xfffffffe}, {0x9, 0xffff8001, 0x1, 0x7, 0xa, 0xdadf}, {0x5, 0x7, 0x1, 0x14, 0x8, 0x101}, {0x8, 0x5, 0x0, 0x9, 0x7a1c12ae, 0x1}, {0xffffffb9, 0x6, 0x0, 0x4, 0x7, 0x7}, {0x10001, 0x8, 0x3ff, 0x7, 0x1, 0x8}, {0xfffffffd, 0xa, 0x6, 0x0, 0x490, 0x1c}, {0x3, 0x3, 0x8001, 0x3, 0xf2, 0x3}, {0xfffffff8, 0x8221, 0x4, 0x9, 0x7, 0x7}, {0x2a25, 0x8, 0x3, 0x4, 0x8, 0x4}, {0x8, 0x7, 0x7ff, 0x496, 0x2, 0x7}, {0x4, 0x5, 0xa, 0x1, 0x4, 0x3}, {0xffff3042, 0xff000000, 0x4, 0x3, 0x7, 0x4}, {0x5, 0x6, 0xffffffff, 0xffffffbc, 0xffffffff, 0x6}, {0x1, 0x322f, 0x948, 0x3, 0x6, 0x7fff}, {0xd, 0x34, 0x6, 0x2, 0x4, 0x10}, {0xc2, 0x8000, 0x8, 0x7fc4, 0x7, 0x3}, {0x5, 0x3, 0x6, 0x8, 0xc, 0x4}, {0x7, 0x1, 0x2, 0x2, 0xaf, 0x3}, {0xd68, 0x4, 0x2, 0x0, 0xffffffff, 0xfffffff5}, {0x5, 0x3, 0x0, 0x6, 0xcc26, 0x7fffffff}, {0x4, 0x4, 0x1, 0x2, 0x453, 0x9}, {0x7, 0x1, 0x7, 0x5, 0x0, 0x7ff}, {0x1f97, 0x6, 0x0, 0x1, 0x9, 0x3}, {0x8e, 0x8, 0x7fff, 0x428, 0xfa, 0x5}, {0x5, 0x7, 0xff, 0x3, 0xffff, 0x3}, {0x101, 0xe, 0x8, 0xfffffff0, 0x2, 0x6}, {0x5, 0x2, 0x311e, 0x200, 0x9, 0x8}, {0x4, 0xb3, 0x3, 0x4, 0x4, 0x7f}, {0x7, 0x4, 0xc, 0x81, 0x8, 0x8}, {0x9, 0x1, 0x8, 0x401, 0xe0000000}, {0xffffebc9, 0x3, 0x4, 0x4, 0x7, 0x3}, {0xb, 0x400, 0x8000, 0x0, 0x3, 0x5}, {0x1, 0x4, 0x44, 0x7, 0x9, 0x7}, {0x2, 0x9, 0x800, 0x9, 0x1, 0x9f8}, {0xf91, 0x8, 0x1ff, 0x2, 0xd, 0xf}, {0x7f, 0x6, 0x3, 0x5, 0x0, 0x4}, {0x5, 0xfffffeff, 0x35a, 0x8, 0x0, 0xe8}, {0x7, 0xffe, 0x7, 0x2, 0x81, 0x5}, {0x3, 0x4, 0x4, 0x7, 0x6, 0xc}, {0x1, 0x1c, 0x7, 0x8, 0x8, 0x80010}, {0x80000000, 0x1, 0x2, 0x6f5e, 0x2, 0x2972}, {0x2, 0x4, 0x10001, 0x2, 0x5, 0x3}, {0x10, 0x10000, 0x2, 0x8, 0x8, 0xfffffffe}, {0x3, 0xfff, 0x5, 0x8}, {0x7, 0x6, 0x1, 0x6, 0x4, 0x4}, {0x4, 0x0, 0x7fffffff, 0x0, 0x3, 0x5}, {0x6, 0x2, 0xc, 0x9, 0x8, 0x3}, {0xffffffca, 0x5, 0x6, 0x2, 0xffff7794, 0x101}, {0x2, 0x20a, 0x3ff, 0x1, 0x5, 0x1}, {0x2, 0x3, 0xe, 0x5, 0x1200000, 0x7}, {0x9a, 0x43, 0x5f8c, 0xb, 0x8, 0x3f35}, {0x5, 0x3, 0x1, 0xfff, 0x8, 0x2}, {0x1000, 0x7, 0x8, 0x5, 0x2, 0x3}, {0x0, 0x8, 0xe71b, 0xffffffff, 0x0, 0x1}, {0x7, 0x6, 0x80000001, 0x2, 0xff, 0x7f}, {0x0, 0x9ee, 0x8001, 0x9, 0x3, 0x1}, {0xfff, 0x81, 0x9, 0x7ff, 0x9, 0x3}, {0x7, 0x6, 0x6e, 0x2, 0x7fffffff, 0x2}, {0xfffffe00, 0x6, 0x1ff, 0x0, 0x4, 0xfff}, {0xffff6e34, 0x5, 0x1, 0x6, 0x4, 0x6}, {0xd1d, 0x3, 0x3, 0x3, 0x4, 0x80}, {0x4804, 0x1, 0x2, 0x4, 0x0, 0x7}, {0x4a16c871, 0x9, 0x6, 0x4, 0x4, 0x7}, {0x1, 0xfff, 0x2, 0x400, 0x1, 0x6b7e}, {0x6, 0x2, 0x10001, 0x2, 0x6, 0x3}, {0xff, 0x101, 0x0, 0x6, 0x3, 0x7fffffff}, {0x2, 0x4, 0xa, 0x7, 0x4, 0x2d9479cf}, {0xd, 0xde9, 0x2, 0xe9a7, 0x8, 0x800}, {0x6, 0x7, 0xb, 0x7fffffff, 0x7f, 0x2}, {0x9, 0x7, 0x7, 0xa, 0x2, 0x8001}, {0x100, 0x7, 0xfffff3f2, 0x7, 0x1}, {0x7fffffff, 0xe00, 0x0, 0x0, 0x101, 0x4}, {0x8, 0x9, 0x4, 0x4, 0x16, 0x3}, {0x0, 0x0, 0x4, 0x10, 0x60e, 0x8}, {0x81, 0x5, 0x6, 0x7f, 0x1ff, 0x6}, {0xffff, 0x4, 0x9, 0x4, 0x0, 0x9}, {0x7, 0x7, 0xa5ae, 0x6b, 0x6, 0xffffffff}, {0x4, 0x800, 0x80, 0x5, 0x7e438e88, 0x7}, {0x2, 0xfffffff5, 0x1, 0x0, 0xe8, 0x9}, {0x33, 0x7, 0x1, 0x2, 0x903a868, 0x7fff}, {0x1, 0xb, 0x2, 0x102512c1, 0x1, 0x4}, {0x1, 0x6, 0x4, 0x4, 0x7fffffff, 0xf08b}, {0x10001, 0x6, 0x8, 0x8000, 0x6, 0x3}, {0x0, 0x3, 0xfffffffa, 0x8, 0x6}, {0xeb6c, 0x8001, 0x3ff, 0xb, 0xffffffff, 0xffff}, {0x7, 0x4, 0x9, 0x63, 0x3, 0xfff}], [{0x3, 0x1}, {0x2}, {0x5}, {0x1}, {0x2, 0x5855c4eb68bd0425}, {0x5}, {0x2}, {0x1}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x64254d761e0c8922}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x3}, {0x4}, {0x4}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x1}, {0x5}, {0x2, 0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x1, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x3}, {0x3}, {0x4, 0x1}, {0x5}, {0x3, 0x68f230b9c73ca11d}, {0x5, 0x1}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x4, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) setfsgid(0xee00) r11 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r12) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000021c0)='proc\x00', 0x800000, 0x0) r13 = syz_open_procfs(r11, &(0x7f0000000100)='stack\x00') pread64(r13, &(0x7f0000000140)=""/15, 0xf, 0x4) 12m15.586422551s ago: executing program 33 (id=3755): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x37d, 0xb99, 0x6}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000a00)=ANY=[@ANYBLOB="aa00080000aa00000000000086dd60a24b9f00502b01fe8000000000000000000000000000bbfc0000000000000000000000000000013a00020100000000000000000048907803d818edb73bc94dc55eaaa1fc1892e4161b62a190ad9836cfe86820ab96f8dbb4df18a19c347e6b72000000000000000000"], 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x20, 0xd, 0x73, {{0xa, 0x4, 0x0, 0x5, 0x28, 0x68, 0x0, 0x9a, 0x6, 0x0, @remote, @empty, {[@ssrr={0x89, 0x13, 0xf, [@local, @dev={0xac, 0x14, 0x14, 0x2e}, @empty, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x4, 0x7, 0x1, @loopback, @loopback, 0x700, 0x80, 0x6, 0xffffffff}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000001480)=ANY=[@ANYRESOCT=r2], 0x100}, 0x1, 0x0, 0x0, 0x20}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@errors_remount}]}, 0x4, 0x54e, &(0x7f0000000fc0)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0xfffffffffffffffe, 0xffff, 0x0, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x4, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r6, 0x0, 0x200000000000006}, 0x18) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="14fb0000100001000000000000000000000040a400000000000000000a"], 0x28}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r1, 0x89fb, &(0x7f0000001580)={'sit0\x00', &(0x7f0000001540)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @multicast1, 0x1d, 0x1c}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040), &(0x7f0000000280)) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000001500)=0x1, 0x4) 11m34.237566468s ago: executing program 34 (id=4394): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000001180)="6cd84ee85d5b38e5d35e2c1b4134f0119cb0d7e984db8598f0e8bae85264323187558085045092f64997828eac51a3c51e6a454083a2f47e4c45f53ed6849903ebdecadc7250180e43407e3c8d2a111876f1806479eaf69adcae70a70af0266eea1f751821c6714f9cfc5c1c65e454db6c732e51be80e840e73fe3dbbec656e69c13e8a6df33ed8224ef869d82f5c46b60f5ef4e7bf7030e1d57cbd76c68eed2fd5ae81a0371071f033830e4dac38809bff5a93e2f6ee1afdc987d5fbf3c49b58aca3bba4c811558563cd25e80af76e10925f0698e0f97dcb96dee7a4e93b2d50ece37ee9f2ea356cc60758d5ead2aef85c41cb7fac4f34fbaff4f8bac6b2f910159c5a0840fc2c2a0066de1e81c785e4d0fe09b6641faa7c47c93ccb8263a948a27076eacdcd1a8f4478f34285b7803529c4d388a36a45044fac3f18c7064065db10caf6f429b78de15e72a3251dde63339d4a519c97c3f90f76d8d51edd72e62bcb7e2e77c606f031104479e310c49d7c2223f728c60a942b5d7bc69baa03af908cb018965b866067b39af4eb7221aefad54c61c08c093489954d01922a4afb9724fdcbf178ffd260bae2ec9c7824179ee4633481e6e7c61514966160f6663d63dd0d8736ae9defd80ef4d4f68625fb27c263bcb96a15ece750c69e938a3bc7ec4d4bae98bb79819bff89cc208aae1ec62b4fa653252c67e581c18e491dd79f6d699fc0ce9137e77ab8987ab35c7abc3a913c5de2153884560deb12e5628d4274bb62270093d49005ab438f79671eae39d0e20126f8b0da217dba7cdf9dc348a3e52197186da1ebbb9a1a29976bb78ef00ea58c2ffd01b135d6172a8c87c49be8122320151af4f9dbc12afc142ff73de39a63cbd6d155157bef956abd062949e574727900483aa41c543840d0d7fbfa53f494ea37ee405abfcba0f33e7ba0ef9ba89c616341603d4c7d6e1fa2a3b1aa13ad7c9c7b6b16cab97b2b91eef366c61ee0767faba6d0b78bd6daf4b6aebd2d6048f8f595babd01de05cad14a64fff729a23066fb918c54d54128e5eada304b16e134fb2ed99d4efe4966404b0dba83bd57cb76c6d5156ffaf3df7db6d9a9c6ea014c96aed99f016f50b49c4f5ea5276ff635f46f37aaac517be5e61a43831f918b5443208e5f6b6eed403cba96b7fb91a8cad4fb6c5586e18a53954f7e962f8a7f64dde64d6951e0b454e0dc808bdd1b5a16f6785c27021803e4a8f2127ca589e1d8974fcf973cc3189cad5fcd78a9be6a752198e160998e6f221b123d4b530ec90d15e3554c7a404b6cff47213dc71b1eeb8903ff6c21b9326ec6111cdee47ce60a38f9374a7fa415428ced2599dd7581cbf452725b57eafde50ea2b380e2f842e79f45b63b0c0507ad76aeca5e4daa10518f511c2b14c5790aa6436c03eacc6613f0e2f4c615ea2242cb1025c5d77004bd26642eac0df9e135f2c86f254978209c5d6dae9b3a74916530741d071da3f79883454cb967105425ab127549dcf9d3a2ff6e752491fd181a7960561b6f6cdd39fd0e9a1feb6ae8a970b768b57e16d15f2dfa17d44b08b3089cb3271df3992a30236f2e34d41a892f083d574cc66e57a7f91bb0e07d0ff326ca1b7f54f150fc18e92b245f9cd816a806147e6ba27a907bac1a49cb921748dbf1b8e575ef3820602583954108146a74f46b0eb03dd5b0ab1b8605a091f7d05cfb5de5b8b70690162f43fe312640df0166bcd4538d67d94d92c5b787d74770689214dbfd76577abbf7e7705a57504d488e4eaac4a2324efa996d9176dad0666c4921f45baf8368c78742532202934831f57ec1dfd974fc9128918ae96579257324f63f353439eea037f44e6617114f862bef214a77569ced2e3df25e977cdb257000026c638f2a4a9e80fada09d3260df553a091225091d858c6abe90e34c138f47e71ec72d5e25815f31f77cf4ee820bf665cfe0804e5b0ef0d0e2f9434cf157e56e27eacbca45c1730c65d31f8f5d9311d9e9ef67cb54f49778a9fce7a284362accc7a0d5b456567086fc0ad1c6aee2b704f14f05e9d0e4672fcf721bc694b5174f6ebdb97ecb72367ad17b8a5ec795f0dca8b42a8ef3765eedb2af44edd8c6124257e11e7ecfad68436411636699b7acf603efc4f6490af4d23faaaa2bd4c9faf8c61dfc12dc80e88d9c3201d4f2c8d65f0e8c8859d91c0be9cc2d627d5d52f1b089f456b30e0f3aaece2c4536e3415d877122d77117de5ee3f5a6b1ebeb624e64d6ee487b82c4e4a59171400878178ec13fd38c9932b3d935700b42c25e11e2b198811370dc84c7772a9d2ff7ac40153a3bb5493623fb5c48e49ec50b42894dc7d6a91ff9d68f62bb6753ff86a6a37f390bf68805fa3ba9c65585a4a037f4997290dfbd3a6b24de38775faa723990acb524a90deaa636f7eecbad960150791428e42be2a8ec06d64a7c101aaeb7188a8c1cd5a233fe5d2d4582a27abdca694ce62cbec3ec1c8528a3e78031ae6e390df9fc7f8a2638905205fc8685f126b4460454f672caf9a24448e3c0f0517b1b79e5fba47906c395e14296bcb006a4a7a631eb7ef68abbcd5ceefc303a5293c82037e86071ea8d3b6bb22b42a44cbf048f1c5fd79a8330955564886bab8673d04cfaaffa133825199dfc133f77a7cc0a36d37b38091912a7d80c569940c6e2b5feffaf2fd0dd82659c760d822f8629fba3098d7e533339a34042a955b3be6d007c616e4c13eeccba6f87a5de21b2dda7a3a6ff43e82cafe34a5666f3b705808c2fa285b5e8dac0f78e9cc95bacbe018178ca7c5107326b0567ef6abf9b180d47dfe30864793db6dcd7b944c05d0c059c86b176e7a0e7f5726a9318a131d850dc4335d5938917e1b4fed1a0ce22b6e49905d599d133e17da9174f0fcd4d34d4ddb938545ae042af60d113bbfe878407936be8a2b4224478fa0fb2be211a789c95844ee5160de9001abb0e9e401e1218a60a781807de4198f67ecfc38fa93e046cfb920c23cde38d2568950e3396804f6ec81317ab0cefb90ea63a2f14146a6fa36a45600491e3361e90a539b8179e18d36688f405e3deedbc146ba353b812c88683152b64f06b11988635e95b419f21bc655250b7c896b2b06000f9e6e699c96b68e3798cdd1bdf8919bb62a9b61616633ec7249925c45e886fb93af85258fe16bbb380c6872b2ec84d4c8d30cadda25b0eb58d285e50cd19983e0d434604af85d692a8feed9a229e38c019bd4269cdea4fd31593cef43cbfec75304a405c46904e2a7ea7bbda177597e2fca6ce9dade9069d633603cc4986ab4e23d5ac3e9d911f87bd45e820a2a63f915539dee5e1e87bb00ca9032a6f28bea28ecfee8c4c26a007f7a32d17d2ebfb7a564981cff34a704f887feec685d16d4b56fe85129bc953c3b791b2d0849a513df6df1bb81215d456c4578e4db1920c8cd6740bab66380b4ee866f07119586f3fad489f781757a2e2ecc5e8210167fc0fa095e1b56f6eb7144d63f0eeaf50ac7340718db3a3003fe31b83a6efc2b8956f55a36f99cc1562edf6f477a82afbfe7c3b697e7b54a21f4832d3f9c1ce6e0af7a241ee38de1fbc7c02a1172a0b3da13d1c2ef623ab522bd6d5902b9d7d6df49eb3d1c2c2f5fc8dd589fd6d8eecca5cb5d0dc0942ddbf5bcb7b86da27df7e6402a298bfdce48dcc0f01dd74baa8203fef0e81e1b2db2343966f5d2cdd920c3a583386122fc1241e514496c1e4de6df95e71b186d22552fb3ad92b84aac1ea3a0b47a37e55adac82c5aa68c19d2756e5284add838ca507b1f678dad52bcb944d0f5f1057b74d9664ba6cd1408e676da1abcdf486235271b02355c7a78967972833cf5686a3e412e9af05baa9764669fc0a42371530233782cfc05953a9fc568adb8854dbfd560e469fe7ad67dc0e535dce286c41886c339d57f3dad264653e66a2cff47c4602d8b74bad233f0b5955a4f453e3e00ff444710d34ca37cadb6b3d9a2303c7bf8f1336a563b3ac0a26972857486ae7d92533c3b16eafc2cb175b8496ae223508589872db9203b209ef2dcaf2326d766137f2435a38602e41d3405e4c3254859037b1b5eb945cf84f7ccacc531675efdf1911f833e4138bfda4cae329a8b20dcd63747c7ae195059b1f59cd36b116402c3eb349e6fbae350b24d2a408fef61c201dc48e6f3c60fa78d20b26a3493df538a0c94770636ffbb0b6250f2f7bbb80d34af278a8c783df7a7463117e7d512579ee5562722ef4812e48b3b55209c749b1fa77fb3960722ad8444d9480bba30ced122b640af676fa186f1be033423318a7c1788185bde34cebbdd47e13eb6e6c949ea4bba411964440735664448934984f7dac58bf7024b8e71b88df7e0cb1b76bc0cef7522809a36ec2bc067dfab803b4ee8821baa5e557edc716d8bf002c9e8aab78e1a5af8bc58078fa256d3321a55481f36f45fb508a397e757d7b7b287830e362888b7cbff976bc70698024d838e5dba6e6813152a178c80180b306b2f4eb8cbe40f800bcbce51a845b6fcf70f225b90bc34bc36f68dd2b64c1b389e0a9f744615bfdcd683e8d850c635a295b6db75dbf1b8b072454d91eb08381e1018ea625462d52d44b2ea064ae6f5922fba6d326711a0ddbf091a885", 0xcd3}], 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0xf1cebbd1e9f69a13, 0x0, 0x3, 0x8, 0x44, @rand_addr=' \x01\x00', @local, 0x20, 0x0, 0x3, 0xd}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', r4, 0x29, 0x1, 0x5, 0x3, 0xa, @loopback, @remote, 0x80, 0x80}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, 0x0) 11m30.973779641s ago: executing program 35 (id=4425): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a18f6913026bbc8e195ec033d173c", 0x10) sendfile(r2, r0, 0x0, 0x40001) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x4000000000000000}, 0x18) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) sendfile(r2, r1, 0x0, 0x7ffff000) 11m20.467630701s ago: executing program 36 (id=4570): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)=0x2, 0x12) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [], 0xee01}, 0x18, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e00)=@bpf_lsm={0x1d, 0x22, &(0x7f0000001bc0)=ANY=[], 0x0, 0x8001, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001d80)={0x2, 0x0, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001dc0)=[{0x0, 0x1, 0x3, 0x5}, {0x3, 0x1, 0xc, 0x8}], 0x10, 0x4000}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x4f, 0x280a82) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f00000021c0)=ANY=[@ANYBLOB="570400001a0000008e8682890282818b8131e100000000000001028582890a860a840e099a8e5bb4f300f7e8a1c487cff531f512b72de21a0e3306ca8a4066b14bbfe30a7332734f0b62d8a7c77d28fe6e1b70d0683facfdee8668c9ba0331544e729d6cb5c2396c2e0123ec02ad780758d09768903bcf379146349d1cb3e23958d00a06b199e9aaade08584caa637d13af24728a6fcf88024a258299c785ea4093d0926a2"]) syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x414000) socketpair(0xb, 0x3, 0x8001, &(0x7f0000000840)) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0xfb, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) 11m13.603928092s ago: executing program 37 (id=4628): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$selinux_load(r1, &(0x7f00000003c0)={0xf97cff8c, 0x8}, 0x10) r2 = syz_open_dev$vcsa(0x0, 0x36e4, 0x101000) unshare(0x2040400) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)={0x1c, 0x0, 0xc4fc9e906872338b, 0x20, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, 0x0, 0x4040010) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="7915a8000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916740000000000bf67000000000000350607000fff07206706000002000000160304000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad430100000000009500000000000000150000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0xd000001, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='hybla\x00', 0x6) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r4, r5, 0x0, 0x8000002b) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='btrfs_trigger_flush\x00', r6, 0x0, 0x1}, 0x18) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r11, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x3}, 0x3}, {{&(0x7f0000000380)=@l2tp={0x2, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000980)=""/202, 0xca}, 0x77f5}], 0x2, 0x0, 0x0) 11m11.609964713s ago: executing program 38 (id=4646): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") (fail_nth: 7) 10m17.213631741s ago: executing program 39 (id=4671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000a40)='sched_switch\x00', r6, 0x0, 0x4}, 0x18) socket$inet(0x2, 0x4000000000000001, 0x0) io_uring_enter(r2, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 7m47.863626361s ago: executing program 40 (id=7156): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x0, 0x553, &(0x7f0000000800)="$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") r3 = openat$incfs(r2, &(0x7f0000000100)='.log\x00', 0x2040, 0x1d0) quotactl_fd$Q_SYNC(r3, 0xffffffff80000100, 0x0, 0x0) (fail_nth: 12) 6m48.868465183s ago: executing program 41 (id=8132): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x19b1, &(0x7f0000000140)={0x0, 0x0, 0x10001, 0x40000004}, &(0x7f0000000300)=0x0, &(0x7f0000000580)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_enter(r1, 0x1db7, 0x2029, 0x1, 0x0, 0x0) 5m15.237340574s ago: executing program 42 (id=10206): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r4}) (fail_nth: 6) 5m7.509467058s ago: executing program 0 (id=10379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 5m7.478460839s ago: executing program 0 (id=10380): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nolazytime}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r1, 0x4000) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x5ff, &(0x7f0000000400)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) io_submit(r2, 0x1ffffff0, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 5m7.221833513s ago: executing program 0 (id=10385): r0 = socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28) setxattr$security_capability(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) lsetxattr$security_capability(&(0x7f0000004a00)='./file0\x00', &(0x7f0000004a40), 0x0, 0x0, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x13) writev(r2, &(0x7f0000000840)=[{&(0x7f0000002940)="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", 0x1000}, {&(0x7f00000005c0)="653a8d5f3bcd64c149e356af4540cd2624084987a46b7adc8a4229fe4ec2b565a654270c3bb89d3d5806d01917a6b6652f9d9b9b0cfbec5566d02e18e9c8afcc6392143a1a5c9671b311cc0d99bd40306d5e662f4e45f26814dd8f2134f4fa9d1774575899f208a342de1c0d8aa389c488809407441c512f26f9ca1ae6a7b3b5aa6cc35fc3bf965b6ed1c6e9ce3cb215e257", 0x92}, {&(0x7f0000000680)="3f1607c121905d8c42ae645e986038013517b170407c5a22d22c820149aa9fc8666a30d72fbf33a9a27b9fd7662207a44c5f17f2f34ba3382fd9aec43a09d36e87201c98babe5c05486c8fa09ff1f7eee2377c581a4a85d9c870ae9a853e441ff8ea613c82dc7897e924684012f6dbf30369f8a45027be13d9a18f5f76f7b81baab126bb13c673bd04eba0ee14116939c8872f56b8b7809c58e32a1511976dea6c11e807b214609834f7cbcdf0b1", 0xae}, {&(0x7f0000003940)="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", 0x1a4}], 0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e57f000008"], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) writev(r2, &(0x7f0000000540)=[{&(0x7f0000000300)="3646c0adc706af6ee434a555296e4839428cff998c9eeb4feacc0e1e253c21349e08a8c57fbfcf2dce28a27de912250a697e88157669a8192887fd033aae5d658f75ef5fa07835078cabce2cc9989a14f06170fd998ebd3e7a21fec544f5c30848b013356e100eb4147f8c116257f1923bb076397102849f0b7366cea8ed8c32310d7b0aaf16f97d63c8576bf2810c16e442ae685e603beccbb439ca43ea138e2bf2e580974f74b415df994c9628f59f329e05349601e4a4ce12793a35e6985da64de8e844f09ebb131b8275add494ab26695721547f9faeb74a1b049a6002fb117dbd1b5c47a119decb", 0xea}, {&(0x7f0000000940)="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", 0xff0}, {&(0x7f00000001c0)="0ea7f8c6546da5017b9c93b5c9cc0279e8a6907be5b48db2dabf93bd3bde58d706498c6048a5335997ddcd6e9c9cbd18340bd23f9bda171b2ff3742058b8cfd44c7fce60d22cd270be8f5756d263ce80155d28abc45748807055e24386710f10a27ce6c7f4c92c1bbb7749d3935c7e5bdf887a7e05cf2479f75f32a60474435ae1b918544a3368", 0x87}, {&(0x7f0000000400)="59819374a498c7dcf1c38419866c6731d056917f13f8b23aade054cb6bb8328924d98b8d8c4e981fe1e1c27355d600dae17a14b9f9dfe88e76f6c9f9372fd42e05028f1c9091406017fa6b5029b170e8eea8b07f1992b2eada81ed815074741ce1d65a92", 0x64}, {&(0x7f0000001940)="c0448597231849331f79e646026a0cc6e67052050061baa6a4025aba648c7907f1b9a68751bc3fbd590afa5ea69d3d8810706034531640de446b6c498512501c1c3298da6da4ad181cfa1abff87a59d33d48f375e3ee2678b8db3f9f0f3054ab3ba59be58f45c0143152d7a5690681777d9f551bd29db86761e5cf0fabbc235d03dc47e4e74963be153a7c56f841e54c1d8072b99219d77500e59572b6a17a062f58b89a9b81463057567f7614240735bd2f19d3ffb6225e759f4f50a4bd2216a05ebd63bbe3cd9255e7dbfd6726168523ea16d9c552001a6ba2c5aeaa7d465afb7087e831f0482bafca0f2e779e52abc25211666f6e268b9af860dace9b1589b266e37c993935a3da625a4200016c91e233f294a8ef07c09e245621a992bc9c0b476111527cb05a148c447c8e6eb9daf6a4086d086824e8368f30e9f0fcc2422301f557291aa6ff34910fe35ad1897f76abaf7cfc4cc3922f3f354e9e68349bb63840bafa22847e0ec3a3f5ff963ffca302f9098a91c05ca8e61ba4a7e3ef2707f98409a8857777fb1e21ae6783c26dea6424ec1740e1408c84d719131075f11e5c1c4cd0ae48caea213d4e418beef9d4902be46d0c3fd688ae29e2449539645e69f3711b7f277840b825c05fb5609efc6753868fd79f45dc297b387cc3059f00a2f0e6fd3f4a5f4c12a639f2055fff7350bbba5006f2ac85315e84d310652e9c86d62becdcd5575bf089dfeec64d4f3693baaee8516bbec8b3ede8ce4e998c73c4f565e97ef0e2a219390f1b887a4a1202105a498250df60171c610c20af19f2f00f5896b9d90dd6df3fb00283aeac1ca4ef76a79d8ec2e00aeca2a7a77f4ac4fb42d295467fe20b168638b8ab2e1b0c083e411cb4c92980697e0782789e30b54a894bc5ca4e1967a245c141e56bff97672dd820e963bce36767a6c0b89fde9f823e9290c559fd3ba643d0936de3b23a12d1ff3af62600a529c04c7f9637299f7075ba292d2071285f5393e9c50cb604b384c50fd4e7885d10c7d07d8312637a444c3ad0f295b580597f73796110231f725b83ffd4b44b44e2845dda6c0b8e582bea563c9736490304a772a9da46235db659d5e20f3a4af6aa412e9d10ddedaef3f67692b5e4c0a6a3b1550ee5d4bd76899dbbb8e9995c8467c8e48d62e375bb9aea414a92ad00a9704694005ecb716b04577fc6bc44730537b90e4b170c6112002188afdd4169253b4ceca31439627db790ebc29d071e0762382fcb754739636d1a90bdcd0edeb6c5e50c763b5394d5bdb792b3eab385a9978c35be03278e018cbf57f3c6e8974df24bc1774a38168a4ffe3bde5457893d71f4e238c80999eb7acccc22be7435c4491fbfe3bf92da2b9979004bea8ac9574404fb76d9ed14b089bd2d4b864ce2a77ebe2f5440f1fdc89f30647bb133213a57729384ee522e7f3cbe2c32489e9f6c8131c6e8c866e01f831058637c6dbef82de7ec07e23fa48d5128755409877b031c6ba1e3fdafda55017a854d31fbc0e921db2d191484d46067709afa0249e66e2ba0bae9ec6156c577543b483c3f323107f419a5658d68f7422f435c9c14a0648f17a8d5986742f4ccaf09da1a9c091d12231b3b3ca1ac26731c7a69b27fa938407253b745c05a3c73c764120dac6ff5d226f22c25554685e5164e4b8cf78a64e8478eb86db04333f00366f48288c9a23a94f369f794fd11cc2194815d37639fc3aaad8d66e415a229bbe881ebe7f59f4350a13881ef4725b5e43fcb9a04f16b9c0545e0e2d9857bde61dd16ae432f4a0f257ee8f31f917f0631c129d5ae6fc87d27060168a18d41513bf822584944c92dceb05c20f20551953d3a8583ed961e4bc0d0b213994358111737493b92e48bcbede825f6612a1ea13c4a78e3e67b196995558e2937a446bbea6f6eaf4d8ec8f3887b26f57bba82b0cd91d27e864237d97a9ef4eb89eb1f5117125396e70a4aa6beb4b8b2861536ea4241bfbfdb42adce68320010fa1836c32fd564030e04110024ffb59abb7bf426b512f6c00d56df3b672651f897c14adc65dd0b9000fdc11ef792a6c5cec2435479b24335ebae04ef273708a25912b4a2b7e331897c3ec5d7f37523d5a04782bdb979b690ca9ebb8450c7dc8c16c505dc4797297e20ad88f7d2c4490771da123a3554a3fe46912195d19cc9200aa9e07e421015805eece0bd6060cf0a028d070d1e5db7978e0d8de8ecb26feefa1e9fcb968924104c45da224736a99f2849cc153f62be961e39634afa412916f329c94f05b8fbac0520d38cfd1a44e158b7e005e71cb70d4eba10fab971448dd69a3d9208300d403d7f701ec582813490163c47c66c1bda11eb27b647a2b1678ddb17b0709073ba80c56489fb814685e45a7fa65e29d7ade97d2fb2ba0eec17f181f24961fd4f35f23f5dd4550c8cde618e037a20c17a1f30658cd8c6cc2b0e08c38ff25e54cddf3f08c1280a6374a94f8085d11c2195b133b47f372babbae32fdcbb4a21cc8662ffbf70e2777ced32d29baa1b2b932420088496d0868b32f94ba4ca15a129d62cc8e9cbb6893a945d1d1c760112c46e4ce3fdb08a6aeec6b420a5b6c3f69f499e8d2e51de8925335f361fd4830a61232801b8e1e06827198224a3272ef2551101c5684988c8e23548a77330fb102e8daa1bcd9efb92ff82e56e99091cfd0a75015217e7deaa1591379227307bcd8eb4fbd65cca30ef77961a77e828537f10a8adbf9db6149f6c991392ab7d53fbe87359369a2ffade8aab7d292b166916ccd8253cb170b82ee10367d17331c0da347cd6782a19d8724af716c980df1a8c7358612a7b0c4b8d7e7fb2243eadd1341e13a822ecd6295a0a736fc18643b4a68024a4b544b4a436e046765f2303705d188c94b9defbd809c87584f31d770ff93623251dcaa28d632d5000bb8ff944c8e45fc1daccd8f3ed91dded70d2be2de5434dea8ba9d5a3008dc467fba262703cac2f133d48b3a1a666b14a243cfc1c1b33e044d68ab0b4a4b12f8a5d36de5d8296545893e7fe1a2592033ff287f1720b26afec97fb8bff5b6209847376a72779b4a2040fdfffd4911a048b5631f3c604f19e0140b17f12679817be6444fe67b53da6c6e723e7b055c8838c3c5bfa820cf695787a09262d14226c03350a30fe86ceda27e04cac2a29726ed9020f0639f1e774ba55e848de5af37e882d05c8a687a74d694c513153ed3ee60d8d3bef1d62a7d8936e8775d2aba08f58c9402da1de7e2e0d22e5f66eb223f837f7526d646dac4d7fd417b251e495a6d613f69798d17356548baaa2695a8f3b59c44a82589895c49eca9bf4e356623a2c6df6a3da4e7bf4809e0ae0004fba71f343b7ed843cc30f2ed3ae2a2a1e939884e5cf5828b04054e9c86c5a373fd6ab7b2e274c808759c21c415f9d8754baf0215b68890337797393ea4786f5ed2216292a29399dc6c353303260be89fac57a3bab2ab5fd28281a9fba2291e739801b3b628c72f1bdc63f6b2f30acb0938a112a006c570bb199a1b0461904b92c9708db9c3e262e09fbcf2c3ec72b5740baa90001338ad3c8a6e34b1620183756f00ef671555847b72f550d070265d0c0865178b80b8fea06d5010e2e9d81535d561eb983e0aa446eb7a36abf939d244fb58acaab28124799ea82c6a9edef249bdcac7057f311230b29d481cf97f52fe8d9415f98711cb776ab3ee78ba1c54eeecad1fbb3b1aa495b731faac553ae17e19531d01747274a9cc958c80ccf8633f293188ba15ddf515ed36572b36bf9be6490d7660b286b1465e61b9de91a528b1931a760f319956e478564fe3cbfeb8683b28912cc8c9a764af5d79078e50164efac0f9f77a846d131086cf0296ad63599690a787241e9f587121ed2532d4ad24296c904b2f1df6331608638acd1195f1c351c7b524365a0e3ab00de0c3e9cbc714446ff32f4f98fc566a823fc953280d06eae723a6fbc0e845df63d30eeb3bb9944138ed4b38d9be19b4e7c1854ca9676ca5953c3b4de301248de83b76bbdc697be8f8dd9b162042f0da4d8aef1cc49181964d9761f9a98cb599321d200ebe36ecee6cf9b888f7f5e4e3fac6f007470ef7d229b3ce05289c78980428fbcc2613adacc282284ab95f7ea482cdfbf206bc9996a2c8139f5b0c4b527f01c56d4544d9fea9bb18e8004a92985e538defda9ed535e155696f4e4e93c0502091dc03a41f5a6cdc9b911d7395a24aa3fa30f20f78730f46ecfd0f61186f2355c84a1160c44e539a0bec1704e4a2f6031f0b59f8c32b7256c3bf516dda5f4708032c70781325f46a58be12c6437dc323fcac79681ec80f22ae8f221b7df0562458d7d6c00ecaa11ffad617ad5c4c9256ddc9e4645aa6e14fa2cbf3f35824c95961c0ef62d7fa6f692eae3e72ce2751d4be3c2fd8141be90c064852aab1259baf8c729233a260fd52ece6651c821669a2438d1ab6ac0479fda2b729655605d6e49f154d1c60e37a67be625c1406bf340d52de11217c5a4785135cc447f7ab1f219cfe4bb48750ac11f925d01d99836f7881286bc2d8fff820dce45f6b0e7111086fd2deb73bf4f12c601e04f5809e6cb56b834a2cf72c5bd14f004aea09123317ac5d702b41012d2524d202fca77f8a6a0564306a7e4abf0620cd2265769e7187a847bced13392aa3e02a93d9b41a330306bb94bb90b442cd33f022c223bc85518412eb742918bf79a71b9242a24d02fcd1cc316d60a651c52e9a2e98cf4961c52b8aee1dc0fae2105da8ff0a0bcbbf967af7c2a2c4afbf83af88bc7932cc1815ce89f3442c741f185baf34a91533555502a48f991e9994a45ebddebafbe5e9788d7f36af07e4f1c5368c75332a4dc75c31487cb9c2062fb5a5a17370a1fefabab93f378d0a6527e2ab33afb5223525fe3e619fcd5ac4e80e1b92b295a6cba09f773f6f58b145e9b0a9d4da345f0948011fb6e1d69955b8cf3198aa8d8d94b758718196e7c9c9ae742c085fb99e9be02f09a30a19c1f3c940b48fde4e4f26815fc74aa90a692805c7ee2107c50dd4f20f7772d69223049e94133e79279a144ad4df0a5fa405fd80ee6e5163b8646e607f82761263e7386fac76b68cbaa1c592db46f33d05abb4405db135af134bb54c80c07573a1494341b5cfbf16c96942c3b2b2fb6fe5d8b90a0841c24effe6f5f004b247f2121c2b96bda77dcab2a97b67be3cd9748e63bfa99f8a765b2af78e3cc74271e39155e924a4812a7fcd67f397292d10ab54a4217f4e53e41431a7f3c3b8e6e9074ba8f3713e3afdee50dacde4a270d095323e4827d4f470bf34ac107de41c91e61b6d3b438c67d34a304a35ede7166cd352ba03bd67318dbcb14cc1920a3682a30342115ec1d0f0505754adbd8d1d4557816a6e05c276949d77d1aeaf0288331d81fa6148e2bc4d9c06462eed61e2463a128724210ea22823f9b5f6c9a658292756d051dedfeea93b7cdaa7760cdd02a16365146d847e79a3342a3c2fa83f775dbb405aca612ad3ab15b1bd4ce4d88d6286ea73f731d06398dad3ac55da6e57a6f09a2b863e08649472ac7c477427adbc2b2acba54dd949b06d0fac78398a7e46d534b574c829a90f1a7469536842209fb49c47f9824d80347b89178a0210efc37ff453a51ec7005d570dc0199232da3d33cfb81bcced6fa703943022f756f079a3dbd2fc8682c33bab2a85990b635330fdf05f008a18dd16647e01821f2f93169568d9c96318a50e5ea0377c5b496e1fad7879f3f9f570a5728c8aabfbeebd12a256527c21652", 0x1000}, {&(0x7f0000000480)="3823e1631e79bced7e411f2b79681eb0f8e2ffd18d42cc3683fe352975cb5a18e7d5f4b27ff00f1208ed60ad84e62da08bac68fafd71c63573e5522045cc7e26abb8bf6f", 0x44}, {&(0x7f0000000500)="6d34622b89222a8a8faa3ccc467bf1f859b89081a60598b22ef2e7", 0x1b}], 0x7) 3m38.719494661s ago: executing program 0 (id=10398): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r1, 0x5608, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001180)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) (async) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f0000001180)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0x100000000002}]}) socket$kcm(0x2, 0xa, 0x2) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) (async) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8100) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000200000014000000"]) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000200000014000000"]) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket$packet(0x11, 0x2, 0x300) 3m38.295806688s ago: executing program 0 (id=10407): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x8dab895006989006, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f00000003c0), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x20008050) 3m37.761150317s ago: executing program 0 (id=10411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x183) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) 3m37.714341907s ago: executing program 43 (id=10411): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="17000000000000000086000001"], 0x48) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, 0x0, 0x20000000}, 0x20) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x40, 0x183) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) 3m27.578448431s ago: executing program 8 (id=10672): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xfffffffb, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='!=u~&0&&\t') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x153) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f00050001000600000005000500020000000500040000001a000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES16=r4], 0x21c}}, 0x0) syz_open_dev$vcsu(&(0x7f0000000740), 0x9, 0x42c00) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r4], 0x48) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000001000)="$eJzs3T9o3FYcB/Cf7k9d16a47VIo/QOllNZg3KFQ6NIuLRhKMaUU2oJLKZ2CHXBssvkyZcmQzEnwlMWEbHEyhiwmSyCrk3hwlgwxGWIyJMMFne7C+Xwmjs93CtbnA7L09J70nkDfZ3mQHEBhjUXEDxFRjojxiKhGRNLe4LNsGWsWl4fXZiLq9d8eJ412WTnTOm4kImoR8V1EpVW3uPrX5tP1n788s1D94tLqn8ODur52W5sbv2xf/PX01alvFkvNfaPNdft1HKaky75KEvF+Pzp7QySVvEfAfkyfvHI3zf0HEfF5I//VKDUje3b+rZvV+PrCXseee3Tno0GOFTh89Xo1/R1YqwOFU2o8AyeliYjItkuliYnsGf5eOYljc/Mnxv+fW5j9L++ZCjgESS37u3fjp+tD10Y68v+wnOV/X77t80iBvkjz//v0yv10e7uc92iAgfg4W6X5H/9n6auQfygc+Yfikn8oLvmHI+CA2ZV/KC75h+KSfzjCqq2NWtdq+Yfikn8oro785/I+LpCP9vwDAMVSH8r7DWQgL3nPPwAAAAAAAAAAAAAAAAAAwG7Lw2szrWVQfd46H7H1Y0RUdvY/1KgtN/4fccTbjZ/vPEnSZi8l2WE9+fvTHk/Qo8s5v3397oN8+7/9SX/Oe2pncc9v2y3NRtTSxpOVyu77P2nefwf33ivqq//22MFrSjrK3/8x2P47PV/Jt/+p9Ygb6fwz2W3+K8WHjXX3+We0/RPLB3T8WY8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGBeBAAA//9hymrI") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x184) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x806071, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES64=r7, @ANYRES32=r11, @ANYBLOB="918b382cf95fc196"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0xa501) 3m26.980867251s ago: executing program 8 (id=10673): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x5c233}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_SELECT={0x5, 0x16, 0x1}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1d}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ffe}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x3, &(0x7f0000000080)=@raw=[@cb_func={0x18, 0xa, 0x4, 0x0, 0x5}, @ldst={0x0, 0x1, 0x2, 0x3, 0x2, 0xfffffffffffffff8}], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m26.490681608s ago: executing program 8 (id=10677): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xfffffffb, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='!=u~&0&&\t') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x153) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f00050001000600000005000500020000000500040000001a000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffff02ffffffffffffffffffffffff200004000a004e2000000401000000006d5a00000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16=r4], 0x21c}}, 0x0) syz_open_dev$vcsu(&(0x7f0000000740), 0x9, 0x42c00) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r4], 0x48) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000001000)="$eJzs3T9o3FYcB/Cf7k9d16a47VIo/QOllNZg3KFQ6NIuLRhKMaUU2oJLKZ2CHXBssvkyZcmQzEnwlMWEbHEyhiwmSyCrk3hwlgwxGWIyJMMFne7C+Xwmjs93CtbnA7L09J70nkDfZ3mQHEBhjUXEDxFRjojxiKhGRNLe4LNsGWsWl4fXZiLq9d8eJ412WTnTOm4kImoR8V1EpVW3uPrX5tP1n788s1D94tLqn8ODur52W5sbv2xf/PX01alvFkvNfaPNdft1HKaky75KEvF+Pzp7QySVvEfAfkyfvHI3zf0HEfF5I//VKDUje3b+rZvV+PrCXseee3Tno0GOFTh89Xo1/R1YqwOFU2o8AyeliYjItkuliYnsGf5eOYljc/Mnxv+fW5j9L++ZCjgESS37u3fjp+tD10Y68v+wnOV/X77t80iBvkjz//v0yv10e7uc92iAgfg4W6X5H/9n6auQfygc+Yfikn8oLvmHI+CA2ZV/KC75h+KSfzjCqq2NWtdq+Yfikn8oro785/I+LpCP9vwDAMVSH8r7DWQgL3nPPwAAAAAAAAAAAAAAAAAAwG7Lw2szrWVQfd46H7H1Y0RUdvY/1KgtN/4fccTbjZ/vPEnSZi8l2WE9+fvTHk/Qo8s5v3397oN8+7/9SX/Oe2pncc9v2y3NRtTSxpOVyu77P2nefwf33ivqq//22MFrSjrK3/8x2P47PV/Jt/+p9Ygb6fwz2W3+K8WHjXX3+We0/RPLB3T8WY8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGBeBAAA//9hymrI") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x184) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x806071, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d00000085"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES64=r7, @ANYRES32=r11, @ANYBLOB="918b382cf95fc196"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0xa501) 3m25.7591133s ago: executing program 8 (id=10687): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x14010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000003680)="$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") r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0xc, {"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", 0x100f}}, 0x1006) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x4, 0x28}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x18) openat$random(0xffffffffffffff9c, 0x0, 0x80000, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001f80), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000001fc0)={0x80, 0x1000, 0x0, 0x89f0, 0xfff, 0x7f}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r1, &(0x7f0000000100)="f8c5264b005d1e7f9590e1377ab650fe5c39869dfa35b8917e89c71320c64599b7be9301742b1817e5223c8aab5601ff84bc63433dbb5f2d9f7269a222f50f79a6d58e3081bec1ee76d43064fbd3c5b254b06a5affaec7b75da2623c23a4255eee680db130b19d483e8fb8beee500451b4ac9269be4e57b95bd2dc5f9c29da9c605d23c2a94a6470b22aebe8105502c0e04811", 0x93, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r6}, 0x18) 3m25.435728906s ago: executing program 8 (id=10693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="020000000000000002000000e000000200e70000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000200fffc0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, 0x0, 0x0) 3m24.325641833s ago: executing program 8 (id=10707): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) 3m24.261387674s ago: executing program 44 (id=10707): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) 2m49.092893702s ago: executing program 2 (id=11428): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x3}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r2, 0x40049366, &(0x7f0000000400)=0x4) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000170000004c0006803c00040067636d28616573f225000000000000000000000000000000100000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca4198904000500080006"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000f96000/0x1000)=nil, 0x8007ffffffa, &(0x7f0000000080)=[{0xffffffffffffdff9, 0xf06, 0x2}], 0x1, 0x6, 0x1, 0xa, 0x7, 0x18}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) add_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000340)="354afdacca9525c0dac1ee0f389380c5e4978556ed5eb9ad2e1e085e49d012507814aee9dd8b058478b4bb8b9f870f24db3d560cf7e2ce3a83ed48e3cfa9760b8594e0639ce810d592256a6a069802cfe434dda2363b5c82968d5efb1faafb782e7b59981f4618dc4aa73149e6c6de8e9b42edcf74566e5dd776c9df6ea89cdc83340b28b7a263f6", 0x88, 0xfffffffffffffffa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) splice(r0, 0x0, r8, 0x0, 0x4ffe6, 0x0) 2m48.223451456s ago: executing program 2 (id=11458): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x281445c, &(0x7f0000000200)={[{@journal_dev}, {@nouid32}]}, 0x2, 0x269, &(0x7f0000000780)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlink(0x0, &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m48.192102816s ago: executing program 2 (id=11460): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 2m48.173704207s ago: executing program 2 (id=11462): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB], 0x24, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 2m48.053637319s ago: executing program 2 (id=11463): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000000000000000200000000000000728e7b20ac14621bcebde7cc174c1321464db384f76b4dc8e1232c1a99fdb81ea0b7165f1216abda1831adf041a9b1e6284d7172b7a83af14715c178f2a", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7ad500bdb43bf980d2628b381080006000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000950000912a45e287bbca56a2400000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r4, @ANYBLOB="bb30a80fa8e3c3a56735c552f4dfce2eafed4e18967ed6096e783d12c2689d32cc08d72b147daa134416191e97622f58a3d0d856178eb7ab7fccdaf0888959b884f9d4435f97ca11d4c4814327e6b7540c743ad5df70b98e4df4e7d27eb8c94fd4c4108908296e49fe8c42e596df9d1f1597e136950f2ef458f4b050658a9c44fa0fc3513b7b0cfa6a431d5049ec5456ce7a1ded6e1c0de948e450f37ea5942cca96c4c1d9f76a941f"], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000f9ffff4cac2cb9fe4aff0000000000000001fcffff00002000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, &(0x7f0000000880)=ANY=[@ANYRESHEX=r1, @ANYBLOB="492fef2dda000f465adce63e761ba39cf5de3385e47402742ceef95e8478b92bc45fd23b2f5d419f6897990be58aae6a424af9e234122a7899110f2bec0aaa4f540c27a5578246eb7b779e7c00846aae61c659db07421c9c0af0a4fd542c87ce095db408c6db9c00e3173b12d825f58c250fe6a692533acaa8f3691df48dd62d780b16f00e96a8968464b3a8dc1cd7381585ed40159b7cd40132ecaba0122a3be2ead990aa9c2efa497548042df91c994ef560c4bf448293298c579e79e39f282e60da987148ae5092c092d667"], 0x0, 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES16=r1, @ANYRESHEX=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40088d4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x2}, 0x18) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000180)={'syz', 0x2}, &(0x7f00000001c0)='nl80211\x00', 0xfffffffffffffffd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) io_uring_setup(0x2090, &(0x7f0000000780)={0x0, 0x400826e, 0x20, 0x3, 0x260}) 2m48.020287999s ago: executing program 2 (id=11465): r0 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4118, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x10400, 0x10000, 0x0, 0x1, 0x3, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCNOTTY(r3, 0x5422) pipe2(&(0x7f0000001cc0), 0x800) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c756e616d653dd0"]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c756e616d653dd0"]) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x401, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) mount$cgroup(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000080)={[{@clone_children}, {@subsystem='blkio'}, {@noprefix}, {@noprefix}, {}, {@name={'name', 0x3d, '@)\\*[,+{%\xa9(%$'}}, {@name={'name', 0x3d, '.%'}}, {@name={'name', 0x3d, ':{*'}}, {@subsystem='io'}], [{@obj_user={'obj_user', 0x3d, '\\(.@+^'}}, {@seclabel}]}) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) 2m32.825730044s ago: executing program 45 (id=11465): r0 = getpgrp(0x0) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4118, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x10400, 0x10000, 0x0, 0x1, 0x3, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x2}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$unix(0x1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCNOTTY(r3, 0x5422) pipe2(&(0x7f0000001cc0), 0x800) (async) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c756e616d653dd0"]) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="2c756e616d653dd0"]) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000180)=0x401, 0x4) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) mount$cgroup(0x0, &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x1000000, &(0x7f0000000080)={[{@clone_children}, {@subsystem='blkio'}, {@noprefix}, {@noprefix}, {}, {@name={'name', 0x3d, '@)\\*[,+{%\xa9(%$'}}, {@name={'name', 0x3d, '.%'}}, {@name={'name', 0x3d, ':{*'}}, {@subsystem='io'}], [{@obj_user={'obj_user', 0x3d, '\\(.@+^'}}, {@seclabel}]}) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) 2m21.684599684s ago: executing program 6 (id=12101): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) sendmsg$key(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r5}, 0x10) r6 = socket(0x10, 0x2, 0x0) sendto$inet6(r6, &(0x7f00000007c0), 0x0, 0x2251197285d76a80, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r7, 0x0, 0x2}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000001850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmdt(0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) modify_ldt$read(0x0, &(0x7f0000000000)=""/20, 0x14) unshare(0x2040400) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) statx(r10, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, &(0x7f0000000540)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x0, 0x7, 0x4e20, 0x4000, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xfe}, {0x0, 0x7, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x6, 0x8, 0xcc}, {0xf6, 0x1, 0x1}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, 'zw!'}}]}, 0x140}}, 0x804) 2m21.230243971s ago: executing program 6 (id=12113): socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m21.159060052s ago: executing program 6 (id=12115): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc68, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000380)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r3, 0x0, 0x4ab}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000906010200000000000000000000fffc0900020073797a310000000005000100070000001c0007800c00018008000140e00000020c00028008000140e00040"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 2m20.947625296s ago: executing program 6 (id=12117): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x80, 0x7a5, &(0x7f0000000f80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000283d0020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f0000001500)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x11) set_mempolicy(0x6005, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) r5 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000080), 0x0, 0x236, &(0x7f0000000300)="$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") signalfd(r5, &(0x7f0000000840)={[0xe]}, 0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='mnt\x00', 0x0, 0x4010, r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_clone(0x3000, 0x0, 0x0, &(0x7f0000000800), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newtaction={0x6c, 0x30, 0x10b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x800000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x3}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m19.472230829s ago: executing program 6 (id=12134): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$eJzs3U1sG2UaAOB3xvH2L9t0pV1pd9VDtYtUpKpO0h8onNorolKlHpC4lMhxoyhOHMUONFEO6b1C9IAA9VJucOAI4sABcUHiwpULiDNSRSOQmh7AyH9pm9jBKXWdxs8jjT3ffON5v2/G73hmNCMHMLCO1V7SiP9ExKUkYuShuqFoVh5rzLe+tpK/v7aST6JavfxzEklE3FtbybfmT5rvhyJiNSL+HRFfZSNOpFvjlpeWZyaKxcJCszxamZ0fLS8tn5yenZgqTBXmTr/40tlzZ86Onxrv3Pjszvp644ebb9/49pXbNz/+5Ohq/t2JJM7HcLPu4X48SY11ko3zm6af6UWwPkr63QAeS6aZ57VU+leMRKaZ9e1UR55q04Aeq+6LqO5Esrqj2YHdLNlZ/gN7Rus4oHb+2xoeOUDI9Pb4486FxglILe56c2jUDDWuTcT++rnJwV+SR85MauebR3rbNAbA6vWIGBsa2vr9T5rfv8c39iQaSE99eaGxobZu/3Rj/xNt9j/DrWunf1Fr/7e+Zf/3IH6mw/7vUpcxfnv9xw86xr8e8d+28ZON+Emb+GlEvNFl/FuvfX6uU131w4jj0T5+S7L99eHRq9PFwljjtW2ML44ffXm7/h/sEL9xzXZ//Wem3fqf77L/n3396f9Wt4n//P+33/7t1v+BiHiny/j/uPfRq53q7lxP7taOAna6/WvTbncZ/4Xzx77vUHWgy0UAAAAAAAAAAABtpPV72ZI0tzGeprlc4xnef8bBtFgqV05cLS3OTTbueTsS2bR1p9VIo5zUyuPN+3Fb5VObyqdb9xFnDtTLuXypONnnvgMAAAAAAAAAAAAAAAAAAMBucWjT8/+/ZurP/2/+u2pgr+r8l9/AXif/YXA9mv9JxL6+NQV4yvz+w8Cqyn8YXPIfBpf8h8El/2FwyX8YXPIfBpf8BwAAAAAAAAAAAAAAAAAAAAAAAACAnrh08WJtqN5fW8nXypNDS4szpTdPThbKM7nZxXwuX1qYz02VSlPFQi5fmv2z5RVLpfmxmFu8NloplCuj5aXlK7OlxbnKlenZianClUL2qfQKAAAAAAAAAAAAAAAAAAAAni3D9SFJcxGR1sfTNJeL+HtEHIlscnW6WBiLiMMR8V0mu69WHu93owEAAAAAAAAAAAAAAAAAAGCPKS8tz0wUi4WFARkZ2jLlm84zR8Tqk21GbYk7/lS2ua12yzp81kYObz9PJvrewt040ucdEwAAAAAAAAAAAAAAAAAADKAHD/12+4nfe9sgAAAAAAAAAAAAAAAAAAAAGEjpT0lE1IbjI88Nb679W7Keqb9HxFu3Lr93baJSWRivTb+7Mb3yfnP6qX60H+hWK09beQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8UF5anpkoFgsLPRzpdx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHscfAQAA//+aXtbd") r1 = open(0x0, 0x1c5142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8993, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000a00)=[{0x21, 0x0, [0xfffffffb, 0xb8, 0x4, 0x3, 0x3, 0x4, 0x4, 0x8, 0xc, 0x40, 0x80000000, 0x3f, 0x645a, 0x8, 0x4, 0x7f]}, {0xe18d812aa351a4be, 0x0, [0x7, 0x514e, 0x400, 0x6, 0xe, 0x9b, 0x9, 0x4, 0x3, 0x5, 0x400, 0xd593, 0x7, 0x5, 0x0, 0x7]}, {0x2c, 0x0, [0x3, 0xfa, 0x101, 0x5, 0x40, 0x400, 0x2000, 0x7f, 0xd17, 0x4, 0x4, 0x101, 0x5c, 0x6, 0x9, 0x4]}, {0x0, 0x0, [0x7, 0x80000001, 0x3, 0xffff, 0x0, 0x9, 0x0, 0x101, 0x2, 0x9ef, 0x0, 0xad, 0x4, 0x4, 0x6, 0xfffffffa]}, {0x3, 0x0, [0x8, 0x5, 0x2, 0x401, 0x80000000, 0x4, 0x1, 0x5, 0x2, 0xa8f, 0x9, 0xfffffff9, 0x5, 0xe4, 0x9, 0x431]}, {0x9, 0x0, [0x8, 0xe6f, 0xff, 0x8, 0x8000, 0xab19, 0x8, 0x8, 0x3, 0x5, 0x1, 0x6, 0x7, 0xe682, 0x18, 0x6]}, {0x3a, 0x0, [0x4, 0x9, 0x8001, 0x7, 0x6, 0x8, 0x10000, 0x8, 0x2, 0x6, 0xffffffff, 0xfffffffa, 0x2e, 0xf0, 0x4, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x1f8}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2m16.705918294s ago: executing program 4 (id=12190): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000580)={0x0, 0x40000, 0x0, 'queue1\x00', 0x8000}) 2m16.692478995s ago: executing program 4 (id=12191): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000003, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000003, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) (async) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="1803fffffffffffff10000000000000018010000696c6c2500000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095112b620fd5c82d2e03f36a003434d3d9513308b62404fac6837e1835b253e540ab17c35fa0"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRESDEC=r3, @ANYRES8=r3], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='mm_page_alloc\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000002480)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) close_range(r8, 0xffffffffffffffff, 0x10000000000000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000300)={0x9, 0x8, 0x4efac0f, {0x4, 0x33e}, 0xd07, 0x4}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r5, 0x402c5342, &(0x7f0000000300)={0x9, 0x8, 0x4efac0f, {0x4, 0x33e}, 0xd07, 0x4}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@noquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") (async) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@noquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") pipe(&(0x7f0000000280)) 2m16.589462796s ago: executing program 4 (id=12192): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 2m16.34800524s ago: executing program 4 (id=12200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 2m16.34754202s ago: executing program 46 (id=12200): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) 2m14.592226118s ago: executing program 6 (id=12209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (fail_nth: 1) 2m14.578478558s ago: executing program 47 (id=12209): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (fail_nth: 1) 5.473971972s ago: executing program 7 (id=15309): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r2, 0x5608, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000100)=0x100000001) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607ee", 0x26}, {&(0x7f0000000380)="b70000000000000002000000de27a3ba99f3ee879268f1543cf3764a80be2b10d74ea27adbc10c64d2d939e2a5c70fd2b8918e4a6ca084349abe6cc860efa10deffe6f9e41f8d393db509026c9c329508d226f9ee00ca384b38205689f91c31952f092388197ee0fcf8f971ff1e474851e7b748ad4877222b46dd23800c2493f63d7c22712969af5a4f97d291206737966bc30b5c8ec1e0b0c8747595d65687c1af1101141bdfd2a51cb2d16248e89927990", 0xb2}, {&(0x7f0000000040)="37a8a6c41e", 0x5}, {&(0x7f00000002c0)="3de496b26cb156fc17de651bb0059979575c10b71057fbfd852720c6e5289eca40ab309686d254294c897675e9545fd0c4559f374d", 0x35}], 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xfff}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000001c0)={0x2e, @loopback, 0x4e22, 0x4, 'none\x00', 0x0, 0x105ffeea, 0x3a}, 0x2c) 4.174693683s ago: executing program 7 (id=15337): socket$netlink(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000083c0)={r1, 0xe0, &(0x7f00000082c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd020303009c000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') getdents64(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0x9, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) eventfd2(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2.827810025s ago: executing program 7 (id=15407): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000380)={[{@nojournal_checksum}, {@user_xattr}, {@dioread_nolock}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@discard}, {@mblk_io_submit}, {@minixdf}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80000000}}, {@nombcache}, {@data_writeback}]}, 0x45, 0x7b7, &(0x7f0000001900)="$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") ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000b40)={'filter\x00', 0x5, 0x4, 0x3c8, 0x1f8, 0x0, 0x110, 0x2e0, 0x2e0, 0x1f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x1c}, @loopback, 0xffffffff, 0x0, 0xc, 0x2, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff]}}, 0x800, 0x5, 0x0, 0x2, 0x9, 0x8, 'bridge_slave_1\x00', 'veth0_virt_wifi\x00', {}, {}, 0x0, 0x120}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x7840, 0x9, 0x7ff, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x38}, 0x58, r5}) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) execveat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f0000000500)={[&(0x7f00000002c0)='syz_tun\x00', &(0x7f0000000440)='[,\\\x00', &(0x7f00000004c0)='\x00']}, &(0x7f00000007c0)={[&(0x7f0000000540)='syztnl0\x00', &(0x7f0000000580)=':@\xe3#*$]\x00', &(0x7f00000005c0)=',}^\x00', &(0x7f0000000640)='![%\'\xc7&/}U.!%+\x00', &(0x7f0000000740)='ext4\x00']}, 0x1400) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x6}, {0xfff3}}}, 0x24}}, 0x0) 2.50925649s ago: executing program 7 (id=15408): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000a00)=[{0x21, 0x0, [0xfffffffb, 0xb8, 0x4, 0x3, 0x3, 0x4, 0x4, 0x8, 0xc, 0x40, 0x80000000, 0x3f, 0x645a, 0x8, 0x4, 0x7f]}, {0xe18d812aa351a4be, 0x0, [0x7, 0x514e, 0x400, 0x6, 0xe, 0x9b, 0x9, 0x4, 0x3, 0x5, 0x400, 0xd593, 0x7, 0x5, 0x0, 0x7]}, {0x2c, 0x0, [0x3, 0xfa, 0x101, 0x5, 0x40, 0x400, 0x2000, 0x7f, 0xd17, 0x4, 0x4, 0x101, 0x5c, 0x6, 0x9, 0x4]}, {0x0, 0x0, [0x7, 0x80000001, 0x3, 0xffff, 0x0, 0x9, 0x0, 0x101, 0x2, 0x9ef, 0x0, 0xad, 0x4, 0x4, 0x6, 0xfffffffa]}, {0x3, 0x0, [0x8, 0x5, 0x2, 0x401, 0x80000000, 0x4, 0x1, 0x5, 0x2, 0xa8f, 0x9, 0xfffffff9, 0x5, 0xe4, 0x9, 0x431]}, {0x9, 0x0, [0x8, 0xe6f, 0xff, 0x8, 0x8000, 0xab19, 0x8, 0x8, 0x3, 0x5, 0x1, 0x6, 0x7, 0xe682, 0x18, 0x6]}, {0x3a, 0x0, [0x4, 0x9, 0x8001, 0x7, 0x6, 0x8, 0x10000, 0x8, 0x2, 0x6, 0xffffffff, 0xfffffffa, 0x2e, 0xf0, 0x4, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x1f8}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 2.4920358s ago: executing program 7 (id=15410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r2, 0x5608, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000100)=0x100000001) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607ee", 0x26}, {&(0x7f0000000380)="b70000000000000002000000de27a3ba99f3ee879268f1543cf3764a80be2b10d74ea27adbc10c64d2d939e2a5c70fd2b8918e4a6ca084349abe6cc860efa10deffe6f9e41f8d393db509026c9c329508d226f9ee00ca384b38205689f91c31952f092388197ee0fcf8f971ff1e474851e7b748ad4877222b46dd23800c2493f63d7c22712969af5a4f97d291206737966bc30b5c8ec1e0b0c8747595d65687c1af1101141bdfd2a51cb2d16248e89927990", 0xb2}, {&(0x7f0000000040)="37a8a6c41e", 0x5}, {&(0x7f00000002c0)="3de496b26cb156fc17de651bb0059979575c10b71057fbfd852720c6e5289eca40ab309686d254294c897675e9545fd0c4559f374d", 0x35}], 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xfff}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000001c0)={0x2e, @loopback, 0x4e22, 0x4, 'none\x00', 0x0, 0x105ffeea, 0x3a}, 0x2c) 2.389846282s ago: executing program 7 (id=15413): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffd, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xfffffffb, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='!=u~&0&&\t') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, 0x0, 0x153) close(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020605000000000000000000000000001400078005001400090000000800124008001f00050001000600000005000500020000000500040000001a000900020073797a31000000000c000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x50}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES16=r4], 0x21c}}, 0x0) syz_open_dev$vcsu(0x0, 0x9, 0x42c00) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000000), &(0x7f00000000c0)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r4], 0x48) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000001c0), 0xfe, 0x25e, &(0x7f0000001000)="$eJzs3T9o3FYcB/Cf7k9d16a47VIo/QOllNZg3KFQ6NIuLRhKMaUU2oJLKZ2CHXBssvkyZcmQzEnwlMWEbHEyhiwmSyCrk3hwlgwxGWIyJMMFne7C+Xwmjs93CtbnA7L09J70nkDfZ3mQHEBhjUXEDxFRjojxiKhGRNLe4LNsGWsWl4fXZiLq9d8eJ412WTnTOm4kImoR8V1EpVW3uPrX5tP1n788s1D94tLqn8ODur52W5sbv2xf/PX01alvFkvNfaPNdft1HKaky75KEvF+Pzp7QySVvEfAfkyfvHI3zf0HEfF5I//VKDUje3b+rZvV+PrCXseee3Tno0GOFTh89Xo1/R1YqwOFU2o8AyeliYjItkuliYnsGf5eOYljc/Mnxv+fW5j9L++ZCjgESS37u3fjp+tD10Y68v+wnOV/X77t80iBvkjz//v0yv10e7uc92iAgfg4W6X5H/9n6auQfygc+Yfikn8oLvmHI+CA2ZV/KC75h+KSfzjCqq2NWtdq+Yfikn8oro785/I+LpCP9vwDAMVSH8r7DWQgL3nPPwAAAAAAAAAAAAAAAAAAwG7Lw2szrWVQfd46H7H1Y0RUdvY/1KgtN/4fccTbjZ/vPEnSZi8l2WE9+fvTHk/Qo8s5v3397oN8+7/9SX/Oe2pncc9v2y3NRtTSxpOVyu77P2nefwf33ivqq//22MFrSjrK3/8x2P47PV/Jt/+p9Ygb6fwz2W3+K8WHjXX3+We0/RPLB3T8WY8nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYGBeBAAA//9hymrI") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xec) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x184) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x806071, 0x0, 0x0, 0x0, &(0x7f0000000140)) mknod$loop(&(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\a\x00'], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYRES64=r7, @ANYRES32=r11, @ANYBLOB="918b382cf95fc196"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0xa501) 1.276634549s ago: executing program 1 (id=15442): socket$inet6(0xa, 0x3, 0x6) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000001780)={&(0x7f00000003c0)=@caif=@rfm={0x25, 0x15, "fb95785b587f23ba61bfb990191a2af1"}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001800)="a5", 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) shutdown(r0, 0x2) 1.27624178s ago: executing program 1 (id=15443): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 1.275496949s ago: executing program 1 (id=15445): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000000880)="$eJzs3c9vI1cdAPDvOL+cNG3S0gMgoEspLGi1TuJto6oHWE4IoUqIHkHahsQbRbHjKHZKE/aQ/g9IVOIER/4Azj1x54LgxmU5IPEjAm1W4mA040nWm7U3ZpPYUfz5SKN5b2bs73trzXv21xu/AEbWjYg4iIjJiPgwIuby40m+xd32ll736PDB6tHhg9UkWq0P/plk59Nj0fGY1Ev5cxYj4kffi/hp8mzcxt7+5kq1WtlpV6cXmrXthcbe/u2N2sp6Zb2yVS4vLy0vvnvnnfKF9fWN2mRe+vLDPxx86+dps2bzI539uEjtrk+cxEmNR8QPLiPYEIzl/ZkcdkN4IYWIeC0i3szu/7kYy15NAOA6a7XmojXXWQcArrtClgNLCqU8FzAbhUKp1M7hvR4zhWq90bx1v767tdbOlc3HROH+RrWymOcK52MiSetLWflJvXyqficiXo2IX0xNZ/XSar26Nsw3PgAwwl46Nf//Z6o9/wMA11xx2A0AAAbO/A8Ao8f8DwCjx/wPAKPnyfx/d6jtAAAGx+d/ABg95n8AGCk/fP/9dGsd5b9/vfbR3u5m/aPba5XGZqm2u1pare9sl9br9fXsN3tqZz1ftV7fXno7dj+e//Z2o7nQ2Nu/V6vvbjXvZb/rfa8yMZBeAQDP8+obn/05iYiD96azLTrWcjBXw/VWGHYDgKEZG3YDgKGx2heMrnN8xpcegGuiyxK9TylGxPTpg61Wq3V5TQIu2c0vyP/DqOrI//tfwDBi5P9hdMn/w+hqtZJ+1/yPfi8EAK42OX6gx/f/r+X73+ZfDvxk7fQVn15mqwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBqO17/t5SvBT4bhUKpFPFyRMzHRHJ/o1pZjIhXIuJPUxNTaX1pyG0GAM6r8LckX//r5txbs6fPTiaPp7J9RPzsVx/88uOVZnPnj+nxf50cb36aHy8Po/0AwFmO5+ls3/FB/tHhg9XjbZDt+ft3I6LYjn90OBlHJ/HHYzzbF2MiImb+neT1tqQjd3EeB59ExOe79T+J2SwH0l759HT8NPbLA41feCp+ITvX3qf/Fp+7gLbAqPksHX/udrv/CnEj23e//4vZCHV++fiXPtXqUTYGPol/PP6N9Rj/bvQb4+3ff79dmn723CcRXxyPOI591DH+HMdPesR/q8/4f/nSV97sda7164ib0T1+Z6yFZm17obG3f3ujtrJeWa9slcvLS8uL7955p7yQ5agXes8G/3jv1itZocslaf9nesQvntH/r/fZ/9/898Mff7XHuTT+N7/WLX4hXn9O/HRO/Eaf8VdmflfsdS6Nv9aj/2e9/rf6jP/wr/vPLBsOAAxPY29/c6VarewMsnD8RmKgQRX6K0zlL85Vac9ThSvbsM2V6ncGFWsy/q9HtVovFKvXiHERWTfgKji56SPi8bAbAwAAAAAAAAAAAAAAdHWpf6iUtAvD7iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADX1/8CAAD//8jOyzo=") syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000300)={[{@grpjquota}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x4f4, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x80000, 0x0, @desc1}}) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, &(0x7f00000000c0)) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close(r1) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000dc0)) r2 = gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x184, 0x10, 0x713, 0x0, 0x0, {{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@remote, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x4, {{'ecb(cipher_null)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x184}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$vcsn(0x0, 0x0, 0x26642) syz_emit_ethernet(0x3e, &(0x7f00000004c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @ndisc_rs}}}}}, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000280), &(0x7f0000000380)=@v3={0x3000000, [{0x5, 0x82}, {0x80000000, 0xffffaf0a}]}, 0x18, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x80, 0x5, 0x7fff0003}]}) 1.21597896s ago: executing program 1 (id=15446): socket$netlink(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000083c0)={r1, 0xe0, &(0x7f00000082c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd020303009c000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') getdents64(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0x9, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) eventfd2(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.182881011s ago: executing program 1 (id=15447): getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="8b19d645fc464a58b872807eddd50800000016aa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.052206153s ago: executing program 5 (id=15448): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000)=0x4, 0x40, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1400, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0xc, 0x10001, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000100001046000000002103407d5d20000", @ANYRES32=0x0, @ANYRES16=r0], 0x38}}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x4c, 0x8, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000880}, 0x50) 862.739746ms ago: executing program 5 (id=15450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000020000", @ANYRES32=0x0, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r2, 0x5608, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000100)=0x100000001) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607ee", 0x26}, {&(0x7f0000000380)="b70000000000000002000000de27a3ba99f3ee879268f1543cf3764a80be2b10d74ea27adbc10c64d2d939e2a5c70fd2b8918e4a6ca084349abe6cc860efa10deffe6f9e41f8d393db509026c9c329508d226f9ee00ca384b38205689f91c31952f092388197ee0fcf8f971ff1e474851e7b748ad4877222b46dd23800c2493f63d7c22712969af5a4f97d291206737966bc30b5c8ec1e0b0c8747595d65687c1af1101141bdfd2a51cb2d16248e89927990", 0xb2}, {&(0x7f0000000040)="37a8a6c41e", 0x5}, {&(0x7f00000002c0)="3de496b26cb156fc17de651bb0059979575c10b71057fbfd852720c6e5289eca40ab309686d254294c897675e9545fd0c4559f374d", 0x35}], 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xfff}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000001c0)={0x2e, @loopback, 0x4e22, 0x4, 'none\x00', 0x0, 0x105ffeea, 0x3a}, 0x2c) 796.086327ms ago: executing program 5 (id=15455): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000003c0)='./file0\x00', 0x36) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 780.640898ms ago: executing program 5 (id=15456): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280), 0x6) 727.487449ms ago: executing program 5 (id=15460): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 699.260269ms ago: executing program 5 (id=15462): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x19) (async) ioctl$FIONREAD(r0, 0x40085500, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x26}) (async) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) (async) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r7}, 0x4) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) (async) openat$rtc(0xffffffffffffff9c, 0x0, 0x103a02, 0x0) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r6) sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r9, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4048000}, 0x8802) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r2, @ANYBLOB="2101ff00000000001c000005000c00028006002700a100"/36], 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 416.319753ms ago: executing program 9 (id=15467): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000003c0)='./file0\x00', 0x36) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 404.079844ms ago: executing program 1 (id=15468): syz_usb_connect(0x3, 0x3fa, &(0x7f0000000780)={{0x12, 0x1, 0x250, 0x69, 0xf9, 0x83, 0x8, 0x413c, 0x81e0, 0xa775, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e8, 0x2, 0xf, 0x9, 0x90, 0xfd, [{{0x9, 0x4, 0x51, 0xb1, 0xa, 0xa8, 0x1b, 0xc8, 0x6f, [], [{{0x9, 0x5, 0xb, 0x8, 0x20, 0x1, 0x5, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x2, 0x1, 0x0, [@generic={0x4, 0x30, "bbdb"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x4, 0x17, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x4000}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x1}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0xf, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x9}]}}, {{0x9, 0x5, 0x9, 0x4, 0x3ff, 0x5, 0x7f, 0xfd}}, {{0x9, 0x5, 0x0, 0x8, 0x10, 0x17, 0x67, 0xa0, [@generic={0x46, 0x24, "6adad0b65fec99cdea64be1e3f3275f602f1fa556c84b21c275094b3139d413d3657f38802bedb6dda6b34e45d6a99da507aec1e54d7d8244a52d4129c6062da04cd4162"}, @generic={0x6d, 0x24, "10c655ca949213e1f410b8165137ed4bc7ea49afedcacdf1dd9430810ae4d8c98fe7b4db0419252654a01a16543b5a9ed1d5822e013ed324a9ee9e94a36331af771f3cadfa8b9385d5e8c0dbc7974633b63a8b6299ec2430d0009820b9f58a37c38658932144a589a7cfcb"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x10, 0x7, 0x9, 0x7f}}, {{0x9, 0x5, 0x9, 0x8, 0x10, 0x5, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x4}]}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x6, 0xf, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x8}, @generic={0x21, 0x1, "c29dc94df56063026dcf08a40fb9fdfbb7eabed3545a2cb22f480e4542046d"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x8, 0xfe, 0x2}}]}}, {{0x9, 0x4, 0xd7, 0x4, 0x8, 0xf7, 0x82, 0xad, 0x5, [@hid_hid={0x9, 0x21, 0x0, 0x8, 0x1, {0x22, 0x3b4}}], [{{0x9, 0x5, 0xc, 0x0, 0x200, 0x0, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xdb0c}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0xd, 0x7, 0x2}}, {{0x9, 0x5, 0xb, 0xc, 0x3ff, 0x1, 0x7f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8d, 0x10}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0xfc, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfa, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x35}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xd1, 0x11, 0x5, [@generic={0xe1, 0x23, "322a27eecc4198aada43514c99c6e52bce7f44cadcf320eb21ef3e34e358ca62a661668e39d1e5db96cb117964b0b98a0bba3ce970b6172c3e6ef4c6fb3739d6febc17f22e5ce80006415a9f3c059b0b718cfc1b7a2ba7c15c1fb58dfd74959c5560751a99b139592302bf42ab577c53e23bd4d2d16b7f8fff9b4172e0075eeee02771c6f29c572f2164c03ae536bb886bbe360cd5bbf761a9f554145a42ecc586861f1089acac6ae1a5b86ec7ca85a783162249c6e3d4eba6d982c57741abbbfaa63de6a391a1de73e2c4d6df3bbfa161ad377f9b3d44315a87e317aa3171"}, @generic={0x4a, 0x22, "55a22f75a62597e9dd0dbe9ee249f28f15320271a1d60e8a934f139918b8b1dd598ea24f0df3d7b70dde2d56f95b63ae79c3dfa8cc49c3288f30a83b309a438835fabb9241691af3"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x400, 0x3a, 0x87, 0x4, [@generic={0xd2, 0xc, "384e08331e80384c544b2f83b06e78eddfdee1bef81f15bd03bbb2a0e2281e662ace3ca8889e027f736c656b371fd2c65785fb8f8fec287883938f97fa7f78108da7943ec40ce7ee4f5cb9c9b76472361abbfb699985e2d80d60c4ffeda29b7b99a05534b42ae33bb878414c155edf5b725ee0e21a2bacf9eab911bf378979a36bcc3e86c887b6ad42c02222f353af94a71e8814425fa73d7a75d94b768dcda4add463ff999ac780668d5453dbfc6a663f5101b58b7a9b57def5b29540a3a7c20785231add85177fca012bc6f74b9160"}]}}, {{0x9, 0x5, 0x6, 0x3, 0x3f7, 0x5, 0x0, 0x7}}, {{0x9, 0x5, 0x0, 0x4, 0x40, 0x0, 0x6, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x8, 0x8}]}}]}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0xb, 0x6, 0x9, 0x10, 0xfd}, 0x13b, &(0x7f0000000580)={0x5, 0xf, 0x13b, 0x5, [@generic={0xec, 0x10, 0x1, "f10f9e642033b85472ee8dcdd51915e2734fd2a5064c907ca30a6648d10b59049f79b32683d1e74a1aa96ab59d118d56ee3fce6c02234f00298bdcc73274f29752fb2eeaed79fa32aac9684ff7174a4e17fc3b508d2148c84aebbb07913b783b622b63338e9a9ecc1476d19df3d0acf5dec20c5cc6b29dca967d4c002d590691bf75e61f464cd6e703ec74f72b5133e2f57320256f730307e15e9acedadb3a59405cb38936071698c0979998ce84bc3c18c4d54e7e76076f051861cdc06622e18ecf1e17f8c164e7f4be311eab1ff67ca6e7e561b594d334045b26d16be952b7beeb828f1cd7e622ba"}, @ssp_cap={0xff46, 0x10, 0xa, 0x7, 0x3, 0xfaca, 0xf0f, 0x6, [0xc0, 0xc000, 0x1fec000]}, @ext_cap={0x7, 0x10, 0x2, 0x1c, 0x4, 0x2, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc4, 0x2e, 0x8, 0x3, 0x5}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x7fffffb, 0x881d0a9ff8daa3ba, 0x8, [0x7e0f, 0x0, 0x3fc0, 0xc000, 0x3f0f]}]}}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0xe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendfile(r3, r2, 0x0, 0x13) 328.194565ms ago: executing program 9 (id=15470): socket$netlink(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000083c0)={r1, 0xe0, &(0x7f00000082c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x8, 0x0, 0x0}}, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="000086dd020303009c000a004000623d885d009c11fffc000000000000000000000000000000ff0200000000000000000000000000014e224e21009c90"], 0xd2) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') getdents64(r3, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) prlimit64(0x0, 0x9, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 255.072276ms ago: executing program 3 (id=15475): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffa}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000080)={0x0, 0x0, 0x2007, 0x1fd}) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x6000, r0}, 0x18) r4 = openat2(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x20001, 0xa, 0x8}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r6, &(0x7f0000004200)='t', 0x1) sendfile(r6, r5, 0x0, 0x7ffff000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000400)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0], 0x0, 0x41, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x14, 0x1a, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @alu={0x4, 0x1, 0x1, 0x4, 0x7, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x2, 0x1, 0x0, r3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x77, 0x5e, &(0x7f0000000300)=""/94, 0x41100, 0x10, '\x00', 0x0, @fallback=0x18, r6, 0x8, &(0x7f0000000380)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xe, 0x6, 0xff}, 0x10, r7, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000700)=[{0x0, 0x3, 0x5, 0x2}, {0x2, 0x2, 0x1, 0xb}, {0x3, 0x5, 0x3, 0x1}, {0x1, 0x5, 0x6, 0xa}, {0x3, 0x5, 0xe}, {0x2, 0x5, 0x7, 0x5}], 0x10, 0x6}, 0x94) 222.567747ms ago: executing program 3 (id=15476): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008083850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) 118.189028ms ago: executing program 3 (id=15477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000020000", @ANYRES32=0x0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TCXONC(r2, 0x5608, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r3, 0x2284, &(0x7f0000000080)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r7 = creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000100)=0x100000001) writev(r8, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607ee", 0x26}, {&(0x7f0000000380)="b70000000000000002000000de27a3ba99f3ee879268f1543cf3764a80be2b10d74ea27adbc10c64d2d939e2a5c70fd2b8918e4a6ca084349abe6cc860efa10deffe6f9e41f8d393db509026c9c329508d226f9ee00ca384b38205689f91c31952f092388197ee0fcf8f971ff1e474851e7b748ad4877222b46dd23800c2493f63d7c22712969af5a4f97d291206737966bc30b5c8ec1e0b0c8747595d65687c1af1101141bdfd2a51cb2d16248e89927990", 0xb2}, {&(0x7f0000000040)="37a8a6c41e", 0x5}, {&(0x7f00000002c0)="3de496b26cb156fc17de651bb0059979575c10b71057fbfd852720c6e5289eca40ab309686d254294c897675e9545fd0c4559f374d", 0x35}], 0x4) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0xfff}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f00000001c0)={0x2e, @loopback, 0x4e22, 0x4, 'none\x00', 0x0, 0x105ffeea, 0x3a}, 0x2c) 93.527569ms ago: executing program 9 (id=15478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0x10000002}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'caif0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000100000000000002a0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 79.165939ms ago: executing program 9 (id=15479): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000040)={0x1}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000800)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x0, 0x0) fspick(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x1, 0x7840, 0x9, 0x7ff, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x38}, 0x58, r5}) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) execveat(r2, &(0x7f0000000280)='./file0\x00', &(0x7f0000000500)={[&(0x7f00000002c0)='syz_tun\x00', &(0x7f0000000440)='[,\\\x00', &(0x7f00000004c0)='\x00']}, &(0x7f00000007c0)={[&(0x7f0000000540)='syztnl0\x00', &(0x7f0000000580)=':@\xe3#*$]\x00', &(0x7f00000005c0)=',}^\x00', &(0x7f0000000640)='![%\'\xc7&/}U.!%+\x00', &(0x7f0000000740)='ext4\x00']}, 0x1400) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0x6}, {0xfff3}}}, 0x24}}, 0x0) 33.76935ms ago: executing program 9 (id=15480): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000003c0)='./file0\x00', 0x36) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 31.70103ms ago: executing program 3 (id=15481): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000080)={0x0, 0x3000000, 0x8, 0x1b, 0x100, &(0x7f00000000c0)="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"}) 14.13646ms ago: executing program 9 (id=15482): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) 1.06732ms ago: executing program 3 (id=15483): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r1 = dup(r0) write$P9_RLERRORu(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) write$binfmt_elf64(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = creat(&(0x7f00000003c0)='./file0\x00', 0x36) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000700)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000a00)=[{0x21, 0x0, [0xfffffffb, 0xb8, 0x4, 0x3, 0x3, 0x4, 0x4, 0x8, 0xc, 0x40, 0x80000000, 0x3f, 0x645a, 0x8, 0x4, 0x7f]}, {0xe18d812aa351a4be, 0x0, [0x7, 0x514e, 0x400, 0x6, 0xe, 0x9b, 0x9, 0x4, 0x3, 0x5, 0x400, 0xd593, 0x7, 0x5, 0x0, 0x7]}, {0x2c, 0x0, [0x3, 0xfa, 0x101, 0x5, 0x40, 0x400, 0x2000, 0x7f, 0xd17, 0x4, 0x4, 0x101, 0x5c, 0x6, 0x9, 0x4]}, {0x0, 0x0, [0x7, 0x80000001, 0x3, 0xffff, 0x0, 0x9, 0x0, 0x101, 0x2, 0x9ef, 0x0, 0xad, 0x4, 0x4, 0x6, 0xfffffffa]}, {0x3, 0x0, [0x8, 0x5, 0x2, 0x401, 0x80000000, 0x4, 0x1, 0x5, 0x2, 0xa8f, 0x9, 0xfffffff9, 0x5, 0xe4, 0x9, 0x431]}, {0x9, 0x0, [0x8, 0xe6f, 0xff, 0x8, 0x8000, 0xab19, 0x8, 0x8, 0x3, 0x5, 0x1, 0x6, 0x7, 0xe682, 0x18, 0x6]}, {0x3a, 0x0, [0x4, 0x9, 0x8001, 0x7, 0x6, 0x8, 0x10000, 0x8, 0x2, 0x6, 0xffffffff, 0xfffffffa, 0x2e, 0xf0, 0x4, 0x6]}], 0xffffffffffffffff, 0x1, 0x1, 0x1f8}}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 0s ago: executing program 3 (id=15484): r0 = io_uring_setup(0x306a, &(0x7f0000000480)={0x0, 0xff4a, 0x8, 0x2, 0x1c0}) syz_io_uring_setup(0x5b9b, &(0x7f0000000500)={0x0, 0x0, 0x20000, 0x3, 0x1ad, 0x0, r0}, &(0x7f0000000080), &(0x7f00000001c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioperm(0x8, 0x9, 0x5a) syz_io_uring_setup(0x5c2, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket(0x28, 0x807, 0x1) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4800) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r7 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 935.525095][T13233] __dump_stack+0x1d/0x30 [ 935.525115][T13233] dump_stack_lvl+0xe8/0x140 [ 935.525134][T13233] dump_stack+0x15/0x1b [ 935.525152][T13233] should_fail_ex+0x265/0x280 [ 935.525231][T13233] should_failslab+0x8c/0xb0 [ 935.525252][T13233] kmem_cache_alloc_noprof+0x50/0x310 [ 935.525279][T13233] ? getname_flags+0x80/0x3b0 [ 935.525302][T13233] getname_flags+0x80/0x3b0 [ 935.525414][T13233] user_path_at+0x28/0x130 [ 935.525439][T13233] do_fchownat+0xb0/0x210 [ 935.525506][T13233] __x64_sys_lchown+0x4a/0x60 [ 935.525576][T13233] x64_sys_call+0x1c87/0x2fb0 [ 935.525639][T13233] do_syscall_64+0xd2/0x200 [ 935.525659][T13233] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 935.525695][T13233] ? clear_bhb_loop+0x40/0x90 [ 935.525720][T13233] ? clear_bhb_loop+0x40/0x90 [ 935.525743][T13233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.525766][T13233] RIP: 0033:0x7fb9a318e9a9 [ 935.525780][T13233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.525797][T13233] RSP: 002b:00007fb9a17ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 935.525816][T13233] RAX: ffffffffffffffda RBX: 00007fb9a33b5fa0 RCX: 00007fb9a318e9a9 [ 935.525854][T13233] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 935.525868][T13233] RBP: 00007fb9a17ef090 R08: 0000000000000000 R09: 0000000000000000 [ 935.525878][T13233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.525889][T13233] R13: 0000000000000000 R14: 00007fb9a33b5fa0 R15: 00007ffd02e410c8 [ 935.525905][T13233] [ 935.738130][T13239] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14766'. [ 935.786577][T13242] wireguard0: entered promiscuous mode [ 935.792151][T13242] wireguard0: entered allmulticast mode [ 935.873045][T13265] loop7: detected capacity change from 0 to 2048 [ 935.879867][T13265] EXT4-fs: quotafile must be on filesystem root [ 935.998323][T13290] loop7: detected capacity change from 0 to 512 [ 936.043835][T13290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.061650][T13290] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz.7.14787: iget: bad i_size value: 2533274857506816 [ 936.074524][T13280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14779'. [ 936.087204][ T6253] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.112862][T13304] openvswitch: netlink: Message has 6 unknown bytes. [ 936.125274][T13304] loop9: detected capacity change from 0 to 512 [ 936.139157][T13304] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 936.150857][T13304] EXT4-fs (loop9): invalid journal inode [ 936.229792][T13322] __vm_enough_memory: pid: 13322, comm: syz.1.14799, bytes: 21200214966272 not enough memory for the allocation [ 936.295625][T13330] wireguard0: entered promiscuous mode [ 936.301174][T13330] wireguard0: entered allmulticast mode [ 936.341772][T13336] loop7: detected capacity change from 0 to 512 [ 936.358359][T13333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14804'. [ 936.361554][T13336] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 936.397328][T13336] EXT4-fs error (device loop7): ext4_lookup:1787: inode #12: comm syz.7.14802: iget: bad i_size value: 2533274857506816 [ 936.422755][ T6253] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 936.476643][T13351] FAULT_INJECTION: forcing a failure. [ 936.476643][T13351] name failslab, interval 1, probability 0, space 0, times 0 [ 936.489397][T13351] CPU: 0 UID: 0 PID: 13351 Comm: syz.1.14809 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 936.489491][T13351] Tainted: [W]=WARN [ 936.489547][T13351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 936.489558][T13351] Call Trace: [ 936.489564][T13351] [ 936.489571][T13351] __dump_stack+0x1d/0x30 [ 936.489594][T13351] dump_stack_lvl+0xe8/0x140 [ 936.489621][T13351] dump_stack+0x15/0x1b [ 936.489636][T13351] should_fail_ex+0x265/0x280 [ 936.489668][T13351] should_failslab+0x8c/0xb0 [ 936.489737][T13351] kmem_cache_alloc_noprof+0x50/0x310 [ 936.489765][T13351] ? skb_clone+0x151/0x1f0 [ 936.489782][T13351] skb_clone+0x151/0x1f0 [ 936.489802][T13351] dev_queue_xmit_nit+0x146/0x680 [ 936.489832][T13351] dev_hard_start_xmit+0xd3/0x3e0 [ 936.489919][T13351] ? validate_xmit_skb+0x746/0x910 [ 936.489950][T13351] __dev_queue_xmit+0x10b9/0x1fb0 [ 936.489965][T13351] ? __dev_queue_xmit+0x182/0x1fb0 [ 936.489983][T13351] ? __rcu_read_unlock+0x4f/0x70 [ 936.490083][T13351] __netlink_deliver_tap+0x3c3/0x500 [ 936.490108][T13351] netlink_unicast+0x653/0x680 [ 936.490138][T13351] netlink_sendmsg+0x58b/0x6b0 [ 936.490183][T13351] ? __pfx_netlink_sendmsg+0x10/0x10 [ 936.490204][T13351] __sock_sendmsg+0x142/0x180 [ 936.490234][T13351] ____sys_sendmsg+0x31e/0x4e0 [ 936.490254][T13351] ___sys_sendmsg+0x17b/0x1d0 [ 936.490282][T13351] __x64_sys_sendmsg+0xd4/0x160 [ 936.490352][T13351] x64_sys_call+0x2999/0x2fb0 [ 936.490375][T13351] do_syscall_64+0xd2/0x200 [ 936.490392][T13351] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 936.490481][T13351] ? clear_bhb_loop+0x40/0x90 [ 936.490503][T13351] ? clear_bhb_loop+0x40/0x90 [ 936.490527][T13351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.490551][T13351] RIP: 0033:0x7fb9a318e9a9 [ 936.490568][T13351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.490616][T13351] RSP: 002b:00007fb9a17ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 936.490633][T13351] RAX: ffffffffffffffda RBX: 00007fb9a33b5fa0 RCX: 00007fb9a318e9a9 [ 936.490714][T13351] RDX: 0000000000040000 RSI: 00002000000003c0 RDI: 000000000000000a [ 936.490727][T13351] RBP: 00007fb9a17ef090 R08: 0000000000000000 R09: 0000000000000000 [ 936.490740][T13351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.490826][T13351] R13: 0000000000000000 R14: 00007fb9a33b5fa0 R15: 00007ffd02e410c8 [ 936.490842][T13351] [ 936.736466][T13351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14809'. [ 936.770421][T13353] sd 0:0:1:0: device reset [ 936.798214][T13351] hsr_slave_0 (unregistering): left promiscuous mode [ 936.894868][T13369] lo speed is unknown, defaulting to 1000 [ 936.911980][T13368] netlink: 'syz.9.14814': attribute type 1 has an invalid length. [ 936.919913][T13368] netlink: 224 bytes leftover after parsing attributes in process `syz.9.14814'. [ 936.935779][T13371] openvswitch: netlink: Message has 6 unknown bytes. [ 936.962227][T13372] wireguard0: entered promiscuous mode [ 936.967729][T13372] wireguard0: entered allmulticast mode [ 937.045769][T13387] loop7: detected capacity change from 0 to 16384 [ 937.152052][T13369] FAULT_INJECTION: forcing a failure. [ 937.152052][T13369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.165335][T13369] CPU: 0 UID: 0 PID: 13369 Comm: syz.7.14810 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 937.165424][T13369] Tainted: [W]=WARN [ 937.165431][T13369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 937.165507][T13369] Call Trace: [ 937.165515][T13369] [ 937.165522][T13369] __dump_stack+0x1d/0x30 [ 937.165545][T13369] dump_stack_lvl+0xe8/0x140 [ 937.165566][T13369] dump_stack+0x15/0x1b [ 937.165584][T13369] should_fail_ex+0x265/0x280 [ 937.165646][T13369] should_fail+0xb/0x20 [ 937.165675][T13369] should_fail_usercopy+0x1a/0x20 [ 937.165711][T13369] _copy_from_iter+0xcf/0xe40 [ 937.165746][T13369] ? __build_skb_around+0x1a0/0x200 [ 937.165791][T13369] ? __alloc_skb+0x223/0x320 [ 937.165824][T13369] netlink_sendmsg+0x471/0x6b0 [ 937.165849][T13369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.165871][T13369] __sock_sendmsg+0x142/0x180 [ 937.165962][T13369] ____sys_sendmsg+0x31e/0x4e0 [ 937.165985][T13369] ___sys_sendmsg+0x17b/0x1d0 [ 937.166019][T13369] __x64_sys_sendmsg+0xd4/0x160 [ 937.166043][T13369] x64_sys_call+0x2999/0x2fb0 [ 937.166119][T13369] do_syscall_64+0xd2/0x200 [ 937.166174][T13369] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 937.166204][T13369] ? clear_bhb_loop+0x40/0x90 [ 937.166243][T13369] ? clear_bhb_loop+0x40/0x90 [ 937.166267][T13369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.166291][T13369] RIP: 0033:0x7f4f812be9a9 [ 937.166308][T13369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.166376][T13369] RSP: 002b:00007f4f7f91f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 937.166397][T13369] RAX: ffffffffffffffda RBX: 00007f4f814e5fa0 RCX: 00007f4f812be9a9 [ 937.166417][T13369] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 937.166431][T13369] RBP: 00007f4f7f91f090 R08: 0000000000000000 R09: 0000000000000000 [ 937.166445][T13369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.166458][T13369] R13: 0000000000000000 R14: 00007f4f814e5fa0 R15: 00007ffeb6773ff8 [ 937.166539][T13369] [ 937.514121][T13391] loop7: detected capacity change from 16384 to 0 [ 937.530200][T13405] __vm_enough_memory: pid: 13405, comm: syz.5.14829, bytes: 21200242331648 not enough memory for the allocation [ 937.568059][T13407] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14830'. [ 937.675642][T13416] FAULT_INJECTION: forcing a failure. [ 937.675642][T13416] name failslab, interval 1, probability 0, space 0, times 0 [ 937.688315][T13416] CPU: 0 UID: 0 PID: 13416 Comm: syz.5.14834 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 937.688347][T13416] Tainted: [W]=WARN [ 937.688354][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 937.688365][T13416] Call Trace: [ 937.688372][T13416] [ 937.688380][T13416] __dump_stack+0x1d/0x30 [ 937.688400][T13416] dump_stack_lvl+0xe8/0x140 [ 937.688420][T13416] dump_stack+0x15/0x1b [ 937.688437][T13416] should_fail_ex+0x265/0x280 [ 937.688467][T13416] should_failslab+0x8c/0xb0 [ 937.688486][T13416] kmem_cache_alloc_noprof+0x50/0x310 [ 937.688509][T13416] ? vm_area_dup+0x33/0x2c0 [ 937.688536][T13416] vm_area_dup+0x33/0x2c0 [ 937.688564][T13416] __split_vma+0xe9/0x650 [ 937.688588][T13416] ? __mpol_equal+0x2e/0x1e0 [ 937.688617][T13416] ? can_vma_merge_right+0x105/0x2e0 [ 937.688635][T13416] vma_modify+0x21e/0xc80 [ 937.688662][T13416] vma_modify_policy+0x101/0x130 [ 937.688686][T13416] mbind_range+0x1b8/0x440 [ 937.688713][T13416] ? mas_find+0x4ea/0x610 [ 937.688729][T13416] __se_sys_mbind+0x648/0xac0 [ 937.688759][T13416] __x64_sys_mbind+0x78/0x90 [ 937.688785][T13416] x64_sys_call+0x14af/0x2fb0 [ 937.688808][T13416] do_syscall_64+0xd2/0x200 [ 937.688826][T13416] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 937.688851][T13416] ? clear_bhb_loop+0x40/0x90 [ 937.688872][T13416] ? clear_bhb_loop+0x40/0x90 [ 937.688893][T13416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.688914][T13416] RIP: 0033:0x7ff6e89ce9a9 [ 937.688930][T13416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.688948][T13416] RSP: 002b:00007ff6e702f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 937.688971][T13416] RAX: ffffffffffffffda RBX: 00007ff6e8bf5fa0 RCX: 00007ff6e89ce9a9 [ 937.688981][T13416] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 937.688992][T13416] RBP: 00007ff6e702f090 R08: 0000000000000000 R09: 0000000000000002 [ 937.689002][T13416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.689015][T13416] R13: 0000000000000000 R14: 00007ff6e8bf5fa0 R15: 00007ffcfa74eaa8 [ 937.689033][T13416] [ 938.004705][T13434] __vm_enough_memory: pid: 13434, comm: syz.3.14842, bytes: 21199619588096 not enough memory for the allocation [ 938.039310][T13436] loop7: detected capacity change from 0 to 2048 [ 938.066659][T13436] EXT4-fs: quotafile must be on filesystem root [ 938.083418][T13438] loop7: detected capacity change from 0 to 16384 [ 938.165158][T13436] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14843'. [ 938.259695][T13450] loop7: detected capacity change from 16384 to 0 [ 938.268667][ C0] I/O error, dev loop7, sector 11784 op 0x0:(READ) flags 0x80700 phys_seg 9 prio class 0 [ 938.321331][T13464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.343585][T13464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.648144][T13507] FAULT_INJECTION: forcing a failure. [ 938.648144][T13507] name failslab, interval 1, probability 0, space 0, times 0 [ 938.648260][T13504] wireguard0: entered promiscuous mode [ 938.661072][T13507] CPU: 1 UID: 0 PID: 13507 Comm: syz.5.14869 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 938.661238][T13507] Tainted: [W]=WARN [ 938.661244][T13507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 938.661257][T13507] Call Trace: [ 938.661264][T13507] [ 938.661294][T13507] __dump_stack+0x1d/0x30 [ 938.661323][T13507] dump_stack_lvl+0xe8/0x140 [ 938.661343][T13507] dump_stack+0x15/0x1b [ 938.661360][T13507] should_fail_ex+0x265/0x280 [ 938.661390][T13507] ? percpu_ref_init+0x9c/0x250 [ 938.661425][T13507] should_failslab+0x8c/0xb0 [ 938.661447][T13507] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 938.661481][T13507] __kmalloc_cache_noprof+0x4c/0x320 [ 938.661512][T13507] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 938.661578][T13507] percpu_ref_init+0x9c/0x250 [ 938.661622][T13507] ioctx_alloc+0x208/0x4e0 [ 938.661652][T13507] ? fput+0x8f/0xc0 [ 938.661676][T13507] __se_sys_io_setup+0x6b/0x1b0 [ 938.661719][T13507] __x64_sys_io_setup+0x31/0x40 [ 938.661784][T13507] x64_sys_call+0x2f0e/0x2fb0 [ 938.661806][T13507] do_syscall_64+0xd2/0x200 [ 938.661864][T13507] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 938.661962][T13507] ? clear_bhb_loop+0x40/0x90 [ 938.661984][T13507] ? clear_bhb_loop+0x40/0x90 [ 938.662006][T13507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.662076][T13507] RIP: 0033:0x7ff6e89ce9a9 [ 938.662092][T13507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.662122][T13507] RSP: 002b:00007ff6e702f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 938.662169][T13507] RAX: ffffffffffffffda RBX: 00007ff6e8bf5fa0 RCX: 00007ff6e89ce9a9 [ 938.662182][T13507] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 938.662195][T13507] RBP: 00007ff6e702f090 R08: 0000000000000000 R09: 0000000000000000 [ 938.662208][T13507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.662231][T13507] R13: 0000000000000000 R14: 00007ff6e8bf5fa0 R15: 00007ffcfa74eaa8 [ 938.662322][T13507] [ 938.872853][T13504] wireguard0: entered allmulticast mode [ 938.970385][T13519] FAULT_INJECTION: forcing a failure. [ 938.970385][T13519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.983596][T13519] CPU: 1 UID: 0 PID: 13519 Comm: syz.7.14875 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 938.983634][T13519] Tainted: [W]=WARN [ 938.983645][T13519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 938.983675][T13519] Call Trace: [ 938.983682][T13519] [ 938.983690][T13519] __dump_stack+0x1d/0x30 [ 938.983744][T13519] dump_stack_lvl+0xe8/0x140 [ 938.983764][T13519] dump_stack+0x15/0x1b [ 938.983783][T13519] should_fail_ex+0x265/0x280 [ 938.983811][T13519] should_fail+0xb/0x20 [ 938.983899][T13519] should_fail_usercopy+0x1a/0x20 [ 938.983935][T13519] _copy_from_iter+0xcf/0xe40 [ 938.983993][T13519] ? __build_skb_around+0x1a0/0x200 [ 938.984021][T13519] ? __alloc_skb+0x223/0x320 [ 938.984070][T13519] netlink_sendmsg+0x471/0x6b0 [ 938.984090][T13519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.984109][T13519] __sock_sendmsg+0x142/0x180 [ 938.984185][T13519] ____sys_sendmsg+0x31e/0x4e0 [ 938.984204][T13519] ___sys_sendmsg+0x17b/0x1d0 [ 938.984239][T13519] __x64_sys_sendmsg+0xd4/0x160 [ 938.984299][T13519] x64_sys_call+0x2999/0x2fb0 [ 938.984324][T13519] do_syscall_64+0xd2/0x200 [ 938.984361][T13519] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 938.984389][T13519] ? clear_bhb_loop+0x40/0x90 [ 938.984411][T13519] ? clear_bhb_loop+0x40/0x90 [ 938.984432][T13519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.984451][T13519] RIP: 0033:0x7f4f812be9a9 [ 938.984529][T13519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.984545][T13519] RSP: 002b:00007f4f7f91f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.984561][T13519] RAX: ffffffffffffffda RBX: 00007f4f814e5fa0 RCX: 00007f4f812be9a9 [ 938.984635][T13519] RDX: 0000000000040840 RSI: 00002000000001c0 RDI: 000000000000000f [ 938.984650][T13519] RBP: 00007f4f7f91f090 R08: 0000000000000000 R09: 0000000000000000 [ 938.984691][T13519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.984702][T13519] R13: 0000000000000000 R14: 00007f4f814e5fa0 R15: 00007ffeb6773ff8 [ 938.984718][T13519] [ 939.221102][T13521] loop7: detected capacity change from 0 to 16384 [ 939.400118][T13532] loop7: detected capacity change from 16384 to 0 [ 939.411599][ C1] I/O error, dev loop7, sector 9856 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 939.431517][T13551] FAULT_INJECTION: forcing a failure. [ 939.431517][T13551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 939.444683][T13551] CPU: 1 UID: 0 PID: 13551 Comm: syz.7.14883 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 939.444744][T13551] Tainted: [W]=WARN [ 939.444751][T13551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 939.444819][T13551] Call Trace: [ 939.444824][T13551] [ 939.444830][T13551] __dump_stack+0x1d/0x30 [ 939.444850][T13551] dump_stack_lvl+0xe8/0x140 [ 939.444867][T13551] dump_stack+0x15/0x1b [ 939.444940][T13551] should_fail_ex+0x265/0x280 [ 939.444967][T13551] should_fail+0xb/0x20 [ 939.445033][T13551] should_fail_usercopy+0x1a/0x20 [ 939.445069][T13551] strncpy_from_user+0x25/0x230 [ 939.445096][T13551] path_setxattrat+0xeb/0x310 [ 939.445133][T13551] __x64_sys_fsetxattr+0x6b/0x80 [ 939.445183][T13551] x64_sys_call+0x2f7c/0x2fb0 [ 939.445270][T13551] do_syscall_64+0xd2/0x200 [ 939.445288][T13551] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 939.445346][T13551] ? clear_bhb_loop+0x40/0x90 [ 939.445369][T13551] ? clear_bhb_loop+0x40/0x90 [ 939.445419][T13551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.445442][T13551] RIP: 0033:0x7f4f812be9a9 [ 939.445459][T13551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 939.445552][T13551] RSP: 002b:00007f4f7f91f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 939.445573][T13551] RAX: ffffffffffffffda RBX: 00007f4f814e5fa0 RCX: 00007f4f812be9a9 [ 939.445587][T13551] RDX: 0000200000000880 RSI: 00002000000000c0 RDI: 0000000000000004 [ 939.445598][T13551] RBP: 00007f4f7f91f090 R08: 0000000000000000 R09: 0000000000000000 [ 939.445609][T13551] R10: 0000000000000027 R11: 0000000000000246 R12: 0000000000000001 [ 939.445694][T13551] R13: 0000000000000000 R14: 00007f4f814e5fa0 R15: 00007ffeb6773ff8 [ 939.445712][T13551] [ 939.723222][T13569] loop9: detected capacity change from 0 to 2048 [ 939.730103][T13569] EXT4-fs: quotafile must be on filesystem root [ 939.841112][T13594] netlink: 'syz.7.14904': attribute type 7 has an invalid length. [ 939.876981][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 939.876995][ T29] audit: type=1326 audit(939.879:77836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.14905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 939.922017][ T29] audit: type=1326 audit(939.879:77837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.14905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 939.945206][ T29] audit: type=1326 audit(939.909:77838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.14905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6e89cd310 code=0x7ffc0000 [ 939.948718][T13605] __vm_enough_memory: pid: 13605, comm: syz.5.14909, bytes: 21200242331648 not enough memory for the allocation [ 939.968404][ T29] audit: type=1326 audit(939.909:77839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.14905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 940.003691][ T29] audit: type=1326 audit(939.909:77840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.14905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 940.026933][ T29] audit: type=1326 audit(939.919:77841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.14905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 940.050214][ T29] audit: type=1326 audit(939.919:77842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.14905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 940.073329][ T29] audit: type=1326 audit(939.919:77843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.14905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 940.096644][ T29] audit: type=1326 audit(939.919:77844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.14905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 940.119798][ T29] audit: type=1326 audit(939.919:77845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.5.14905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 940.195342][T13613] __nla_validate_parse: 6 callbacks suppressed [ 940.195358][T13613] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14913'. [ 940.264783][T13632] sd 0:0:1:0: device reset [ 940.284254][T13634] loop9: detected capacity change from 0 to 1024 [ 940.297740][T13637] FAULT_INJECTION: forcing a failure. [ 940.297740][T13637] name failslab, interval 1, probability 0, space 0, times 0 [ 940.310405][T13637] CPU: 1 UID: 0 PID: 13637 Comm: syz.1.14921 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 940.310511][T13637] Tainted: [W]=WARN [ 940.310519][T13637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 940.310532][T13637] Call Trace: [ 940.310539][T13637] [ 940.310545][T13637] __dump_stack+0x1d/0x30 [ 940.310576][T13637] dump_stack_lvl+0xe8/0x140 [ 940.310598][T13637] dump_stack+0x15/0x1b [ 940.310613][T13637] should_fail_ex+0x265/0x280 [ 940.310641][T13637] should_failslab+0x8c/0xb0 [ 940.310732][T13637] kmem_cache_alloc_node_noprof+0x57/0x320 [ 940.310763][T13637] ? __alloc_skb+0x101/0x320 [ 940.310798][T13637] __alloc_skb+0x101/0x320 [ 940.310829][T13637] ? rt6_nlmsg_size+0x6f/0x1a0 [ 940.310859][T13637] inet6_rt_notify+0x86/0x190 [ 940.310903][T13637] fib6_add_rt2node+0xc31/0x1720 [ 940.310927][T13637] fib6_add+0x5da/0xe00 [ 940.310976][T13637] ? __rcu_read_unlock+0x4f/0x70 [ 940.310997][T13637] ? ip6_route_info_create_nh+0x559/0x610 [ 940.311023][T13637] ip6_route_add+0xc7/0x170 [ 940.311089][T13637] inet6_rtm_newroute+0x112/0x1020 [ 940.311164][T13637] ? __memcg_slab_free_hook+0x135/0x230 [ 940.311213][T13637] ? security_capable+0x83/0x90 [ 940.311298][T13637] ? ns_capable+0x7d/0xb0 [ 940.311318][T13637] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 940.311351][T13637] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 940.311383][T13637] netlink_rcv_skb+0x123/0x220 [ 940.311472][T13637] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 940.311504][T13637] rtnetlink_rcv+0x1c/0x30 [ 940.311526][T13637] netlink_unicast+0x5a8/0x680 [ 940.311561][T13637] netlink_sendmsg+0x58b/0x6b0 [ 940.311586][T13637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 940.311660][T13637] __sock_sendmsg+0x142/0x180 [ 940.311688][T13637] ____sys_sendmsg+0x31e/0x4e0 [ 940.311712][T13637] ___sys_sendmsg+0x17b/0x1d0 [ 940.311745][T13637] __x64_sys_sendmsg+0xd4/0x160 [ 940.311861][T13637] x64_sys_call+0x2999/0x2fb0 [ 940.311883][T13637] do_syscall_64+0xd2/0x200 [ 940.311903][T13637] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 940.311928][T13637] ? clear_bhb_loop+0x40/0x90 [ 940.311948][T13637] ? clear_bhb_loop+0x40/0x90 [ 940.311995][T13637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.312015][T13637] RIP: 0033:0x7fb9a318e9a9 [ 940.312030][T13637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 940.312123][T13637] RSP: 002b:00007fb9a17ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 940.312143][T13637] RAX: ffffffffffffffda RBX: 00007fb9a33b5fa0 RCX: 00007fb9a318e9a9 [ 940.312156][T13637] RDX: 0000000000000000 RSI: 0000200000004380 RDI: 0000000000000003 [ 940.312166][T13637] RBP: 00007fb9a17ef090 R08: 0000000000000000 R09: 0000000000000000 [ 940.312177][T13637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.312190][T13637] R13: 0000000000000000 R14: 00007fb9a33b5fa0 R15: 00007ffd02e410c8 [ 940.312265][T13637] [ 940.314149][T13634] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 940.314439][T13639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 940.343900][T13634] EXT4-fs error (device loop9): ext4_map_blocks:816: inode #3: block 1: comm syz.9.14920: lblock 1 mapped to illegal pblock 1 (length 1) [ 940.356121][T13639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.656183][T13634] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.14920: Failed to acquire dquot type 0 [ 940.673196][T13645] loop7: detected capacity change from 0 to 16384 [ 940.677456][T13634] EXT4-fs error (device loop9): ext4_free_blocks:6587: comm syz.9.14920: Freeing blocks not in datazone - block = 0, count = 4096 [ 940.705412][T13634] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.14920: Invalid inode bitmap blk 0 in block_group 0 [ 940.720375][T31433] EXT4-fs error (device loop9): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:63: lblock 1 mapped to illegal pblock 1 (length 1) [ 940.742793][T13634] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 940.752698][T31433] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 0 [ 940.765396][T13634] EXT4-fs (loop9): 1 orphan inode deleted [ 940.773168][T13634] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 940.810242][T13634] FAULT_INJECTION: forcing a failure. [ 940.810242][T13634] name failslab, interval 1, probability 0, space 0, times 0 [ 940.823025][T13634] CPU: 1 UID: 0 PID: 13634 Comm: syz.9.14920 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 940.823134][T13634] Tainted: [W]=WARN [ 940.823140][T13634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 940.823150][T13634] Call Trace: [ 940.823156][T13634] [ 940.823163][T13634] __dump_stack+0x1d/0x30 [ 940.823182][T13634] dump_stack_lvl+0xe8/0x140 [ 940.823198][T13634] dump_stack+0x15/0x1b [ 940.823252][T13634] should_fail_ex+0x265/0x280 [ 940.823278][T13634] ? audit_log_d_path+0x8d/0x150 [ 940.823311][T13634] should_failslab+0x8c/0xb0 [ 940.823408][T13634] __kmalloc_cache_noprof+0x4c/0x320 [ 940.823434][T13634] audit_log_d_path+0x8d/0x150 [ 940.823461][T13634] audit_log_d_path_exe+0x42/0x70 [ 940.823555][T13634] audit_log_task+0x1e9/0x250 [ 940.823581][T13634] audit_seccomp+0x61/0x100 [ 940.823628][T13634] ? __seccomp_filter+0x68c/0x10d0 [ 940.823647][T13634] __seccomp_filter+0x69d/0x10d0 [ 940.823672][T13634] __secure_computing+0x82/0x150 [ 940.823792][T13634] syscall_trace_enter+0xcf/0x1e0 [ 940.823813][T13634] do_syscall_64+0xac/0x200 [ 940.823857][T13634] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 940.823944][T13634] ? clear_bhb_loop+0x40/0x90 [ 940.823963][T13634] ? clear_bhb_loop+0x40/0x90 [ 940.824037][T13634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.824056][T13634] RIP: 0033:0x7fe43f71d3bc [ 940.824069][T13634] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 940.824085][T13634] RSP: 002b:00007fe43dd87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 940.824101][T13634] RAX: ffffffffffffffda RBX: 00007fe43f945fa0 RCX: 00007fe43f71d3bc [ 940.824189][T13634] RDX: 000000000000000f RSI: 00007fe43dd870a0 RDI: 0000000000000005 [ 940.824200][T13634] RBP: 00007fe43dd87090 R08: 0000000000000000 R09: 0000000000000000 [ 940.824213][T13634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 940.824249][T13634] R13: 0000000000000000 R14: 00007fe43f945fa0 R15: 00007ffef7ee9528 [ 940.824263][T13634] [ 941.036335][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14927'. [ 941.070075][ T9235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.129533][T13675] SELinux: ebitmap: truncated map [ 941.135085][T13675] SELinux: failed to load policy [ 941.151291][T13685] loop7: detected capacity change from 0 to 16384 [ 941.196396][T13695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.218496][T13695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.288214][T13711] loop9: detected capacity change from 0 to 2048 [ 941.297811][T13711] EXT4-fs: quotafile must be on filesystem root [ 941.339177][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14943'. [ 941.483585][T13760] loop7: detected capacity change from 0 to 16384 [ 941.520281][T13769] netlink: 'syz.9.14953': attribute type 7 has an invalid length. [ 941.528164][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14953'. [ 941.596823][T13787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.607270][T13787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.638650][T13795] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14957'. [ 941.986182][T13867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14960'. [ 942.067949][T13880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.076566][T13880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.191320][T13885] loop7: detected capacity change from 0 to 16384 [ 942.226624][T13887] loop9: detected capacity change from 0 to 512 [ 942.233854][T13887] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 942.259386][T13887] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 942.280009][T13887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 942.288434][T13887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 942.418177][T13894] pimreg: entered allmulticast mode [ 942.423608][T13888] loop7: detected capacity change from 16384 to 0 [ 942.478577][T13896] lo speed is unknown, defaulting to 1000 [ 942.514595][T13899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14972'. [ 942.534949][T13899] veth0_macvtap: left promiscuous mode [ 942.688369][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14974'. [ 942.750003][T13916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14978'. [ 942.971780][T13946] netlink: 212 bytes leftover after parsing attributes in process `syz.3.14987'. [ 942.998594][T13951] __vm_enough_memory: pid: 13951, comm: syz.7.14992, bytes: 21200401211392 not enough memory for the allocation [ 943.015159][T13951] loop7: detected capacity change from 0 to 512 [ 943.022256][T13951] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 943.061342][T13951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 943.069940][T13958] FAULT_INJECTION: forcing a failure. [ 943.069940][T13958] name failslab, interval 1, probability 0, space 0, times 0 [ 943.082731][T13958] CPU: 0 UID: 0 PID: 13958 Comm: syz.3.14997 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 943.082768][T13958] Tainted: [W]=WARN [ 943.082824][T13958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 943.082837][T13958] Call Trace: [ 943.082843][T13958] [ 943.082851][T13958] __dump_stack+0x1d/0x30 [ 943.082874][T13958] dump_stack_lvl+0xe8/0x140 [ 943.082894][T13958] dump_stack+0x15/0x1b [ 943.082911][T13958] should_fail_ex+0x265/0x280 [ 943.082997][T13958] should_failslab+0x8c/0xb0 [ 943.083067][T13958] kmem_cache_alloc_noprof+0x50/0x310 [ 943.083092][T13958] ? security_file_alloc+0x32/0x100 [ 943.083155][T13958] security_file_alloc+0x32/0x100 [ 943.083175][T13958] init_file+0x5c/0x1d0 [ 943.083198][T13958] alloc_empty_file+0x8b/0x200 [ 943.083222][T13958] alloc_file_pseudo+0xc6/0x160 [ 943.083321][T13958] __shmem_file_setup+0x1de/0x210 [ 943.083349][T13958] shmem_file_setup+0x3b/0x50 [ 943.083374][T13958] __se_sys_memfd_create+0x2c3/0x590 [ 943.083550][T13958] __x64_sys_memfd_create+0x31/0x40 [ 943.083576][T13958] x64_sys_call+0x122f/0x2fb0 [ 943.083654][T13958] do_syscall_64+0xd2/0x200 [ 943.083720][T13958] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 943.083744][T13958] ? clear_bhb_loop+0x40/0x90 [ 943.083763][T13958] ? clear_bhb_loop+0x40/0x90 [ 943.083782][T13958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.083807][T13958] RIP: 0033:0x7f135f7be9a9 [ 943.083820][T13958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.083897][T13958] RSP: 002b:00007f135de26e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 943.083914][T13958] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007f135f7be9a9 [ 943.083925][T13958] RDX: 00007f135de26ef0 RSI: 0000000000000000 RDI: 00007f135f8416fc [ 943.083936][T13958] RBP: 0000200000000380 R08: 00007f135de26bb7 R09: 00007f135de26e40 [ 943.083948][T13958] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000980 [ 943.083978][T13958] R13: 00007f135de26ef0 R14: 00007f135de26eb0 R15: 0000200000000100 [ 943.083994][T13958] [ 943.085939][T13951] System zones: [ 943.141616][T13961] FAULT_INJECTION: forcing a failure. [ 943.141616][T13961] name failslab, interval 1, probability 0, space 0, times 0 [ 943.143701][T13951] 1-12 [ 943.149089][T13961] CPU: 1 UID: 0 PID: 13961 Comm: syz.3.14998 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 943.149179][T13961] Tainted: [W]=WARN [ 943.149186][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 943.149199][T13961] Call Trace: [ 943.149207][T13961] [ 943.149215][T13961] __dump_stack+0x1d/0x30 [ 943.149267][T13961] dump_stack_lvl+0xe8/0x140 [ 943.149289][T13961] dump_stack+0x15/0x1b [ 943.149307][T13961] should_fail_ex+0x265/0x280 [ 943.149389][T13961] should_failslab+0x8c/0xb0 [ 943.149411][T13961] kmem_cache_alloc_noprof+0x50/0x310 [ 943.149438][T13961] ? skb_clone+0x151/0x1f0 [ 943.149458][T13961] skb_clone+0x151/0x1f0 [ 943.149550][T13961] __netlink_deliver_tap+0x2c9/0x500 [ 943.149575][T13961] netlink_unicast+0x653/0x680 [ 943.149686][T13961] netlink_sendmsg+0x58b/0x6b0 [ 943.149708][T13961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 943.149725][T13961] __sock_sendmsg+0x142/0x180 [ 943.149749][T13961] ____sys_sendmsg+0x31e/0x4e0 [ 943.149841][T13961] ___sys_sendmsg+0x17b/0x1d0 [ 943.149932][T13961] __x64_sys_sendmsg+0xd4/0x160 [ 943.149955][T13961] x64_sys_call+0x2999/0x2fb0 [ 943.149978][T13961] do_syscall_64+0xd2/0x200 [ 943.149997][T13961] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 943.150025][T13961] ? clear_bhb_loop+0x40/0x90 [ 943.150047][T13961] ? clear_bhb_loop+0x40/0x90 [ 943.150076][T13961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.150098][T13961] RIP: 0033:0x7f135f7be9a9 [ 943.150113][T13961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 943.150131][T13961] RSP: 002b:00007f135de27038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 943.150150][T13961] RAX: ffffffffffffffda RBX: 00007f135f9e5fa0 RCX: 00007f135f7be9a9 [ 943.150163][T13961] RDX: 0000000004041080 RSI: 0000200000006040 RDI: 0000000000000004 [ 943.150176][T13961] RBP: 00007f135de27090 R08: 0000000000000000 R09: 0000000000000000 [ 943.150250][T13961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 943.150330][T13961] R13: 0000000000000000 R14: 00007f135f9e5fa0 R15: 00007ffc56a7b178 [ 943.150349][T13961] [ 943.534740][T13951] [ 943.537513][T13951] EXT4-fs error (device loop7): ext4_xattr_inode_iget:437: inode #11: comm syz.7.14992: missing EA_INODE flag [ 943.552882][T13951] EXT4-fs (loop7): Remounting filesystem read-only [ 943.562603][T13951] EXT4-fs (loop7): 1 orphan inode deleted [ 943.568762][T13951] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 943.598890][ T6253] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 943.776286][T13989] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 943.801148][T13986] IPVS: set_ctl: invalid protocol: 24 21.0.3.7:1136 [ 943.840074][T14000] __vm_enough_memory: pid: 14000, comm: syz.1.15013, bytes: 21200214966272 not enough memory for the allocation [ 943.896165][T14008] netlink: 'syz.5.15017': attribute type 1 has an invalid length. [ 943.906903][T14008] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.914125][T14008] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.921586][T14008] bridge0: entered promiscuous mode [ 943.926804][T14008] bridge0: entered allmulticast mode [ 943.934423][T14006] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 943.952008][T14008] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.959135][T14008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.966436][T14008] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.973504][T14008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 944.431440][T14030] dvmrp0: entered allmulticast mode [ 944.458819][T14034] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 944.494516][T14039] loop7: detected capacity change from 0 to 2048 [ 944.501968][T14039] EXT4-fs: quotafile must be on filesystem root [ 944.536348][T14043] xt_TPROXY: Can be used only with -p tcp or -p udp [ 944.559555][T14050] FAULT_INJECTION: forcing a failure. [ 944.559555][T14050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 944.563429][T14052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.572749][T14050] CPU: 1 UID: 0 PID: 14050 Comm: syz.5.15033 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 944.572782][T14050] Tainted: [W]=WARN [ 944.572843][T14050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 944.572925][T14050] Call Trace: [ 944.572933][T14050] [ 944.572941][T14050] __dump_stack+0x1d/0x30 [ 944.572964][T14050] dump_stack_lvl+0xe8/0x140 [ 944.572984][T14050] dump_stack+0x15/0x1b [ 944.573004][T14050] should_fail_ex+0x265/0x280 [ 944.573035][T14050] should_fail+0xb/0x20 [ 944.573111][T14050] should_fail_usercopy+0x1a/0x20 [ 944.573144][T14050] _copy_from_user+0x1c/0xb0 [ 944.573165][T14050] memdup_user+0x5e/0xd0 [ 944.573188][T14050] con_font_op+0x6c3/0x930 [ 944.573266][T14050] ? should_fail_ex+0xdb/0x280 [ 944.573298][T14050] vt_ioctl+0x153c/0x1880 [ 944.573327][T14050] tty_ioctl+0x7db/0xb80 [ 944.573490][T14050] ? __pfx_tty_ioctl+0x10/0x10 [ 944.573519][T14050] __se_sys_ioctl+0xce/0x140 [ 944.573556][T14050] __x64_sys_ioctl+0x43/0x50 [ 944.573582][T14050] x64_sys_call+0x19a8/0x2fb0 [ 944.573680][T14050] do_syscall_64+0xd2/0x200 [ 944.573700][T14050] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 944.573728][T14050] ? clear_bhb_loop+0x40/0x90 [ 944.573802][T14050] ? clear_bhb_loop+0x40/0x90 [ 944.573825][T14050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.573846][T14050] RIP: 0033:0x7ff6e89ce9a9 [ 944.573861][T14050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.573947][T14050] RSP: 002b:00007ff6e702f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 944.573967][T14050] RAX: ffffffffffffffda RBX: 00007ff6e8bf5fa0 RCX: 00007ff6e89ce9a9 [ 944.573980][T14050] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000004 [ 944.574073][T14050] RBP: 00007ff6e702f090 R08: 0000000000000000 R09: 0000000000000000 [ 944.574085][T14050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.574098][T14050] R13: 0000000000000000 R14: 00007ff6e8bf5fa0 R15: 00007ffcfa74eaa8 [ 944.574116][T14050] [ 944.809718][T14052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.007849][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 945.007863][ T29] audit: type=1326 audit(945.000:78131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.15046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a318e9a9 code=0x7ffc0000 [ 945.010328][T14079] __vm_enough_memory: pid: 14079, comm: syz.1.15046, bytes: 21200214966272 not enough memory for the allocation [ 945.014261][ T29] audit: type=1326 audit(945.000:78132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.15046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a318e9a9 code=0x7ffc0000 [ 945.072271][ T29] audit: type=1326 audit(945.000:78133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.15046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9a31908c7 code=0x7ffc0000 [ 945.095542][ T29] audit: type=1326 audit(945.000:78134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.15046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a318e9a9 code=0x7ffc0000 [ 945.118999][ T29] audit: type=1326 audit(945.000:78135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.15046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb9a318e9a9 code=0x7ffc0000 [ 945.141973][ T29] audit: type=1326 audit(945.000:78136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.15046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a318e9a9 code=0x7ffc0000 [ 945.165113][ T29] audit: type=1326 audit(945.000:78137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.15046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb9a318e9a9 code=0x7ffc0000 [ 945.188369][ T29] audit: type=1326 audit(945.000:78138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.15046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a318e9a9 code=0x7ffc0000 [ 945.211653][ T29] audit: type=1326 audit(945.000:78139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.15046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb9a318e9a9 code=0x7ffc0000 [ 945.234728][ T29] audit: type=1326 audit(945.010:78140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14078 comm="syz.1.15046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9a318e9a9 code=0x7ffc0000 [ 945.293558][ T9235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.325869][T14089] __nla_validate_parse: 13 callbacks suppressed [ 945.325883][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15050'. [ 945.405427][T14097] loop7: detected capacity change from 0 to 16384 [ 945.485671][T14102] wireguard0: entered promiscuous mode [ 945.491239][T14102] wireguard0: entered allmulticast mode [ 945.494664][T14106] __vm_enough_memory: pid: 14106, comm: syz.9.15057, bytes: 21200016244736 not enough memory for the allocation [ 945.516590][T14106] loop9: detected capacity change from 0 to 512 [ 945.530461][T14106] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 945.544892][T14106] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 945.552931][T14106] System zones: 1-12 [ 945.557296][T14106] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.15057: missing EA_INODE flag [ 945.570287][T14106] EXT4-fs (loop9): Remounting filesystem read-only [ 945.576926][T14106] EXT4-fs (loop9): 1 orphan inode deleted [ 945.582819][T14103] loop7: detected capacity change from 16384 to 0 [ 945.589386][ C1] I/O error, dev loop7, sector 14592 op 0x0:(READ) flags 0x80700 phys_seg 29 prio class 0 [ 945.597495][T14106] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 945.626537][ T9235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 945.663008][T14115] sd 0:0:1:0: device reset [ 945.742500][T14123] loop9: detected capacity change from 0 to 128 [ 945.752139][T14127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 945.754011][T14123] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 945.774864][T14127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.790416][T14123] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 63: comm syz.9.15064: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 945.815454][T14123] EXT4-fs error (device loop9) in do_split:2029: Corrupt filesystem [ 945.824726][T14123] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 63: comm syz.9.15064: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 945.846202][T14123] EXT4-fs error (device loop9) in do_split:2029: Corrupt filesystem [ 945.882310][ T9235] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 946.000063][T14149] wireguard0: entered promiscuous mode [ 946.005568][T14149] wireguard0: entered allmulticast mode [ 946.024990][T14154] FAULT_INJECTION: forcing a failure. [ 946.024990][T14154] name failslab, interval 1, probability 0, space 0, times 0 [ 946.025022][T14154] CPU: 0 UID: 0 PID: 14154 Comm: syz.1.15076 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 946.025056][T14154] Tainted: [W]=WARN [ 946.025130][T14154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 946.025144][T14154] Call Trace: [ 946.025150][T14154] [ 946.025215][T14154] __dump_stack+0x1d/0x30 [ 946.025254][T14154] dump_stack_lvl+0xe8/0x140 [ 946.025276][T14154] dump_stack+0x15/0x1b [ 946.025293][T14154] should_fail_ex+0x265/0x280 [ 946.025326][T14154] should_failslab+0x8c/0xb0 [ 946.025371][T14154] __kmalloc_noprof+0xa5/0x3e0 [ 946.025505][T14154] ? sock_kmalloc+0x85/0xc0 [ 946.025524][T14154] ? iovec_from_user+0x5e/0x210 [ 946.025605][T14154] sock_kmalloc+0x85/0xc0 [ 946.025623][T14154] ____sys_sendmsg+0xf8/0x4e0 [ 946.025641][T14154] ___sys_sendmsg+0x17b/0x1d0 [ 946.025670][T14154] __x64_sys_sendmsg+0xd4/0x160 [ 946.025799][T14154] x64_sys_call+0x2999/0x2fb0 [ 946.025891][T14154] do_syscall_64+0xd2/0x200 [ 946.025910][T14154] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 946.025936][T14154] ? clear_bhb_loop+0x40/0x90 [ 946.025957][T14154] ? clear_bhb_loop+0x40/0x90 [ 946.026088][T14154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.026110][T14154] RIP: 0033:0x7fb9a318e9a9 [ 946.026150][T14154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.026183][T14154] RSP: 002b:00007fb9a17ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 946.026202][T14154] RAX: ffffffffffffffda RBX: 00007fb9a33b5fa0 RCX: 00007fb9a318e9a9 [ 946.026215][T14154] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 946.026229][T14154] RBP: 00007fb9a17ef090 R08: 0000000000000000 R09: 0000000000000000 [ 946.026262][T14154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 946.026274][T14154] R13: 0000000000000000 R14: 00007fb9a33b5fa0 R15: 00007ffd02e410c8 [ 946.026290][T14154] [ 946.303872][T14164] netlink: 'syz.9.15081': attribute type 1 has an invalid length. [ 946.349039][T14170] netlink: 'syz.7.15084': attribute type 2 has an invalid length. [ 946.357012][T14170] netlink: 'syz.7.15084': attribute type 9 has an invalid length. [ 946.365144][T14170] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.15084'. [ 946.458748][T14183] loop9: detected capacity change from 0 to 512 [ 946.473065][T14182] loop7: detected capacity change from 0 to 16384 [ 946.479618][T14183] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 946.504733][T14190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.525650][ T9235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 946.535418][T14190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.649571][T14193] loop7: detected capacity change from 16384 to 0 [ 946.653689][ C1] I/O error, dev loop7, sector 13568 op 0x0:(READ) flags 0x80700 phys_seg 20 prio class 0 [ 946.694557][T14205] loop9: detected capacity change from 0 to 128 [ 946.706498][T14205] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 946.731151][T14213] FAULT_INJECTION: forcing a failure. [ 946.731151][T14213] name failslab, interval 1, probability 0, space 0, times 0 [ 946.743915][T14213] CPU: 1 UID: 0 PID: 14213 Comm: syz.5.15101 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 946.744024][T14213] Tainted: [W]=WARN [ 946.744031][T14213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 946.744047][T14213] Call Trace: [ 946.744054][T14213] [ 946.744061][T14213] __dump_stack+0x1d/0x30 [ 946.744081][T14213] dump_stack_lvl+0xe8/0x140 [ 946.744132][T14213] dump_stack+0x15/0x1b [ 946.744149][T14213] should_fail_ex+0x265/0x280 [ 946.744184][T14213] should_failslab+0x8c/0xb0 [ 946.744243][T14213] kmem_cache_alloc_noprof+0x50/0x310 [ 946.744333][T14213] ? __anon_vma_prepare+0x70/0x2f0 [ 946.744368][T14213] ? pte_alloc_one+0xf8/0x120 [ 946.744388][T14213] __anon_vma_prepare+0x70/0x2f0 [ 946.744420][T14213] handle_mm_fault+0x1d19/0x2be0 [ 946.744438][T14213] ? __rcu_read_unlock+0x4f/0x70 [ 946.744469][T14213] do_user_addr_fault+0x3fe/0x1090 [ 946.744501][T14213] exc_page_fault+0x62/0xa0 [ 946.744605][T14213] asm_exc_page_fault+0x26/0x30 [ 946.744627][T14213] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 946.744655][T14213] Code: f1 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 0f f1 01 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 946.744671][T14213] RSP: 0018:ffffc9000f613d58 EFLAGS: 00050206 [ 946.744766][T14213] RAX: ffff88810297bb58 RBX: 0000000000000090 RCX: 0000000000000090 [ 946.744785][T14213] RDX: 0000000000000000 RSI: ffffc9000f613db0 RDI: 0000200000000340 [ 946.744799][T14213] RBP: 0000000000000011 R08: 00000000000001df R09: 0000000000000000 [ 946.744813][T14213] R10: 0001c9000f613db0 R11: 0001c9000f613e3f R12: 00002000000003d0 [ 946.744827][T14213] R13: 00007ffffffff000 R14: 0000200000000340 R15: ffffc9000f613db0 [ 946.744845][T14213] _copy_to_user+0x7c/0xa0 [ 946.744864][T14213] __se_sys_waitid+0x164/0x2a0 [ 946.744975][T14213] ? __pfx_child_wait_callback+0x10/0x10 [ 946.745013][T14213] __x64_sys_waitid+0x67/0x80 [ 946.745040][T14213] x64_sys_call+0x2823/0x2fb0 [ 946.745114][T14213] do_syscall_64+0xd2/0x200 [ 946.745134][T14213] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 946.745216][T14213] ? clear_bhb_loop+0x40/0x90 [ 946.745240][T14213] ? clear_bhb_loop+0x40/0x90 [ 946.745265][T14213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.745289][T14213] RIP: 0033:0x7ff6e89ce9a9 [ 946.745305][T14213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.745383][T14213] RSP: 002b:00007ff6e702f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f7 [ 946.745403][T14213] RAX: ffffffffffffffda RBX: 00007ff6e8bf5fa0 RCX: 00007ff6e89ce9a9 [ 946.745415][T14213] RDX: 0000000000000000 RSI: 0000000000000216 RDI: 0000000000000000 [ 946.745429][T14213] RBP: 00007ff6e702f090 R08: 0000200000000340 R09: 0000000000000000 [ 946.745442][T14213] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 946.745456][T14213] R13: 0000000000000000 R14: 00007ff6e8bf5fa0 R15: 00007ffcfa74eaa8 [ 946.745475][T14213] [ 946.748209][T14205] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 63: comm syz.9.15099: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 947.067821][T14205] EXT4-fs error (device loop9) in do_split:2029: Corrupt filesystem [ 947.095635][T14205] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 63: comm syz.9.15099: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 947.146266][T14205] EXT4-fs error (device loop9) in do_split:2029: Corrupt filesystem [ 947.163587][T14229] wireguard0: entered promiscuous mode [ 947.171202][T14229] wireguard0: entered allmulticast mode [ 947.223757][ T9235] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 947.254136][T14241] serio: Serial port ptm0 [ 947.258983][T14242] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 947.265502][T14242] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 947.273141][T14242] vhci_hcd vhci_hcd.0: Device attached [ 947.294622][T14242] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 947.301237][T14242] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 947.308837][T14242] vhci_hcd vhci_hcd.0: Device attached [ 947.329218][T14242] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(11) [ 947.335883][T14242] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 947.343514][T14242] vhci_hcd vhci_hcd.0: Device attached [ 947.357379][T14242] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 947.381550][T14242] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(15) [ 947.388185][T14242] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 947.395695][T14242] vhci_hcd vhci_hcd.0: Device attached [ 947.406921][T14242] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(17) [ 947.413591][T14242] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 947.421296][T14242] vhci_hcd vhci_hcd.0: Device attached [ 947.429575][T14241] FAULT_INJECTION: forcing a failure. [ 947.429575][T14241] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.442728][T14241] CPU: 0 UID: 0 PID: 14241 Comm: syz.9.15111 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 947.442767][T14241] Tainted: [W]=WARN [ 947.442774][T14241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 947.442788][T14241] Call Trace: [ 947.442794][T14241] [ 947.442802][T14241] __dump_stack+0x1d/0x30 [ 947.442826][T14241] dump_stack_lvl+0xe8/0x140 [ 947.442920][T14241] dump_stack+0x15/0x1b [ 947.442938][T14241] should_fail_ex+0x265/0x280 [ 947.443043][T14241] should_fail+0xb/0x20 [ 947.443148][T14241] should_fail_usercopy+0x1a/0x20 [ 947.443185][T14241] _copy_from_user+0x1c/0xb0 [ 947.443208][T14241] restore_altstack+0x4b/0x2d0 [ 947.443236][T14241] ? __set_task_blocked+0x23a/0x2a0 [ 947.443278][T14241] __ia32_sys_rt_sigreturn+0xdc/0x350 [ 947.443302][T14241] ? _raw_spin_unlock_irq+0x26/0x50 [ 947.443330][T14241] ? signal_setup_done+0x266/0x290 [ 947.443381][T14241] ? xfd_validate_state+0x45/0xf0 [ 947.443429][T14241] ? fpu__clear_user_states+0x63/0x1e0 [ 947.443461][T14241] ? fpregs_mark_activate+0x66/0x140 [ 947.443492][T14241] ? fpu__clear_user_states+0x63/0x1e0 [ 947.443537][T14241] ? arch_do_signal_or_restart+0x2f3/0x480 [ 947.443564][T14241] x64_sys_call+0x2e8a/0x2fb0 [ 947.443615][T14241] do_syscall_64+0xd2/0x200 [ 947.443636][T14241] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 947.443671][T14241] ? clear_bhb_loop+0x40/0x90 [ 947.443720][T14241] ? clear_bhb_loop+0x40/0x90 [ 947.443814][T14241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.443874][T14241] RIP: 0033:0x7fe43f6bab89 [ 947.443891][T14241] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 947.443911][T14241] RSP: 002b:00007fe43dd86a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 947.443932][T14241] RAX: ffffffffffffffda RBX: 00007fe43f945fa0 RCX: 00007fe43f6bab89 [ 947.443946][T14241] RDX: 00007fe43dd86a80 RSI: 00007fe43dd86bb0 RDI: 0000000000000011 [ 947.443994][T14241] RBP: 00007fe43dd87090 R08: 0000000000000000 R09: 0000000000000000 [ 947.444008][T14241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.444021][T14241] R13: 0000000000000000 R14: 00007fe43f945fa0 R15: 00007ffef7ee9528 [ 947.444073][T14241] [ 947.519661][T14242] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 947.589090][ T10] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 947.660675][T14242] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(21) [ 947.696118][T14242] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 947.696250][T14242] vhci_hcd vhci_hcd.0: Device attached [ 947.733601][T14242] tipc: Failed to remove unknown binding: 66,1,1/0:1073115533/1073115535 [ 947.747131][T14242] tipc: Failed to remove unknown binding: 66,1,1/0:1073115533/1073115535 [ 947.755621][T14242] tipc: Failed to remove unknown binding: 66,1,1/0:1073115533/1073115535 [ 947.755990][T14281] __vm_enough_memory: pid: 14281, comm: syz.9.15122, bytes: 21200016244736 not enough memory for the allocation [ 947.767809][T14263] vhci_hcd: connection closed [ 947.776844][T14252] vhci_hcd: connection closed [ 947.777938][T14257] vhci_hcd: connection closed [ 947.786339][T14271] vhci_hcd: connection closed [ 947.788306][T31423] vhci_hcd: stop threads [ 947.800026][T31423] vhci_hcd: release socket [ 947.804440][T31423] vhci_hcd: disconnect device [ 947.809660][T14244] vhci_hcd: connection reset by peer [ 947.812407][T14247] vhci_hcd: connection closed [ 947.822748][T31423] vhci_hcd: stop threads [ 947.831721][T31423] vhci_hcd: release socket [ 947.831933][T14281] loop9: detected capacity change from 0 to 512 [ 947.836144][T31423] vhci_hcd: disconnect device [ 947.843519][T14281] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 947.858995][T31423] vhci_hcd: stop threads [ 947.863337][T31423] vhci_hcd: release socket [ 947.867770][T31423] vhci_hcd: disconnect device [ 947.873831][T14281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 947.881900][T14281] System zones: 1-12 [ 947.886001][T31423] vhci_hcd: stop threads [ 947.890341][T31423] vhci_hcd: release socket [ 947.894858][T31423] vhci_hcd: disconnect device [ 947.921474][T14281] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.15122: missing EA_INODE flag [ 947.933586][T14281] EXT4-fs (loop9): Remounting filesystem read-only [ 947.940209][T14281] EXT4-fs (loop9): 1 orphan inode deleted [ 947.941830][T14299] wireguard0: entered promiscuous mode [ 947.946500][T14281] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.951716][T14299] wireguard0: entered allmulticast mode [ 947.971597][T31423] vhci_hcd: stop threads [ 947.975862][T31423] vhci_hcd: release socket [ 947.980321][T31423] vhci_hcd: disconnect device [ 947.991145][T31423] vhci_hcd: stop threads [ 947.995417][T31423] vhci_hcd: release socket [ 947.999891][T31423] vhci_hcd: disconnect device [ 948.009237][ T9235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.043833][T14310] loop9: detected capacity change from 0 to 512 [ 948.065333][T14315] FAULT_INJECTION: forcing a failure. [ 948.065333][T14315] name failslab, interval 1, probability 0, space 0, times 0 [ 948.078128][T14315] CPU: 0 UID: 0 PID: 14315 Comm: syz.7.15133 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 948.078164][T14315] Tainted: [W]=WARN [ 948.078176][T14315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 948.078216][T14315] Call Trace: [ 948.078222][T14315] [ 948.078229][T14315] __dump_stack+0x1d/0x30 [ 948.078249][T14315] dump_stack_lvl+0xe8/0x140 [ 948.078269][T14315] dump_stack+0x15/0x1b [ 948.078344][T14315] should_fail_ex+0x265/0x280 [ 948.078522][T14315] should_failslab+0x8c/0xb0 [ 948.078547][T14315] kmem_cache_alloc_noprof+0x50/0x310 [ 948.078575][T14315] ? sk_prot_alloc+0x3f/0x190 [ 948.078606][T14315] sk_prot_alloc+0x3f/0x190 [ 948.078648][T14315] sk_alloc+0x34/0x360 [ 948.078680][T14315] unix_create1+0xa5/0x430 [ 948.078703][T14315] unix_stream_connect+0x1a5/0xa50 [ 948.078806][T14315] ? selinux_netlbl_socket_connect+0x115/0x130 [ 948.078831][T14315] ? selinux_socket_connect+0x57/0x70 [ 948.078881][T14315] ? __pfx_unix_stream_connect+0x10/0x10 [ 948.078979][T14315] __sys_connect+0x1f2/0x2b0 [ 948.079129][T14315] __x64_sys_connect+0x3f/0x50 [ 948.079160][T14315] x64_sys_call+0x1daa/0x2fb0 [ 948.079183][T14315] do_syscall_64+0xd2/0x200 [ 948.079220][T14315] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 948.079303][T14315] ? clear_bhb_loop+0x40/0x90 [ 948.079322][T14315] ? clear_bhb_loop+0x40/0x90 [ 948.079392][T14315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.079415][T14315] RIP: 0033:0x7f4f812be9a9 [ 948.079432][T14315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.079452][T14315] RSP: 002b:00007f4f7f91f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 948.079509][T14315] RAX: ffffffffffffffda RBX: 00007f4f814e5fa0 RCX: 00007f4f812be9a9 [ 948.079521][T14315] RDX: 000000000000006e RSI: 0000200000fce000 RDI: 0000000000000006 [ 948.079543][T14315] RBP: 00007f4f7f91f090 R08: 0000000000000000 R09: 0000000000000000 [ 948.079554][T14315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.079566][T14315] R13: 0000000000000000 R14: 00007f4f814e5fa0 R15: 00007ffeb6773ff8 [ 948.079586][T14315] [ 948.299342][T14310] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.316956][T14310] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.15129: iget: bad i_size value: 2533274857506816 [ 948.383970][ T9235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.384488][T14322] loop7: detected capacity change from 0 to 16384 [ 948.447022][T14330] __vm_enough_memory: pid: 14330, comm: syz.3.15140, bytes: 21199619588096 not enough memory for the allocation [ 948.527436][T14343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.536035][T14343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 948.601354][T14338] loop7: detected capacity change from 16384 to 0 [ 948.612840][ C0] I/O error, dev loop7, sector 4872 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 948.635049][T14352] loop9: detected capacity change from 0 to 512 [ 948.664332][T14352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.682301][T14352] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.15149: iget: bad i_size value: 2533274857506816 [ 948.724779][ T9235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.741626][T14365] __vm_enough_memory: pid: 14365, comm: syz.3.15155, bytes: 21199619588096 not enough memory for the allocation [ 948.826061][T14377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15157'. [ 948.900121][T14388] loop9: detected capacity change from 0 to 512 [ 948.917985][T14388] EXT4-fs: Ignoring removed mblk_io_submit option [ 948.941203][T14388] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 948.977573][T14388] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 948.990457][T14388] EXT4-fs (loop9): orphan cleanup on readonly fs [ 948.999403][T14409] loop7: detected capacity change from 0 to 16384 [ 949.013204][T14388] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.15158: Invalid block bitmap block 0 in block_group 0 [ 949.040733][T14388] EXT4-fs (loop9): Remounting filesystem read-only [ 949.047491][T14388] EXT4-fs (loop9): 1 orphan inode deleted [ 949.059428][T14388] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 949.181782][T14432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15167'. [ 949.191521][ T9235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 949.243663][T14443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15170'. [ 949.443843][T14478] sd 0:0:1:0: device reset [ 949.461757][T14481] netlink: 'syz.5.15177': attribute type 1 has an invalid length. [ 949.469716][T14481] netlink: 'syz.5.15177': attribute type 4 has an invalid length. [ 949.533972][T14492] loop7: detected capacity change from 0 to 128 [ 949.544071][T14491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 949.552544][T14491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.564028][T14492] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 949.582836][T14492] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 63: comm syz.7.15178: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 949.603599][T14492] EXT4-fs error (device loop7) in do_split:2029: Corrupt filesystem [ 949.663325][T14492] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 63: comm syz.7.15178: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 949.683810][T14492] EXT4-fs error (device loop7) in do_split:2029: Corrupt filesystem [ 949.751484][ T6253] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 949.936858][T31394] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.993921][T31394] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.010930][T14571] sd 0:0:1:0: device reset [ 950.029179][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 950.029195][ T29] audit: type=1326 audit(950.030:78458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.7.15188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f812be9a9 code=0x7ffc0000 [ 950.062931][ T29] audit: type=1326 audit(950.030:78459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.7.15188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4f812be9a9 code=0x7ffc0000 [ 950.086068][ T29] audit: type=1326 audit(950.030:78460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.7.15188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f812be9a9 code=0x7ffc0000 [ 950.109141][ T29] audit: type=1326 audit(950.030:78461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14569 comm="syz.7.15188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f812be9a9 code=0x7ffc0000 [ 950.141296][T31394] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.160631][ T29] audit: type=1400 audit(950.160:78462): avc: denied { getopt } for pid=14586 comm="syz.5.15189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 950.216203][T14560] lo speed is unknown, defaulting to 1000 [ 950.216237][ T29] audit: type=1326 audit(950.190:78463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.5.15189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 950.229696][T14597] __vm_enough_memory: pid: 14597, comm: syz.5.15191, bytes: 21200242331648 not enough memory for the allocation [ 950.245085][ T29] audit: type=1326 audit(950.190:78464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.5.15189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 950.280106][ T29] audit: type=1326 audit(950.190:78465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14586 comm="syz.5.15189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 950.303634][ T29] audit: type=1326 audit(950.230:78466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.5.15191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 950.326768][ T29] audit: type=1326 audit(950.230:78467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14594 comm="syz.5.15191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6e89ce9a9 code=0x7ffc0000 [ 950.355982][T14601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.366495][T14601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.385550][T31394] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.475789][T31394] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 950.542154][T31394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.560210][T31394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.569066][T14617] loop7: detected capacity change from 0 to 512 [ 950.575565][T31394] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 950.575849][T14617] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 950.599071][T31394] bond0 (unregistering): Released all slaves [ 950.607991][T31394] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 950.616408][T31394] batadv1: left promiscuous mode [ 950.622778][T31394] bond1 (unregistering): Released all slaves [ 950.623466][T14617] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 950.645727][T14560] chnl_net:caif_netlink_parms(): no params data found [ 950.664104][T14621] netlink: 'syz.9.15200': attribute type 1 has an invalid length. [ 950.673144][T14617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.681592][T14617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.703247][T31394] hsr_slave_0: left promiscuous mode [ 950.708967][T31394] hsr_slave_1: left promiscuous mode [ 950.714541][T31394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.722180][T31394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.730202][T31394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 950.737774][T31394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 950.746045][T14629] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 950.753145][T31394] veth1_macvtap: left promiscuous mode [ 950.758768][T31394] veth1_vlan: left promiscuous mode [ 950.764068][T31394] veth0_vlan: left promiscuous mode [ 950.797563][T31394] pimreg (unregistering): left allmulticast mode [ 950.824221][T31394] team0 (unregistering): Port device team_slave_1 removed [ 950.834222][T31394] team0 (unregistering): Port device team_slave_0 removed [ 950.878500][T10583] lo speed is unknown, defaulting to 1000 [ 950.884298][T10583] infiniband syz0: ib_query_port failed (-19) [ 950.884577][T14560] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.897494][T14560] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.905181][T14560] bridge_slave_0: entered allmulticast mode [ 950.909596][T14633] __vm_enough_memory: pid: 14633, comm: syz.1.15202, bytes: 21200214966272 not enough memory for the allocation [ 950.911736][T14560] bridge_slave_0: entered promiscuous mode [ 950.947607][T14560] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.954750][T14560] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.962416][T14560] bridge_slave_1: entered allmulticast mode [ 950.970424][T14560] bridge_slave_1: entered promiscuous mode [ 950.993526][T14560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 951.004042][T14560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 951.024147][T14560] team0: Port device team_slave_0 added [ 951.031394][T14560] team0: Port device team_slave_1 added [ 951.046839][T14560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 951.053908][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.079948][T14560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 951.091708][T14560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 951.098667][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 951.124678][T14560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 951.148108][T14650] tun0: tun_chr_ioctl cmd 1074025677 [ 951.153560][T14650] tun0: linktype set to 774 [ 951.159576][T14652] sd 0:0:1:0: device reset [ 951.170667][T14560] hsr_slave_0: entered promiscuous mode [ 951.176700][T14560] hsr_slave_1: entered promiscuous mode [ 951.182842][T14560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 951.190587][T14560] Cannot create hsr debugfs directory [ 951.228062][T31394] IPVS: stop unused estimator thread 0... [ 951.247392][ T6253] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 951.283990][T14661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.292859][T14661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.325586][T14667] netlink: 'syz.1.15216': attribute type 8 has an invalid length. [ 951.354035][T14669] loop7: detected capacity change from 0 to 16384 [ 951.416971][T14560] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 951.426222][T14560] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 951.435806][T14560] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 951.445011][T14560] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 951.452188][T14678] sd 0:0:1:0: device reset [ 951.489408][T14560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.504457][T14560] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.514435][T31433] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.521615][T31433] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.534342][T31433] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.541417][T31433] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.613133][T14560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.643958][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15224'. [ 951.683044][T14560] veth0_vlan: entered promiscuous mode [ 951.691124][T14560] veth1_vlan: entered promiscuous mode [ 951.708217][T14560] veth0_macvtap: entered promiscuous mode [ 951.716122][T14560] veth1_macvtap: entered promiscuous mode [ 951.725426][T14707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15225'. [ 951.728573][T14560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 951.747412][T14560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 951.756882][T14560] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.765738][T14560] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.774469][T14560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.783211][T14560] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.803177][T14714] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15226'. [ 951.820283][T14713] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15226'. [ 951.890755][T14721] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.898436][T14721] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.906212][T14721] bridge0: left promiscuous mode [ 951.911211][T14721] bridge0: left allmulticast mode [ 951.923814][T14729] __vm_enough_memory: pid: 14729, comm: syz.3.15232, bytes: 21199650639872 not enough memory for the allocation [ 952.020326][T14721] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.029341][T14721] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.038449][T14721] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.047530][T14721] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.125778][T14746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.157083][T14746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.205418][T14754] netlink: 'syz.3.15239': attribute type 1 has an invalid length. [ 952.259885][T14730] chnl_net:caif_netlink_parms(): no params data found [ 952.334342][T31394] dvmrp0 (unregistering): left allmulticast mode [ 952.630482][T31394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.639816][T31394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 952.649376][T31394] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 952.658132][T31394] bond0 (unregistering): Released all slaves [ 952.667330][T31394] bond1 (unregistering): Released all slaves [ 952.676120][T31394] bond2 (unregistering): (slave batadv1): Releasing active interface [ 952.684870][T31394] bond2 (unregistering): Released all slaves [ 952.702522][T14730] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.709617][T14730] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.730554][T14730] bridge_slave_0: entered allmulticast mode [ 952.737110][T14730] bridge_slave_0: entered promiscuous mode [ 952.748724][T14730] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.755964][T14730] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.764813][T14730] bridge_slave_1: entered allmulticast mode [ 952.779557][T14730] bridge_slave_1: entered promiscuous mode [ 952.788805][ T10] usb 11-1: enqueue for inactive port 0 [ 952.794465][ T10] usb 11-1: enqueue for inactive port 0 [ 952.807500][T31394] tipc: Disabling bearer [ 952.812788][T31394] tipc: Left network mode [ 952.818692][T14730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.831409][T31394] IPVS: stopping backup sync thread 11118 ... [ 952.839762][T14730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.865811][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15254'. [ 952.878835][ T10] vhci_hcd: vhci_device speed not set [ 952.885671][T14730] team0: Port device team_slave_0 added [ 952.905902][T31394] hsr_slave_0: left promiscuous mode [ 952.928671][T14801] loop9: detected capacity change from 0 to 512 [ 952.935440][T31394] hsr_slave_1: left promiscuous mode [ 952.949666][T14801] EXT4-fs error (device loop9): ext4_orphan_get:1393: inode #15: comm syz.9.15257: iget: bad extended attribute block 1 [ 952.966579][T14801] EXT4-fs error (device loop9): ext4_orphan_get:1398: comm syz.9.15257: couldn't read orphan inode 15 (err -117) [ 952.987863][T14801] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 953.002348][T14801] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.042004][T31394] team0 (unregistering): Port device team_slave_1 removed [ 953.052085][T31394] team0 (unregistering): Port device team_slave_0 removed [ 953.098117][T14730] team0: Port device team_slave_1 added [ 953.108125][T14817] hub 9-0:1.0: USB hub found [ 953.121229][T14817] hub 9-0:1.0: 8 ports detected [ 953.127128][T14730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.134124][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.160114][T14730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.174153][T14730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.181189][T14730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.207284][T14730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.242488][T14730] hsr_slave_0: entered promiscuous mode [ 953.248551][T14730] hsr_slave_1: entered promiscuous mode [ 953.255215][T14730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 953.264028][T14730] Cannot create hsr debugfs directory [ 953.289608][T14820] loop7: detected capacity change from 0 to 16384 [ 953.349295][T14822] loop9: detected capacity change from 0 to 2048 [ 953.374687][T14822] EXT4-fs: quotafile must be on filesystem root [ 953.414388][T31394] IPVS: stop unused estimator thread 0... [ 953.426975][T14825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 953.454699][T14825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.491910][T14822] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15262'. [ 953.538440][T14833] loop9: detected capacity change from 0 to 512 [ 953.551508][T14833] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.569231][T14833] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.15265: iget: bad i_size value: 2533274857506816 [ 953.596944][ T9235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 953.641620][T14842] __vm_enough_memory: pid: 14842, comm: syz.5.15268, bytes: 21200242331648 not enough memory for the allocation [ 953.658262][T14730] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 953.667915][T14730] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 953.679066][T14730] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 953.699412][T14730] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 953.742340][T14856] 9pnet_fd: Insufficient options for proto=fd [ 953.753831][T14730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.767018][T14730] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.776664][T31407] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.783744][T31407] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.797268][T14859] ip6tnl0: entered promiscuous mode [ 953.804410][T14858] ip6tnl0: left promiscuous mode [ 953.834375][T31407] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.841483][T31407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.923592][T14730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.991780][T14884] infiniband syz!: set active [ 953.996550][T14884] infiniband syz!: added team_slave_0 [ 954.007847][T14884] RDS/IB: syz!: added [ 954.011959][T14884] smc: adding ib device syz! with port count 1 [ 954.018344][T14884] smc: ib device syz! port 1 has pnetid [ 954.155401][T14914] netlink: 'syz.5.15291': attribute type 1 has an invalid length. [ 954.189564][T14917] netlink: 'syz.3.15292': attribute type 1 has an invalid length. [ 954.225182][T14730] veth0_vlan: entered promiscuous mode [ 954.257483][T14920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.267389][T14730] veth1_vlan: entered promiscuous mode [ 954.295886][T14730] veth0_macvtap: entered promiscuous mode [ 954.309328][T14730] veth1_macvtap: entered promiscuous mode [ 954.318839][T14920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.336574][T14730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.352469][T14730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 954.369911][T14730] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.378775][T14730] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.387548][T14730] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.396385][T14730] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.492135][T14925] FAULT_INJECTION: forcing a failure. [ 954.492135][T14925] name failslab, interval 1, probability 0, space 0, times 0 [ 954.504812][T14925] CPU: 0 UID: 0 PID: 14925 Comm: syz.7.15231 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 954.504924][T14925] Tainted: [W]=WARN [ 954.504931][T14925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 954.504945][T14925] Call Trace: [ 954.504951][T14925] [ 954.504959][T14925] __dump_stack+0x1d/0x30 [ 954.504982][T14925] dump_stack_lvl+0xe8/0x140 [ 954.505003][T14925] dump_stack+0x15/0x1b [ 954.505021][T14925] should_fail_ex+0x265/0x280 [ 954.505129][T14925] should_failslab+0x8c/0xb0 [ 954.505154][T14925] kmem_cache_alloc_noprof+0x50/0x310 [ 954.505206][T14925] ? __break_lease+0x78/0xe80 [ 954.505238][T14925] __break_lease+0x78/0xe80 [ 954.505309][T14925] ? selinux_inode_remove_acl+0x1c0/0x210 [ 954.505355][T14925] vfs_remove_acl+0x176/0x560 [ 954.505386][T14925] path_removexattrat+0x374/0x570 [ 954.505422][T14925] __x64_sys_fremovexattr+0x35/0x40 [ 954.505527][T14925] x64_sys_call+0x2c90/0x2fb0 [ 954.505550][T14925] do_syscall_64+0xd2/0x200 [ 954.505617][T14925] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 954.505647][T14925] ? clear_bhb_loop+0x40/0x90 [ 954.505670][T14925] ? clear_bhb_loop+0x40/0x90 [ 954.505694][T14925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.505717][T14925] RIP: 0033:0x7fd198a5e9a9 [ 954.505809][T14925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.505836][T14925] RSP: 002b:00007fd1970bf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 954.505856][T14925] RAX: ffffffffffffffda RBX: 00007fd198c85fa0 RCX: 00007fd198a5e9a9 [ 954.505869][T14925] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 954.505882][T14925] RBP: 00007fd1970bf090 R08: 0000000000000000 R09: 0000000000000000 [ 954.505969][T14925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 954.505982][T14925] R13: 0000000000000000 R14: 00007fd198c85fa0 R15: 00007ffce7b521f8 [ 954.506001][T14925] [ 954.728870][T14930] FAULT_INJECTION: forcing a failure. [ 954.728870][T14930] name failslab, interval 1, probability 0, space 0, times 0 [ 954.741549][T14930] CPU: 0 UID: 0 PID: 14930 Comm: syz.7.15296 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 954.741588][T14930] Tainted: [W]=WARN [ 954.741651][T14930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 954.741662][T14930] Call Trace: [ 954.741669][T14930] [ 954.741676][T14930] __dump_stack+0x1d/0x30 [ 954.741707][T14930] dump_stack_lvl+0xe8/0x140 [ 954.741757][T14930] dump_stack+0x15/0x1b [ 954.741771][T14930] should_fail_ex+0x265/0x280 [ 954.741799][T14930] should_failslab+0x8c/0xb0 [ 954.741825][T14930] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 954.741856][T14930] ? cond_bools_copy+0x30/0x80 [ 954.741883][T14930] ? __pfx_cond_bools_destroy+0x10/0x10 [ 954.741955][T14930] kmemdup_noprof+0x2b/0x70 [ 954.741980][T14930] ? __pfx_cond_bools_destroy+0x10/0x10 [ 954.742006][T14930] cond_bools_copy+0x30/0x80 [ 954.742073][T14930] ? __pfx_cond_bools_destroy+0x10/0x10 [ 954.742100][T14930] hashtab_duplicate+0x11e/0x360 [ 954.742119][T14930] ? __pfx_cond_bools_copy+0x10/0x10 [ 954.742145][T14930] cond_policydb_dup+0xd2/0x4e0 [ 954.742222][T14930] security_set_bools+0xa0/0x340 [ 954.742252][T14930] sel_commit_bools_write+0x1ea/0x270 [ 954.742285][T14930] vfs_writev+0x403/0x8b0 [ 954.742308][T14930] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 954.742343][T14930] ? mutex_lock+0xd/0x30 [ 954.742383][T14930] do_writev+0xe7/0x210 [ 954.742407][T14930] __x64_sys_writev+0x45/0x50 [ 954.742427][T14930] x64_sys_call+0x2006/0x2fb0 [ 954.742482][T14930] do_syscall_64+0xd2/0x200 [ 954.742502][T14930] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 954.742531][T14930] ? clear_bhb_loop+0x40/0x90 [ 954.742553][T14930] ? clear_bhb_loop+0x40/0x90 [ 954.742714][T14930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.742737][T14930] RIP: 0033:0x7fd198a5e9a9 [ 954.742754][T14930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 954.742838][T14930] RSP: 002b:00007fd1970bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 954.742857][T14930] RAX: ffffffffffffffda RBX: 00007fd198c85fa0 RCX: 00007fd198a5e9a9 [ 954.742871][T14930] RDX: 0000000000000001 RSI: 00002000000025c0 RDI: 0000000000000003 [ 954.742885][T14930] RBP: 00007fd1970bf090 R08: 0000000000000000 R09: 0000000000000000 [ 954.742921][T14930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 954.742935][T14930] R13: 0000000000000000 R14: 00007fd198c85fa0 R15: 00007ffce7b521f8 [ 954.742953][T14930] [ 955.137924][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 955.137982][ T29] audit: type=1326 audit(955.130:78678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.9.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f71e9a9 code=0x7ffc0000 [ 955.176015][T14953] __vm_enough_memory: pid: 14953, comm: syz.9.15307, bytes: 21200016244736 not enough memory for the allocation [ 955.193462][T14953] loop9: detected capacity change from 0 to 512 [ 955.209697][ T29] audit: type=1326 audit(955.170:78679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.9.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe43f7208c7 code=0x7ffc0000 [ 955.232881][ T29] audit: type=1326 audit(955.170:78680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.9.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f71e9a9 code=0x7ffc0000 [ 955.256183][ T29] audit: type=1326 audit(955.170:78681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.9.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe43f71e9a9 code=0x7ffc0000 [ 955.279268][ T29] audit: type=1326 audit(955.170:78682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.9.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f71e9a9 code=0x7ffc0000 [ 955.290872][T14953] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 955.302467][ T29] audit: type=1326 audit(955.170:78683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.9.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe43f71e9a9 code=0x7ffc0000 [ 955.335198][ T29] audit: type=1326 audit(955.170:78684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.9.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f71e9a9 code=0x7ffc0000 [ 955.335297][ T29] audit: type=1326 audit(955.170:78685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.9.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe43f71e9a9 code=0x7ffc0000 [ 955.335320][ T29] audit: type=1326 audit(955.170:78686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.9.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43f71e9a9 code=0x7ffc0000 [ 955.335344][ T29] audit: type=1326 audit(955.170:78687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14952 comm="syz.9.15307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fe43f71e9a9 code=0x7ffc0000 [ 955.366543][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15312'. [ 955.366634][T14966] FAULT_INJECTION: forcing a failure. [ 955.366634][T14966] name failslab, interval 1, probability 0, space 0, times 0 [ 955.366659][T14966] CPU: 0 UID: 0 PID: 14966 Comm: syz.5.15312 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 955.366724][T14966] Tainted: [W]=WARN [ 955.366737][T14966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 955.366748][T14966] Call Trace: [ 955.366753][T14966] [ 955.366760][T14966] __dump_stack+0x1d/0x30 [ 955.366783][T14966] dump_stack_lvl+0xe8/0x140 [ 955.366805][T14966] dump_stack+0x15/0x1b [ 955.366823][T14966] should_fail_ex+0x265/0x280 [ 955.366898][T14966] should_failslab+0x8c/0xb0 [ 955.366920][T14966] __kmalloc_noprof+0xa5/0x3e0 [ 955.366944][T14966] ? unregister_netdevice_many_notify+0x4cf/0x1690 [ 955.366964][T14966] ? unlist_netdevice+0x2cc/0x320 [ 955.367026][T14966] unregister_netdevice_many_notify+0x4cf/0x1690 [ 955.367050][T14966] ? unregister_netdevice_queue+0x12b/0x220 [ 955.367082][T14966] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 955.367174][T14966] rtnl_dellink+0x3cb/0x550 [ 955.367217][T14966] ? security_capable+0x83/0x90 [ 955.367242][T14966] ? ns_capable+0x7d/0xb0 [ 955.367269][T14966] ? __pfx_rtnl_dellink+0x10/0x10 [ 955.367292][T14966] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 955.367315][T14966] ? avc_has_perm_noaudit+0x1b1/0x200 [ 955.367344][T14966] netlink_rcv_skb+0x123/0x220 [ 955.367403][T14953] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002] [ 955.367426][T14953] System zones: 1-12 [ 955.367449][T14966] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 955.367475][T14966] rtnetlink_rcv+0x1c/0x30 [ 955.367496][T14966] netlink_unicast+0x5a8/0x680 [ 955.367528][T14966] netlink_sendmsg+0x58b/0x6b0 [ 955.367617][T14966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 955.367636][T14966] __sock_sendmsg+0x142/0x180 [ 955.367662][T14966] ____sys_sendmsg+0x31e/0x4e0 [ 955.367682][T14966] ___sys_sendmsg+0x17b/0x1d0 [ 955.367779][T14966] __x64_sys_sendmsg+0xd4/0x160 [ 955.367812][T14953] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.15307: missing EA_INODE flag [ 955.367820][T14966] x64_sys_call+0x2999/0x2fb0 [ 955.367841][T14966] do_syscall_64+0xd2/0x200 [ 955.367858][T14966] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 955.367887][T14966] ? clear_bhb_loop+0x40/0x90 [ 955.367923][T14966] ? clear_bhb_loop+0x40/0x90 [ 955.367945][T14966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.367966][T14966] RIP: 0033:0x7ff6e89ce9a9 [ 955.367979][T14966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 955.367961][T14953] EXT4-fs (loop9): Remounting filesystem read-only [ 955.368008][T14966] RSP: 002b:00007ff6e702f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 955.368027][T14966] RAX: ffffffffffffffda RBX: 00007ff6e8bf5fa0 RCX: 00007ff6e89ce9a9 [ 955.368034][T14953] EXT4-fs (loop9): 1 orphan inode deleted [ 955.368041][T14966] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 955.368054][T14966] RBP: 00007ff6e702f090 R08: 0000000000000000 R09: 0000000000000000 [ 955.368066][T14966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 955.368080][T14966] R13: 0000000000000000 R14: 00007ff6e8bf5fa0 R15: 00007ffcfa74eaa8 [ 955.368098][T14966] [ 955.368535][T14953] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 955.371879][T14966] team0 (unregistering): Port device team_slave_0 removed [ 955.381001][T14966] team0 (unregistering): Port device team_slave_1 removed [ 955.408143][ T9235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 955.467983][T14977] netlink: 'syz.1.15317': attribute type 1 has an invalid length. [ 955.588179][T14958] sd 0:0:1:0: device reset [ 955.700822][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15322'. [ 956.009055][T15017] netlink: 'syz.5.15332': attribute type 3 has an invalid length. [ 956.106522][T15017] netlink: 'syz.5.15332': attribute type 1 has an invalid length. [ 956.116867][T15022] FAULT_INJECTION: forcing a failure. [ 956.116867][T15022] name failslab, interval 1, probability 0, space 0, times 0 [ 956.118693][T15019] netlink: 'syz.9.15333': attribute type 1 has an invalid length. [ 956.129562][T15022] CPU: 1 UID: 0 PID: 15022 Comm: syz.1.15334 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 956.129728][T15022] Tainted: [W]=WARN [ 956.129735][T15022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 956.129765][T15022] Call Trace: [ 956.129772][T15022] [ 956.129780][T15022] __dump_stack+0x1d/0x30 [ 956.129803][T15022] dump_stack_lvl+0xe8/0x140 [ 956.129847][T15022] dump_stack+0x15/0x1b [ 956.129863][T15022] should_fail_ex+0x265/0x280 [ 956.129971][T15022] ? register_netdevice+0x1e8/0xf00 [ 956.130004][T15022] should_failslab+0x8c/0xb0 [ 956.130027][T15022] __kmalloc_cache_noprof+0x4c/0x320 [ 956.130055][T15022] ? rb_erase+0x206/0x680 [ 956.130105][T15022] register_netdevice+0x1e8/0xf00 [ 956.130136][T15022] ? dev_addr_mod+0x1a4/0x1d0 [ 956.130224][T15022] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 956.130245][T15022] batadv_meshif_newlink+0x7d/0x90 [ 956.130265][T15022] rtnl_newlink_create+0x1b9/0x620 [ 956.130309][T15022] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 956.130361][T15022] rtnl_newlink+0xf29/0x12d0 [ 956.130390][T15022] ? bpf_trace_run3+0x12c/0x1d0 [ 956.130415][T15022] ? __memcg_slab_free_hook+0x135/0x230 [ 956.130446][T15022] ? __kfree_skb+0x109/0x150 [ 956.130536][T15022] ? __rcu_read_unlock+0x4f/0x70 [ 956.130609][T15022] ? avc_has_perm_noaudit+0x1b1/0x200 [ 956.130639][T15022] ? selinux_capable+0x1f9/0x270 [ 956.130671][T15022] ? security_capable+0x83/0x90 [ 956.130697][T15022] ? ns_capable+0x7d/0xb0 [ 956.130724][T15022] ? __pfx_rtnl_newlink+0x10/0x10 [ 956.130747][T15022] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 956.130818][T15022] netlink_rcv_skb+0x123/0x220 [ 956.130850][T15022] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 956.130879][T15022] rtnetlink_rcv+0x1c/0x30 [ 956.130899][T15022] netlink_unicast+0x5a8/0x680 [ 956.130967][T15022] netlink_sendmsg+0x58b/0x6b0 [ 956.130988][T15022] ? __pfx_netlink_sendmsg+0x10/0x10 [ 956.131034][T15022] __sock_sendmsg+0x142/0x180 [ 956.131060][T15022] ____sys_sendmsg+0x31e/0x4e0 [ 956.131081][T15022] ___sys_sendmsg+0x17b/0x1d0 [ 956.131158][T15022] __x64_sys_sendmsg+0xd4/0x160 [ 956.131181][T15022] x64_sys_call+0x2999/0x2fb0 [ 956.131204][T15022] do_syscall_64+0xd2/0x200 [ 956.131221][T15022] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 956.131314][T15022] ? clear_bhb_loop+0x40/0x90 [ 956.131413][T15022] ? clear_bhb_loop+0x40/0x90 [ 956.131435][T15022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.131464][T15022] RIP: 0033:0x7fb9a318e9a9 [ 956.131479][T15022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 956.131498][T15022] RSP: 002b:00007fb9a17ef038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 956.131517][T15022] RAX: ffffffffffffffda RBX: 00007fb9a33b5fa0 RCX: 00007fb9a318e9a9 [ 956.131530][T15022] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 956.131542][T15022] RBP: 00007fb9a17ef090 R08: 0000000000000000 R09: 0000000000000000 [ 956.131625][T15022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 956.131637][T15022] R13: 0000000000000000 R14: 00007fb9a33b5fa0 R15: 00007ffd02e410c8 [ 956.131656][T15022] [ 956.555185][T15030] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15336'. [ 956.627528][T15053] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 956.634072][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 956.641639][T15053] vhci_hcd vhci_hcd.0: Device attached [ 956.667875][T15053] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(9) [ 956.674408][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 956.682027][T15053] vhci_hcd vhci_hcd.0: Device attached [ 956.713518][T15053] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(11) [ 956.720229][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 956.727820][T15053] vhci_hcd vhci_hcd.0: Device attached [ 956.734679][T15053] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 956.754770][T15053] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(15) [ 956.761401][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 956.768847][T15053] vhci_hcd vhci_hcd.0: Device attached [ 956.780516][T15053] vhci_hcd vhci_hcd.0: pdev(5) rhport(5) sockfd(17) [ 956.787161][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 956.794832][T15053] vhci_hcd vhci_hcd.0: Device attached [ 956.801398][T15053] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 956.815883][T15073] netlink: 'syz.3.15350': attribute type 1 has an invalid length. [ 956.827431][T15075] loop9: detected capacity change from 0 to 128 [ 956.828588][T15053] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(21) [ 956.840276][T15053] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 956.847863][T15053] vhci_hcd vhci_hcd.0: Device attached [ 956.859428][T15075] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 956.886496][T15053] tipc: Failed to remove unknown binding: 66,1,1/0:431899653/431899655 [ 956.889336][T15075] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 63: comm syz.9.15349: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 956.913786][T15076] vhci_hcd: connection closed [ 956.913963][T31394] vhci_hcd: stop threads [ 956.914020][T15075] EXT4-fs error (device loop9) in do_split:2029: Corrupt filesystem [ 956.918708][T31394] vhci_hcd: release socket [ 956.918724][T31394] vhci_hcd: disconnect device [ 956.924140][T15055] vhci_hcd: connection closed [ 956.931136][T15060] vhci_hcd: connection closed [ 956.931220][T15064] vhci_hcd: connection closed [ 956.931316][ T3417] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 956.936139][T15068] vhci_hcd: connection closed [ 956.940355][T15056] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 956.945468][T15070] vhci_hcd: connection closed [ 956.971268][T31394] vhci_hcd: stop threads [ 956.981978][T31394] vhci_hcd: release socket [ 956.986623][T31394] vhci_hcd: disconnect device [ 956.991692][T31394] vhci_hcd: stop threads [ 956.995931][T31394] vhci_hcd: release socket [ 957.000449][T31394] vhci_hcd: disconnect device [ 957.005485][T31394] vhci_hcd: stop threads [ 957.009908][T31394] vhci_hcd: release socket [ 957.014537][T31394] vhci_hcd: disconnect device [ 957.019528][T31394] vhci_hcd: stop threads [ 957.023781][T31394] vhci_hcd: release socket [ 957.028233][T31394] vhci_hcd: disconnect device [ 957.033763][T31394] vhci_hcd: stop threads [ 957.038018][T31394] vhci_hcd: release socket [ 957.042474][T31394] vhci_hcd: disconnect device [ 957.053112][T15075] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 63: comm syz.9.15349: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 957.071706][T15075] EXT4-fs error (device loop9) in do_split:2029: Corrupt filesystem [ 957.139654][ T9235] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 957.261711][T15116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15368'. [ 957.315553][T15124] sd 0:0:1:0: device reset [ 957.524465][T15157] sd 0:0:1:0: device reset [ 957.617747][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15396'. [ 957.634967][T15179] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 957.641547][T15179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 957.649465][T15179] vhci_hcd vhci_hcd.0: Device attached [ 957.664314][T15179] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 957.670958][T15179] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 957.678570][T15179] vhci_hcd vhci_hcd.0: Device attached [ 957.710468][T15179] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11) [ 957.717190][T15179] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 957.724859][T15179] vhci_hcd vhci_hcd.0: Device attached [ 957.741501][T15179] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 957.752365][T15201] qrtr: Invalid version 118 [ 957.758551][T15179] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 957.765165][T15179] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 957.772770][T15179] vhci_hcd vhci_hcd.0: Device attached [ 957.806036][T15179] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(17) [ 957.812662][T15179] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 957.820551][T15179] vhci_hcd vhci_hcd.0: Device attached [ 957.826790][T15211] sg_write: data in/out 1684960011/120 bytes for SCSI command 0x0-- guessing data in; [ 957.826790][T15211] program syz.5.15400 not setting count and/or reply_len properly [ 957.840497][T15209] loop7: detected capacity change from 0 to 2048 [ 957.851685][T15179] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 957.865514][T15209] EXT4-fs: quotafile must be on filesystem root [ 957.872099][T15179] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(21) [ 957.878713][T15179] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 957.886431][T15179] vhci_hcd vhci_hcd.0: Device attached [ 957.904908][T15179] tipc: Failed to remove unknown binding: 66,1,1/0:2459138772/2459138774 [ 957.915570][T15213] vhci_hcd: connection closed [ 957.915717][T31433] vhci_hcd: stop threads [ 957.917389][T15209] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15407'. [ 957.920437][T31433] vhci_hcd: release socket [ 957.920516][T31433] vhci_hcd: disconnect device [ 957.922842][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15406'. [ 957.925199][T15184] vhci_hcd: connection closed [ 957.933810][T15192] vhci_hcd: connection closed [ 957.953242][T31433] vhci_hcd: stop threads [ 957.957120][T15199] vhci_hcd: connection closed [ 957.961309][T31433] vhci_hcd: release socket [ 957.967321][T15180] vhci_hcd: connection closed [ 957.970194][T31433] vhci_hcd: disconnect device [ 957.970215][T15206] vhci_hcd: connection closed [ 957.973786][T31433] vhci_hcd: stop threads [ 957.993181][T31433] vhci_hcd: release socket [ 957.997607][T31433] vhci_hcd: disconnect device [ 958.002561][T31433] vhci_hcd: stop threads [ 958.006863][T31433] vhci_hcd: release socket [ 958.011342][T31433] vhci_hcd: disconnect device [ 958.016241][T31433] vhci_hcd: stop threads [ 958.020558][T31433] vhci_hcd: release socket [ 958.024991][T31433] vhci_hcd: disconnect device [ 958.030059][T31433] vhci_hcd: stop threads [ 958.034330][T31433] vhci_hcd: release socket [ 958.038776][T31433] vhci_hcd: disconnect device [ 958.187942][T15225] sd 0:0:1:0: device reset [ 958.212417][T15229] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 958.218946][T15229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 958.226526][T15229] vhci_hcd vhci_hcd.0: Device attached [ 958.233143][T15229] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 958.239649][T15229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 958.247256][T15229] vhci_hcd vhci_hcd.0: Device attached [ 958.254220][T15229] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 958.260875][T15229] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 958.268528][T15229] vhci_hcd vhci_hcd.0: Device attached [ 958.275050][T15229] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 958.284775][T15229] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(15) [ 958.291442][T15229] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 958.298939][T15229] vhci_hcd vhci_hcd.0: Device attached [ 958.305981][T15229] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(17) [ 958.312626][T15229] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 958.320266][T15229] vhci_hcd vhci_hcd.0: Device attached [ 958.326687][T15229] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 958.328206][T15239] loop7: detected capacity change from 0 to 128 [ 958.342189][T15229] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(21) [ 958.344921][T15239] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 958.348785][T15229] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 958.348849][T15229] vhci_hcd vhci_hcd.0: Device attached [ 958.366852][T15239] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 63: comm syz.7.15413: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 958.384125][T15229] tipc: Failed to remove unknown binding: 66,1,1/0:507959714/507959716 [ 958.396991][T15239] EXT4-fs error (device loop7) in do_split:2029: Corrupt filesystem [ 958.410133][T15243] vhci_hcd: connection closed [ 958.410304][T15240] vhci_hcd: connection closed [ 958.411207][T31407] vhci_hcd: stop threads [ 958.415146][T15236] vhci_hcd: connection closed [ 958.419698][T31407] vhci_hcd: release socket [ 958.428612][T15234] vhci_hcd: connection closed [ 958.428677][T15230] vhci_hcd: connection closed [ 958.433023][T31407] vhci_hcd: disconnect device [ 958.435291][T15232] vhci_hcd: connection closed [ 958.447711][T31407] vhci_hcd: stop threads [ 958.456766][T31407] vhci_hcd: release socket [ 958.461242][T31407] vhci_hcd: disconnect device [ 958.461267][T15239] EXT4-fs error (device loop7): dx_make_map:1296: inode #2: block 63: comm syz.7.15413: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 958.468396][T31407] vhci_hcd: stop threads [ 958.488478][T31407] vhci_hcd: release socket [ 958.492902][T31407] vhci_hcd: disconnect device [ 958.497588][ T2506] usb 7-1: new low-speed USB device number 3 using vhci_hcd [ 958.505261][T15239] EXT4-fs error (device loop7) in do_split:2029: Corrupt filesystem [ 958.513452][T15231] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 958.520476][T31407] vhci_hcd: stop threads [ 958.524747][T31407] vhci_hcd: release socket [ 958.529257][T31407] vhci_hcd: disconnect device [ 958.534781][T31407] vhci_hcd: stop threads [ 958.539085][T31407] vhci_hcd: release socket [ 958.543503][T31407] vhci_hcd: disconnect device [ 958.549977][T31407] vhci_hcd: stop threads [ 958.554251][T31407] vhci_hcd: release socket [ 958.558702][T31407] vhci_hcd: disconnect device [ 958.642341][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15420'. [ 958.667027][T15272] batadv_slave_1: entered promiscuous mode [ 958.674374][T15272] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15419'. [ 958.684194][T15275] loop9: detected capacity change from 0 to 512 [ 958.687463][T15270] batadv_slave_1: left promiscuous mode [ 958.719957][T15275] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.746610][T15275] EXT4-fs error (device loop9): ext4_lookup:1787: inode #12: comm syz.9.15424: iget: bad i_size value: 2533274857506816 [ 958.785255][ T9235] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.872624][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15437'. [ 958.934778][T15312] FAULT_INJECTION: forcing a failure. [ 958.934778][T15312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.948031][T15312] CPU: 0 UID: 0 PID: 15312 Comm: syz.1.15438 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 958.948052][T15312] Tainted: [W]=WARN [ 958.948056][T15312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 958.948064][T15312] Call Trace: [ 958.948068][T15312] [ 958.948073][T15312] __dump_stack+0x1d/0x30 [ 958.948112][T15312] dump_stack_lvl+0xe8/0x140 [ 958.948124][T15312] dump_stack+0x15/0x1b [ 958.948133][T15312] should_fail_ex+0x265/0x280 [ 958.948151][T15312] should_fail+0xb/0x20 [ 958.948166][T15312] should_fail_usercopy+0x1a/0x20 [ 958.948226][T15312] _copy_to_user+0x20/0xa0 [ 958.948238][T15312] simple_read_from_buffer+0xb5/0x130 [ 958.948257][T15312] proc_fail_nth_read+0x100/0x140 [ 958.948342][T15312] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 958.948359][T15312] vfs_read+0x1a0/0x6f0 [ 958.948381][T15312] ? __rcu_read_unlock+0x4f/0x70 [ 958.948509][T15312] ? __fget_files+0x184/0x1c0 [ 958.948521][T15312] ksys_read+0xda/0x1a0 [ 958.948550][T15312] __x64_sys_read+0x40/0x50 [ 958.948567][T15312] x64_sys_call+0x2d77/0x2fb0 [ 958.948581][T15312] do_syscall_64+0xd2/0x200 [ 958.948592][T15312] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 958.948682][T15312] ? clear_bhb_loop+0x40/0x90 [ 958.948694][T15312] ? clear_bhb_loop+0x40/0x90 [ 958.948706][T15312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.948759][T15312] RIP: 0033:0x7fb9a318d3bc [ 958.948780][T15312] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 958.948799][T15312] RSP: 002b:00007fb9a17ef030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 958.948850][T15312] RAX: ffffffffffffffda RBX: 00007fb9a33b5fa0 RCX: 00007fb9a318d3bc [ 958.948858][T15312] RDX: 000000000000000f RSI: 00007fb9a17ef0a0 RDI: 0000000000000005 [ 958.948865][T15312] RBP: 00007fb9a17ef090 R08: 0000000000000000 R09: 0000000000000000 [ 958.948938][T15312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.948946][T15312] R13: 0000000000000000 R14: 00007fb9a33b5fa0 R15: 00007ffd02e410c8 [ 958.948957][T15312] [ 959.426774][T15332] netlink: 'syz.1.15446': attribute type 1 has an invalid length. [ 959.497513][T15334] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 959.504141][T15334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 959.511670][T15334] vhci_hcd vhci_hcd.0: Device attached [ 959.518253][T15334] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(9) [ 959.524789][T15334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 959.532308][T15334] vhci_hcd vhci_hcd.0: Device attached [ 959.539146][T15334] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(11) [ 959.545751][T15334] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 959.553326][T15334] vhci_hcd vhci_hcd.0: Device attached [ 959.559721][T15334] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 959.568860][T15334] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(15) [ 959.575503][T15334] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 959.582947][T15334] vhci_hcd vhci_hcd.0: Device attached [ 959.589672][T15334] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(17) [ 959.596272][T15334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 959.603962][T15334] vhci_hcd vhci_hcd.0: Device attached [ 959.611149][T15334] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 959.621614][T15334] vhci_hcd vhci_hcd.0: pdev(1) rhport(7) sockfd(21) [ 959.628260][T15334] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 959.635944][T15334] vhci_hcd vhci_hcd.0: Device attached [ 959.642997][T15345] vhci_hcd: connection closed [ 959.643081][T15343] vhci_hcd: connection closed [ 959.643403][T15341] vhci_hcd: connection closed [ 959.647972][T15339] vhci_hcd: connection closed [ 959.658044][T31394] vhci_hcd: stop threads [ 959.659386][T15335] vhci_hcd: connection closed [ 959.662840][T31394] vhci_hcd: release socket [ 959.668281][T15337] vhci_hcd: connection closed [ 959.672060][T31394] vhci_hcd: disconnect device [ 959.679179][T15348] netlink: 24 bytes leftover after parsing attributes in process `syz.5.15448'. [ 959.681485][T31394] vhci_hcd: stop threads [ 959.699272][T31394] vhci_hcd: release socket [ 959.703740][T31394] vhci_hcd: disconnect device [ 959.708632][T31394] vhci_hcd: stop threads [ 959.712899][T31394] vhci_hcd: release socket [ 959.717313][T31394] vhci_hcd: disconnect device [ 959.723041][T31394] vhci_hcd: stop threads [ 959.727310][T31394] vhci_hcd: release socket [ 959.731801][T31394] vhci_hcd: disconnect device [ 959.736572][T31394] vhci_hcd: stop threads [ 959.740995][T31394] vhci_hcd: release socket [ 959.745476][T31394] vhci_hcd: disconnect device [ 959.751376][T31394] vhci_hcd: stop threads [ 959.755631][T31394] vhci_hcd: release socket [ 959.760096][T31394] vhci_hcd: disconnect device [ 959.794409][T15352] sd 0:0:1:0: device reset [ 959.960017][T15375] FAULT_INJECTION: forcing a failure. [ 959.960017][T15375] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.973198][T15375] CPU: 1 UID: 0 PID: 15375 Comm: syz.9.15461 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 959.973232][T15375] Tainted: [W]=WARN [ 959.973240][T15375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 959.973297][T15375] Call Trace: [ 959.973304][T15375] [ 959.973312][T15375] __dump_stack+0x1d/0x30 [ 959.973334][T15375] dump_stack_lvl+0xe8/0x140 [ 959.973355][T15375] dump_stack+0x15/0x1b [ 959.973373][T15375] should_fail_ex+0x265/0x280 [ 959.973480][T15375] should_fail+0xb/0x20 [ 959.973507][T15375] should_fail_usercopy+0x1a/0x20 [ 959.973538][T15375] _copy_from_user+0x1c/0xb0 [ 959.973558][T15375] __sys_bind+0x106/0x2a0 [ 959.973633][T15375] __x64_sys_bind+0x3f/0x50 [ 959.973666][T15375] x64_sys_call+0x2086/0x2fb0 [ 959.973685][T15375] do_syscall_64+0xd2/0x200 [ 959.973703][T15375] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 959.973729][T15375] ? clear_bhb_loop+0x40/0x90 [ 959.973752][T15375] ? clear_bhb_loop+0x40/0x90 [ 959.973772][T15375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.973892][T15375] RIP: 0033:0x7fe43f71e9a9 [ 959.973908][T15375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 959.973926][T15375] RSP: 002b:00007fe43dd87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 959.973944][T15375] RAX: ffffffffffffffda RBX: 00007fe43f945fa0 RCX: 00007fe43f71e9a9 [ 959.973955][T15375] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000004 [ 959.974013][T15375] RBP: 00007fe43dd87090 R08: 0000000000000000 R09: 0000000000000000 [ 959.974026][T15375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 959.974038][T15375] R13: 0000000000000000 R14: 00007fe43f945fa0 R15: 00007ffef7ee9528 [ 959.974058][T15375] [ 960.171318][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 960.171392][ T29] audit: type=1400 audit(960.170:78914): avc: denied { read write } for pid=15381 comm="syz.9.15463" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 960.200786][ T29] audit: type=1400 audit(960.170:78915): avc: denied { open } for pid=15381 comm="syz.9.15463" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 960.275087][ T29] audit: type=1400 audit(960.270:78916): avc: denied { ioctl } for pid=15392 comm="syz.1.15468" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 960.300615][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 960.305981][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15466'. [ 960.318081][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.401704][T15408] netlink: 'syz.9.15470': attribute type 1 has an invalid length. [ 960.419739][ T29] audit: type=1400 audit(960.420:78917): avc: denied { compute_member } for pid=15411 comm="syz.3.15475" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 960.469444][T15416] sd 0:0:1:0: device reset [ 960.485454][ T29] audit: type=1326 audit(960.480:78918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe217c9e9a9 code=0x7ffc0000 [ 960.508830][ T29] audit: type=1326 audit(960.480:78919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe217c9e9a9 code=0x7ffc0000 [ 960.531874][ T29] audit: type=1326 audit(960.480:78920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe217c9e9a9 code=0x7ffc0000 [ 960.555070][ T29] audit: type=1326 audit(960.480:78921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15415 comm="syz.3.15477" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe217c9e9a9 code=0x7ffc0000 [ 960.620641][T15420] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15479'. [ 960.679025][T31423] ================================================================== [ 960.687132][T31423] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 960.693728][T31423] [ 960.696043][T31423] write to 0xffff8881189d4310 of 96 bytes by task 15434 on cpu 0: [ 960.703840][T31423] __bpf_get_stackid+0x761/0x800 [ 960.708778][T31423] bpf_get_stackid+0xee/0x120 [ 960.713449][T31423] bpf_get_stackid_raw_tp+0xf6/0x120 [ 960.718728][T31423] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 960.724179][T31423] bpf_trace_run2+0x107/0x1c0 [ 960.728853][T31423] kfree+0x27b/0x320 [ 960.732743][T31423] vfree+0x28d/0x3a0 [ 960.736632][T31423] bpf_check+0xbe17/0xced0 [ 960.741047][T31423] bpf_prog_load+0xedd/0x1070 [ 960.745724][T31423] __sys_bpf+0x51d/0x790 [ 960.749965][T31423] __x64_sys_bpf+0x41/0x50 [ 960.754379][T31423] x64_sys_call+0x2478/0x2fb0 [ 960.759053][T31423] do_syscall_64+0xd2/0x200 [ 960.763547][T31423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.769432][T31423] [ 960.771744][T31423] read to 0xffff8881189d4348 of 8 bytes by task 31423 on cpu 1: [ 960.779361][T31423] bcmp+0x23/0x90 [ 960.782990][T31423] __bpf_get_stackid+0x371/0x800 [ 960.787924][T31423] bpf_get_stackid+0xee/0x120 [ 960.792593][T31423] bpf_get_stackid_raw_tp+0xf6/0x120 [ 960.797876][T31423] bpf_prog_e6fc920cfeff8120+0x2a/0x32 [ 960.803327][T31423] bpf_trace_run2+0x107/0x1c0 [ 960.808000][T31423] kfree+0x27b/0x320 [ 960.811890][T31423] batadv_mcast_mla_update+0x1649/0x1850 [ 960.817519][T31423] process_scheduled_works+0x4cb/0x9d0 [ 960.822979][T31423] worker_thread+0x582/0x770 [ 960.827568][T31423] kthread+0x486/0x510 [ 960.831629][T31423] ret_from_fork+0xda/0x150 [ 960.836128][T31423] ret_from_fork_asm+0x1a/0x30 [ 960.840888][T31423] [ 960.843199][T31423] value changed: 0xffffffff813eac26 -> 0xffffffff8161ee4d [ 960.850295][T31423] [ 960.852606][T31423] Reported by Kernel Concurrency Sanitizer on: [ 960.858747][T31423] CPU: 1 UID: 0 PID: 31423 Comm: kworker/u8:53 Tainted: G W 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 960.873081][T31423] Tainted: [W]=WARN [ 960.876872][T31423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 960.886923][T31423] Workqueue: bat_events batadv_mcast_mla_update [ 960.893168][T31423] ================================================================== [ 961.978330][ T3417] usb 11-1: enqueue for inactive port 0 [ 961.983929][ T3417] usb 11-1: enqueue for inactive port 0 [ 962.068338][ T3417] vhci_hcd: vhci_device speed not set [ 963.568247][ T2506] usb 7-1: enqueue for inactive port 0 [ 963.573914][ T2506] usb 7-1: enqueue for inactive port 0 [ 963.648240][ T2506] vhci_hcd: vhci_device speed not set [ 965.338558][T14730] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.