last executing test programs: 55.80028978s ago: executing program 32 (id=1482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) statfs(&(0x7f0000000080)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/mem_sleep', 0x80000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) fsetxattr$security_selinux(r4, &(0x7f0000000200), &(0x7f0000000280)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x1) 47.172807141s ago: executing program 33 (id=1616): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f00000000c0)=[{0x7}, {0x3, 0x5, 0x2c, 0x4}, {0xfac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00'}, 0x10) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000402002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710054da2e35593193805250fb94e300f774000095", @ANYRES32=r3, @ANYRES64=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x2) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r4, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 45.973619499s ago: executing program 34 (id=1631): r0 = io_uring_setup(0x28fe, &(0x7f0000000400)={0x0, 0x1db7, 0x1, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, 0x0, 0x1) 44.905469666s ago: executing program 35 (id=1641): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40896) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x3, 0x38) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x16) unlinkat(0xffffffffffffffff, 0x0, 0x200) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000001040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c757466383d312c726f6469722c636865636b3d7374726963742c756e695f786c6174653d312c73686f72746e616d653d77696e39352c696f636861727365743d63703935302c636f6465706167653d3835352c696f636861727365743d63703836322c73686f72746e616d653d6d697865642c646d61736b3d30303030303030303030303030303030303030303130302c757466383d312c756e695f786c6174653d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d6d008000002c6e6e6f6e75008361690400312c73686f72746e616d6577696e39352c726f6469722c757466383d302c696f636861727365743d6575632d6a702c757466383d312c757466383d302c726f6f74636f6e746578743d73746166665f752c009d54d2aaf6d06f18be776bb0ffac7a5551d56f69676c5a4b4e936050f5015a88410ba0676d48b0d307dfb550ec405bfcf6345121e4ef37982c969e2ff5915d729aa2982209cd4f06a1b6fa7ff4d2a7ce636cbde5339573fbd7c5ff9ff4481d415a136dba0a11246055ee1246a02b888f9aa72f3e876b621297de4e141d9700eee76208a6b62fc18d5dce7a798b1920830452b000dfc54ce2735b49179188ca936edb03581e240974fc368283677a20dc700c5f6d3995b3ea4611d52f2dafd6a9e8ad74e3b18058a210222bd6486148f7a294c215544f477f891c", @ANYBLOB="158a81ec0a5b822e1f31931220b326c78bb69e4880e678bff2a8f1b0fe069638c63eeaf14f8064c7a75cc3d4", @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$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") r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) shmdt(0x0) fcntl$lock(r3, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1}) 40.0253447s ago: executing program 36 (id=1499): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) 39.950109031s ago: executing program 5 (id=1672): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 39.928295642s ago: executing program 5 (id=1673): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffff2c4972cdde4248995d81ff2111866d46d826de5a8301c0c1bbbbbb4500001c000000000001907800000000e000000000000000"], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tgkill(0x0, 0x0, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) 39.863974902s ago: executing program 5 (id=1675): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) rename(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 39.766609894s ago: executing program 5 (id=1677): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffff2c4972cdde4248995d81ff2111866d46d826de5a8301c0c1bbbbbb4500001c000000000001907800000000e000000000000000"], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0)) r0 = syz_clone3(&(0x7f0000001880)={0x100200200, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 39.704433045s ago: executing program 7 (id=1679): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={@mcast1={0xff, 0x5}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x5}, 0x2000000, 0x3, 0x1f, 0x100, 0x529f, 0x82d90202}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000d80)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x800000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="5953fcfffffffddbdf256b"], 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @loopback, @multicast2}, &(0x7f0000000400)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @rand_addr, @multicast2}, &(0x7f0000000480)=0xc) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000200)={0x1d, r11}, 0x10) sendmsg$can_bcm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x4, 0x0, {{0x23, 0x4, 0x1, 0x7, 0x8c, 0x65, 0x0, 0x63, 0x4, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x4c, 0x66, 0x3, 0x8, [{@empty, 0x6}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010100, 0x2}, {@private=0xa010101, 0x401}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xbde}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x1}, {@multicast1, 0x4}, {@loopback, 0x2}]}, @rr={0x7, 0x2b, 0xec, [@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @local, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @remote, @multicast2]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r5, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000d40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x19c, r7, 0x430, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x19c}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r15 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r15, 0x4b47, &(0x7f0000000000)={0x82, 0x0, 0x27f}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32, @ANYBLOB="18000000000000000000000000000000181100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000280)={0x5e, 0x10, 0x2, 0x5, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, @remote, @private1]}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r16}, 0x10) sync() 39.703621155s ago: executing program 5 (id=1680): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r8, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r9 = syz_clone(0x0, &(0x7f0000000b80)="b9d0b7d8f3863a412549291b231f1e2c4f8367e93ce16925bf8de344a74e7f17bc845e4917a2ffb7cf118204e6a167ab6e66b406ccdf68cc6483313042870ca641db933750a9eddb832bf8", 0x4b, &(0x7f0000000380), &(0x7f0000001d40), &(0x7f0000001d80)="5edcf18c798f4499f65e4f1f77e7891c2dd1a059d150b19fb1fb2c6ac87f240848abd47fee6e6ae8624172e8db540476fe917b7180355af29a47c5d8c97a5f1865ff5140533d28e1bbd5dc9ff3d0a24a6e287ec3024bb8ff3325929fa74284094a512363b28833556bd0210a13329cebd2eb87f021534dc029e261748b4dbee490c21aa56edbcf7d9c6d3187072487fc5677123c0c5218c063f971a67b344e34363c6de06470ecef8788b29c9938de568edbae5fc405021af11ef142555b110cb8dc0a9a1e309729a1f825bb784110376a6db14788f50a2b26b3dba940043406d1a9ff8faef9e6e8a7b7") sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000000c00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="004fbd190228bd7000fddbdf2514000000080001000000000008001c00", @ANYRES32=0x0, @ANYBLOB="08001d00", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="080001000200000008001c00", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2f991d6da63b9aa3) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4000001}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2007, 0x1fd}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 39.526217618s ago: executing program 5 (id=1683): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000100)=""/135, 0x87) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000340)=0x1, 0x4) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000002c0)={{r0}, 0x6, &(0x7f0000000280)=[0x5, 0x7b58, 0x6, 0xffffffff, 0x7fffffff, 0x9], 0x6, 0x9, 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = socket$key(0xf, 0x3, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209fd090200bde6060640af2ac53133ff4900002dbd7000fbdbdf25"], 0x10}}, 0x44884) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r11, 0x0, 0x4}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x29) sendmsg$kcm(r12, &(0x7f00000002c0)={0x0, 0x14, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 39.525347008s ago: executing program 7 (id=1684): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 39.491472639s ago: executing program 37 (id=1683): r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x0) fgetxattr(r0, &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000100)=""/135, 0x87) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0xb}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000340)=0x1, 0x4) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BTRFS_IOC_SEND(r1, 0x40489426, &(0x7f00000002c0)={{r0}, 0x6, &(0x7f0000000280)=[0x5, 0x7b58, 0x6, 0xffffffff, 0x7fffffff, 0x9], 0x6, 0x9, 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r7 = socket$key(0xf, 0x3, 0x2) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x18) sendmsg$key(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0209fd090200bde6060640af2ac53133ff4900002dbd7000fbdbdf25"], 0x10}}, 0x44884) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r11, 0x0, 0x4}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r12 = socket$kcm(0x10, 0x2, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x29) sendmsg$kcm(r12, &(0x7f00000002c0)={0x0, 0x14, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 39.457148979s ago: executing program 7 (id=1687): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) rename(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 38.522517513s ago: executing program 7 (id=1690): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffff2c4972cdde4248995d81ff2111866d46d826de5a8301c0c1bbbbbb4500001c000000000001907800000000e000000000000000"], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0)) r0 = syz_clone3(&(0x7f0000001880)={0x100200200, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 38.453248734s ago: executing program 7 (id=1692): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r8, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r9 = syz_clone(0x0, &(0x7f0000000b80)="b9d0b7d8f3863a412549291b231f1e2c4f8367e93ce16925bf8de344a74e7f17bc845e4917a2ffb7cf118204e6a167ab6e66b406ccdf68cc6483313042870ca641db933750a9eddb832bf8", 0x4b, &(0x7f0000000380), &(0x7f0000001d40), &(0x7f0000001d80)="5edcf18c798f4499f65e4f1f77e7891c2dd1a059d150b19fb1fb2c6ac87f240848abd47fee6e6ae8624172e8db540476fe917b7180355af29a47c5d8c97a5f1865ff5140533d28e1bbd5dc9ff3d0a24a6e287ec3024bb8ff3325929fa74284094a512363b28833556bd0210a13329cebd2eb87f021534dc029e261748b4dbee490c21aa56edbcf7d9c6d3187072487fc5677123c0c5218c063f971a67b344e34363c6de06470ecef8788b29c9938de568edbae5fc405021af11ef142555b110cb8dc0a9a1e309729a1f825bb784110376a6db14788f50a2b26b3dba940043406d1a9ff8faef9e6e8a7b7") sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000000c00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="004fbd190228bd7000fddbdf2514000000080001000000000008001c00", @ANYRES32=0x0, @ANYBLOB="08001d00", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="080001000200000008001c00", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2f991d6da63b9aa3) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4000001}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2007, 0x1fd}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 37.924573232s ago: executing program 7 (id=1697): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffff2c4972cdde4248995d81ff2111866d46d826de5a8301c0c1bbbbbb4500001c000000000001907800000000e000000000000000"], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_clone3(&(0x7f0000001880)={0x100200200, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x2b) timer_create(0x1, 0x0, &(0x7f0000000640)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000580)) pipe(&(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000700)) symlinkat(0x0, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 37.917640752s ago: executing program 38 (id=1697): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffff2c4972cdde4248995d81ff2111866d46d826de5a8301c0c1bbbbbb4500001c000000000001907800000000e000000000000000"], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_clone3(&(0x7f0000001880)={0x100200200, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x2b) timer_create(0x1, 0x0, &(0x7f0000000640)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, 0x0, 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000580)) pipe(&(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) pipe(&(0x7f0000000700)) symlinkat(0x0, 0xffffffffffffffff, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 37.313667541s ago: executing program 6 (id=1706): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r8, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r9 = syz_clone(0x0, &(0x7f0000000b80)="b9d0b7d8f3863a412549291b231f1e2c4f8367e93ce16925bf8de344a74e7f17bc845e4917a2ffb7cf118204e6a167ab6e66b406ccdf68cc6483313042870ca641db933750a9eddb832bf8", 0x4b, &(0x7f0000000380), &(0x7f0000001d40), &(0x7f0000001d80)="5edcf18c798f4499f65e4f1f77e7891c2dd1a059d150b19fb1fb2c6ac87f240848abd47fee6e6ae8624172e8db540476fe917b7180355af29a47c5d8c97a5f1865ff5140533d28e1bbd5dc9ff3d0a24a6e287ec3024bb8ff3325929fa74284094a512363b28833556bd0210a13329cebd2eb87f021534dc029e261748b4dbee490c21aa56edbcf7d9c6d3187072487fc5677123c0c5218c063f971a67b344e34363c6de06470ecef8788b29c9938de568edbae5fc405021af11ef142555b110cb8dc0a9a1e309729a1f825bb784110376a6db14788f50a2b26b3dba940043406d1a9ff8faef9e6e8a7b7") sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x48000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000000c00)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="004fbd190228bd7000fddbdf2514000000080001000000000008001c00", @ANYRES32=0x0, @ANYBLOB="08001d00", @ANYRES32=r1, @ANYBLOB="08000300", @ANYRES32=r8, @ANYBLOB="080001000200000008001c00", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2f991d6da63b9aa3) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)}, 0x8000) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x4000001}) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2007, 0x1fd}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 37.169280083s ago: executing program 6 (id=1707): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async, rerun: 64) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) (rerun: 64) close(r0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1600000000000000040000000500000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000009e2b1b88be5b8f56366ceb1912514f54b0c0486feda7140a4ea978486c2e61612f9e159a8a2e9cac974fab957bbee804449c7a63c737a2c8f335e089d37ba66ee51583ee4a3d00"/113], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) (async, rerun: 32) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x140c, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x9}, 0x4e5a, 0x10000, 0x4ca3, 0x2, 0x8, 0x9, 0x20b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000040000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000009c471ae84deb055000000000000094000000000000000000"], 0x48) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) (async, rerun: 64) r2 = syz_clone(0x200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) (async, rerun: 64) kcmp(r2, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) (async, rerun: 64) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0d00000000000000000000040000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000040000000200"/27], 0x50) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020900004de88c0c0284bd96f09c00000000000000c1cc8e3f7f591631c5f7e829c48fcada033634ddf574e396bfdce0c8ec8822f7988586c292fc476a375f734d3a19fc8ddf5356c93bf6ab645de7fbd3d065e5383054d13fde7e1c1568dd0012886faa0745922af7b0975c970844dac306e4206d714ba6bf380415735aa55f0c4ef1b6c039d6a10ef6f6c63fe298d3d7a3fcaca907eae78bf3aecfa7b2ea0d62061d3c466b7e0a50fadddb2800000000"], 0x10}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e3ff00000000000000fff50000000b0000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x21, &(0x7f00000007c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) 37.112692755s ago: executing program 6 (id=1708): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x8) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x6ca000, 0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x80000001, 0x6, {{0x9, 0x4, 0x1, 0x24, 0x24, 0x64, 0x0, 0x7, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0xf, 0xcc, [@broadcast, @loopback, @private=0xa010101]}]}}}}}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500000000000000f79d000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fed6000085000000060000008520000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000646c6c2500f80000002020207b1a10ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000a41e3000ffffffffbf91000000000000b7021eea010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xb2, &(0x7f0000000640)=""/178, 0x41100, 0x46, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x25f8a, r2, 0x3, &(0x7f0000000780)=[r2, r5, r2, r2, r2, r6], &(0x7f00000007c0)=[{0x3, 0x5, 0xc, 0x2}, {0x2, 0x2, 0xe, 0xb}, {0x5, 0x2, 0x10, 0x2}], 0x10, 0x5}, 0x94) r7 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r7, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x365be7e64cea61f4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0xfffffff9, 0x10001}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x401, &(0x7f0000000340)=0x0) io_getevents(r8, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) 36.960712387s ago: executing program 6 (id=1709): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffff2c4972cdde4248995d81ff2111866d46d826de5a8301c0c1bbbbbb4500001c000000000001907800000000e000000000000000"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_clone3(&(0x7f0000001880)={0x100200200, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 36.898285458s ago: executing program 6 (id=1710): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 36.675600391s ago: executing program 6 (id=1711): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={0x0, 0x32, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe880000000000000000000000000001000000"], 0x88}}, 0x20000000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 36.675009251s ago: executing program 39 (id=1711): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000140)={0x0, 0x32, 0x7fff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe880000000000000000000000000001000000"], 0x88}}, 0x20000000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x28, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 36.570100003s ago: executing program 9 (id=1670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200"], 0xd4}}, 0x0) 36.540449913s ago: executing program 9 (id=1713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x2, 0x34f}, &(0x7f00000000c0), &(0x7f0000000080)) 36.502718293s ago: executing program 9 (id=1714): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00'}, 0x10) syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x1b7}, &(0x7f0000000100), &(0x7f0000000140)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f00000001c0)={0x3, 0x1000, 0x6}) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$RNDGETENTCNT(0xffffffffffffffff, 0x80045200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'bond_slave_0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x7}}) io_uring_setup(0x664c, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) close(r0) 36.332794006s ago: executing program 9 (id=1717): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffff2c4972cdde4248995d81ff2111866d46d826de5a8301c0c1bbbbbb4500001c000000000001907800000000e000000000000000"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = syz_clone3(&(0x7f0000001880)={0x100200200, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x2b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) 36.258639398s ago: executing program 9 (id=1719): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000440)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab", 0x42}, {&(0x7f0000000080)='G%\t\x00\x00\x00\x00\x00\x00\x00', 0xa}], 0x2}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r6, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x300, 0x70bd27, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) r7 = semget(0x0, 0x0, 0x2) semop(r7, &(0x7f0000000000)=[{0x1, 0xfff9, 0x800}, {0x2, 0x503b, 0x1000}], 0x2) 34.276351168s ago: executing program 9 (id=1732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0), 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) 34.276033108s ago: executing program 40 (id=1732): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0), 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)) 11.692442352s ago: executing program 1 (id=2287): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESHEX], 0x2, 0x699, &(0x7f0000000140)="$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") ioctl$USBDEVFS_WAIT_FOR_RESUME(0xffffffffffffffff, 0x5523) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 11.637131623s ago: executing program 1 (id=2288): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$evdev(&(0x7f0000000440), 0x3, 0x109401) r1 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e24, @broadcast}, @in6={0xa, 0x4e20, 0xffffcf62, @dev={0xfe, 0x80, '\x00', 0x43}, 0x10000}], 0x3c) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40880) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x2, 0x0, 0x8, 0x2, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) 11.608180433s ago: executing program 1 (id=2289): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r0, 0x339, 0x0) preadv(r0, &(0x7f00000008c0), 0x0, 0xffffff80, 0x7) r1 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) timer_settime(r4, 0x1, &(0x7f0000000180)={{}, {r5, r6+60000000}}, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) r7 = mq_open(&(0x7f0000000240)='GPL\x00', 0x2, 0x0, &(0x7f00000002c0)={0x3, 0x9, 0x2, 0x4}) mq_notify(r7, &(0x7f0000000300)={0x0, 0x13, 0x2, @tid=r3}) r8 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r8, &(0x7f00000000c0)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) cachestat(r8, &(0x7f0000000000)={0x7ff, 0x1000}, &(0x7f0000000080), 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050200000000fcdbdf2508000000180001801400020073797a5f74756e0000000000000000000800028004"], 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x0) 11.558376524s ago: executing program 1 (id=2291): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710433000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="50ca3c9165a71373302067f3000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf250100000008000100ffffffff2c000480050003000100000005000300020000000500030005000000050003000500000005000300010000000800020002000000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000068000100000000000000000002000000000000000c000880050005000000000008000500", @ANYRES32, @ANYBLOB="06000700024404"], 0x34}}, 0x4000004) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@usrjquota}, {@errors_remount}, {@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") r4 = socket$inet6(0xa, 0x3, 0x8) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00'], 0x28}}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x26}], 0x1, 0x10060, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x7e, 0xef, 0xa000000, 0x1, @mcast2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x1, 0x7, 0x2, 0xdd2b}}) setsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000400)={@remote, r5}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x4}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) fdatasync(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfb, 0x82, 0x80000000000, 0xa0001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff, 0x4, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000203010200000000000000000500e40f08ee000004000003"], 0x1c}, 0x1, 0x0, 0x0, 0x200480c0}, 0x4000044) r9 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r10) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r11 = syz_open_procfs(r9, &(0x7f0000000000)='map_files\x00') getdents64(r11, 0x0, 0x0) 11.357517847s ago: executing program 1 (id=2295): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) io_setup(0x2, &(0x7f0000002400)) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x29, 0x8, 0x10, 0x0, 0x1, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x40, 0xffff9978, 0x6}}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000020000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) sendmsg$kcm(r3, &(0x7f0000000240)={&(0x7f0000000280)=@generic={0x27, "e0fa21cc3f136dcdc8645860182bd90a2990eded3018acdd84b87cab5de7a5768d2c07efed16fecb0fe862e7c2e2d438b041e0266baf0b3bc033e4cb73f1ef2c9a87c990ef825b981acde902390351373056272a1b66f1538a1f6ec585a1c787e0682eb60c2f7c681dd3c825aba0a7cb3dd7d912776ed05e27b01a1a78a7"}, 0x80, 0x0}, 0x4000080) (async) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x7fe2, 0x1}, 0x1d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) (async) clock_getres(0x7, 0x0) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x0, 0x4, 0xf0, 0xfffffff7}]}, 0x10) (async) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010028bd7000fedbdf250200000008000100", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x8000) (async) eventfd2(0xcb66, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) (async) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000300)={'bridge_slave_0\x00'}) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r12}, 0x18) 11.332427608s ago: executing program 1 (id=2296): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 11.319628558s ago: executing program 41 (id=2296): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@fwd={0x2, 0x0, 0x0, 0x12}, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x400) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) 1.269533701s ago: executing program 8 (id=2579): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x8) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x6ca000, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402002, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500000000000000f79d000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fed6000085000000060000008520000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000646c6c2500f80000002020207b1a10ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000a41e3000ffffffffbf91000000000000b7021eea010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xb2, &(0x7f0000000640)=""/178, 0x41100, 0x46, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x25f8a, r1, 0x2, &(0x7f0000000780)=[r1, r3, r1, r1, r1, r4], &(0x7f00000007c0)=[{0x2, 0x2, 0xe, 0xb}, {0x5, 0x2, 0x10, 0x2}], 0x10, 0x5}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x365be7e64cea61f4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff9, 0x10001}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x401, &(0x7f0000000340)=0x0) io_getevents(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a8", 0x2d}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a00", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) 1.124956173s ago: executing program 8 (id=2583): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2, 0x0, 0x8}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.105964443s ago: executing program 8 (id=2584): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x1000, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0xffffffffffff7fff}, 0x18) syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="60000000027b5aa10601020000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a31000000001800078005000300210000000c00018008000140ac1e010105000500020000000500010006"], 0x60}, 0x1, 0x0, 0x0, 0x4040041}, 0x44000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) r6 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r6, 0x2285, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r7 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r7, 0x2007ffc) sendfile(r7, r7, 0x0, 0x800000009) 1.024454335s ago: executing program 8 (id=2585): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffff2c4972cdde4248995d81ff2111866d46d826de5a8301c0c1bbbbbb4500001c000000000001907800000000e000000000000000"], 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000005c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) tgkill(0x0, 0x0, 0x2b) timer_create(0x1, 0x0, &(0x7f0000000640)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0xff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 997.387905ms ago: executing program 0 (id=2587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x3, 0x0, {0xa, 0x0, 0x6, @rand_addr=' \x01\x00', 0x200000}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 955.178746ms ago: executing program 0 (id=2589): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000180)='sys_enter\x00'}, 0x18) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x8) r2 = openat(r1, &(0x7f0000000040)='./file0\x00', 0x6ca000, 0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402002, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x700, 0x40, 0x80000001, 0x6, {{0x9, 0x4, 0x1, 0x24, 0x24, 0x64, 0x0, 0x7, 0x29, 0x0, @broadcast, @multicast1, {[@rr={0x7, 0xf, 0xcc, [@broadcast, @loopback, @private=0xa010101]}]}}}}}) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500000000000000f79d000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fed6000085000000060000008520000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000646c6c2500f80000002020207b1a10ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000a41e3000ffffffffbf91000000000000b7021eea010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xb2, &(0x7f0000000640)=""/178, 0x41100, 0x46, '\x00', r4, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x25f8a, r2, 0x3, &(0x7f0000000780)=[r2, r5, r2, r2, r2, r6], &(0x7f00000007c0)=[{0x3, 0x5, 0xc, 0x2}, {0x2, 0x2, 0xe, 0xb}, {0x5, 0x2, 0x10, 0x2}], 0x10, 0x5}, 0x94) r7 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r7, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x365be7e64cea61f4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, r7, {0xfffffff9, 0x10001}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x401, &(0x7f0000000340)=0x0) io_getevents(r8, 0x0, 0x0, 0x0, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a8001600", 0x30}], 0x1}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r10}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) 763.128119ms ago: executing program 3 (id=2594): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x8) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x6ca000, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402002, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500000000000000f79d000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fed6000085000000060000008520000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000646c6c2500f80000002020207b1a10ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000a41e3000ffffffffbf91000000000000b7021eea010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xb2, &(0x7f0000000640)=""/178, 0x41100, 0x46, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x25f8a, r1, 0x2, &(0x7f0000000780)=[r1, r3, r1, r1, r1, r4], &(0x7f00000007c0)=[{0x2, 0x2, 0xe, 0xb}, {0x5, 0x2, 0x10, 0x2}], 0x10, 0x5}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x365be7e64cea61f4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff9, 0x10001}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x401, &(0x7f0000000340)=0x0) io_getevents(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a8", 0x2d}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a00", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) 760.739129ms ago: executing program 2 (id=2595): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007112bd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="e37400000000004e070000006c3dad000000000033d20b28d7c500cfff496de71df186e136f4d81234445e76f51bd4e9ffb5ff972162208e1d38b832354f8db85d11811b4f9a67ae0ad23c6f49fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000181200000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) read(r3, 0x0, 0x0) r6 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000200)=@req={0x7f, 0x0, 0x5, 0x10}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') getdents64(r7, 0x0, 0xffffffff00000018) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r2, 0x50) r8 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r9, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) futimesat(r9, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{0x77359400}}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000002e000c05f8bd7000000000000a0000007770616e300000007839ebeb1f9f1969c88cceaa156903047d1f3ea7b2cb36fb9ca2575b4c2ef6aa87f43b1b43b57aaff47545eb50af4dd43deef8ff1c39cd2e75a405d69d35945336e14d5e03b807d72320743331f92defcbe11e3a0a71271a1902067a57abe3d9b48d7ea7024d4adabf1c4236807157f303265a786f0a4ea94a4a354f75c1a57bc7a61da7dd72eeeb444f5f273036ac1cf9266ebdf5f3a0cd5393ae38d6fa85ae94eab71b79712b3ace4bb9de8a7154bb55e249fa747a59eb0ba79f49cff7c56106c31c6078ab2a1d3f6d413012ae9e8233d77af5319ca824d05353b724aee69402b60adf3fde7bcfe064d97737ddaca30ff846ccd38b27013e717127f28254985415f5484174a2ad55c7c9e7dbc1ccc98ae69e903648f5bddd3f37b6b504dac8ecac39001f2ec242e432a60eb3b92dd07e1b1c69a17c6d0263b2f33bd3c3a885c3442c5c18757f87db175127922c72de3b171e17455e2a41067c45462a09ed8a2e8cbc71aa9b99fe8f77b87a0b5014d9e6aa1bede0428a15fb042fcd9d74a84367de8ed7120dc0a7591ad075a23c64ddd225f177dbb28da7df765ff4a66e69edf78b29af27649192e9cb872998a1937702a778e5606e66dd4aa63e388ec3cc04ffe589b1d654490c08a049c50fcd73961843aadb617b08bcd0e9e73ee344f52744418d333103c3a8454781e086342bd08e7ef940425fcee14683927fd43757e3d280ee31a26c4a7991c33cb22652bfd52f24e1951e1e7440d6eab00ac9a6406d9253f6af8aaa55c7e3eae91cc466a542690398"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}}, 0x0) 759.660489ms ago: executing program 0 (id=2596): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x1000, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0xffffffffffff7fff}, 0x18) syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="60000000027b5aa10601020000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a31000000001800078005000300210000000c00018008000140ac1e010105000500020000000500010006"], 0x60}, 0x1, 0x0, 0x0, 0x4040041}, 0x44000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="0580040000000000500012800b00010067656e657665000040000280050008000000000005000d000100000005000d000200000008000b4000001e82060005004e210000140007"], 0x70}}, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$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") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) 679.00008ms ago: executing program 2 (id=2598): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x400000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x9, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x7fff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff, 0x2}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) 637.797891ms ago: executing program 0 (id=2599): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2e, 0x0, 0xa, 0x3}, 0x28) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(0x0, 0x100000000000003, 0xafb903) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) r2 = socket$inet6(0xa, 0x80000, 0x8ffff) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r3 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$eJzs3b9rO2UYAPDn0jQJOiSCkwge6OD05dvv6pIiLRQzKRnUQYttQZogtFDwB8ZOri6Ori6C4OY/4eJ/ILgKbhYsnNzlrklqGpPatP74fJa+fe953nve69uWDvf03eeHxwdpHJ1/8lO0WknUutGNiyQ6UYvKZzGj+0UAAP9mF1kWv2Zjq+QlEdFaX1kAwBqt/Pv/u7WXBACs2RtvvvXadq+383qatmJ3+PlZP//LPv84vr59FO/HIA7jcbTjMiK7Mh7vZlk2qqe5Trw0HJ3188zhOz+U62//ElHkb0U7OsXUbP5eb2crHZvKH+V1PFXev5vnP4l2PDvn/nu9nSdz8qPfiJdfnKr/UbTjx/figxjEQVHEOD9qEZ9upemr2Ze/ffx2Xl6en4zO+s0ibiLbuOcvDQAAAAAAAAAAAAAAAAAAAAAA/2GPyt45zSj69+RTZf+djcv8k81IK53Z/jzj/KRa6Fp/oFEWX1X9eR6naZqVgZP8ejxXj/rD7BoAAAAAAAAAAAAAAAAAAAD+WU4//Oh4fzA4PLmTQdUNoHqt/7brdKdmXojFwc3JvWrlcMHKsVHFJBELy8g3sXTNv5dtD2736J65qeZvvl16na//eu/lYHOJmL85qE7X8X4y/xk2o5ppVYfk++mYRix5r8ZNl7KVjl9j7qX2yntvPF0MRgtiIllU2Cs/j59cOZNc30WjeKpz0zfLwVT6bExr+fOcf6f8SXLVrSO52x9CAAAAAAAAAAAAAAAAAABAYfLS75yL5wtTa1lzbWUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwL2a/P//FQajMnmJ4EacnD7wFgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgf+CMAAP//SfdjDw==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x105042, 0x39) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) pwrite64(r4, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40603d07, &(0x7f0000000040)) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000000)=0xb0, 0x4) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001400)=""/40) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) fremovexattr(r3, &(0x7f00000012c0)=ANY=[@ANYBLOB='trus|6\x00\x00\x00\x00\x00\x00/input/e']) recvmmsg(r2, &(0x7f0000000800), 0x62, 0x12141, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f00001be000/0x1000)=nil, 0x1000, 0x1, 0x10010, r8, 0xffffe000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f0000000100)={@mcast1}, &(0x7f0000001280)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 613.197541ms ago: executing program 2 (id=2600): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0x7ffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x2, @loopback={0xfec0ffff00000000}}], 0x1c) sendto$inet6(r6, &(0x7f0000000000)='\a', 0x1, 0x40008d0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x25dfdbff, {}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x2f, 0x0, 0x4, 0x0, 0x9, 0x30, 0x8}}}}}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}]}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 512.797933ms ago: executing program 2 (id=2603): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x3, 0x0, {0xa, 0x0, 0x6, @rand_addr=' \x01\x00', 0x200000}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 487.920343ms ago: executing program 2 (id=2604): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, 0x0, 0x0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40896) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$inet6(0xa, 0x3, 0x38) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x16) open(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f00000022c0)='./bus\x00', 0x810094, &(0x7f0000001040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d302c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c757466383d312c726f6469722c636865636b3d7374726963742c756e695f786c6174653d312c73686f72746e616d653d77696e39352c696f636861727365743d63703935302c636f6465706167653d3835352c696f636861727365743d63703836322c73686f72746e616d653d6d697865642c646d61736b3d30303030303030303030303030303030303030303130302c757466383d312c756e695f786c6174653d302c696f636861727365743d69736f383835392d362c73686f72746e616d653d6d008000002c6e6e6f6e75008361690400312c73686f72746e616d6577696e39352c726f6469722c757466383d302c696f636861727365743d6575632d6a702c757466383d312c757466383d302c726f6f74636f6e746578743d73746166665f752c009d54d2aaf6d06f18be776bb0ffac7a5551d56f69676c5a4b4e936050f5015a88410ba0676d48b0d307dfb550ec405bfcf6345121e4ef37982c969e2ff5915d729aa2982209cd4f06a1b6fa7ff4d2a7ce636cbde5339573fbd7c5ff9ff4481d415a136dba0a11246055ee1246a02b888f9aa72f3e876b621297de4e141d9700eee76208a6b62fc18d5dce7a798b1920830452b000dfc54ce2735b49179188ca936edb03581e240974fc368283677a20dc700c5f6d3995b3ea4611d52f2dafd6a9e8ad74e3b18058a210222bd6486148f7a294c215544f477f891c", @ANYBLOB="158a81ec0a5b822e1f31931220b326c78bb69e4880e678bff2a8f1b0fe069638c63eeaf14f8064c7a75cc3d4", @ANYRES32=0x0, @ANYRESHEX], 0x6, 0x2de, &(0x7f0000000480)="$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") timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f00000031c0)={0x1}) 450.033004ms ago: executing program 3 (id=2605): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xd, 'team0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) write(r3, &(0x7f0000004200)='t', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000000c0), &(0x7f0000000180)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 334.655535ms ago: executing program 0 (id=2608): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') lseek(r0, 0x339, 0x0) preadv(r0, &(0x7f00000008c0), 0x0, 0xffffff80, 0x7) r1 = socket(0x10, 0x80002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000003c0)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) r3 = gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"/1423], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) timer_settime(r4, 0x1, &(0x7f0000000180)={{}, {r5, r6+60000000}}, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e007f0a7eed1168379a3601ffc4910700004f78d4"], 0x1c}}, 0x0) r7 = mq_open(&(0x7f0000000240)='GPL\x00', 0x2, 0x0, &(0x7f00000002c0)={0x3, 0x9, 0x2, 0x4}) mq_notify(r7, &(0x7f0000000300)={0x0, 0x13, 0x2, @tid=r3}) r8 = socket$nl_generic(0x10, 0x3, 0x10) fstat(r8, &(0x7f00000000c0)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) cachestat(r8, &(0x7f0000000000)={0x7ff, 0x1000}, &(0x7f0000000080), 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050200000000fcdbdf2508000000180001801400020073797a5f74756e0000000000000000000800028004"], 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x0) 293.687026ms ago: executing program 4 (id=2609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007112bd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="e37400000000004e070000006c3dad000000000033d20b28d7c500cfff496de71df186e136f4d81234445e76f51bd4e9ffb5ff972162208e1d38b832354f8db85d11811b4f9a67ae0ad23c6f49fb", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000181200000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffce5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) read(r3, 0x0, 0x0) r6 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14, 0x800) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000200)=@req={0x7f, 0x0, 0x5, 0x10}, 0x10) r7 = syz_open_procfs(0x0, &(0x7f00000005c0)='map_files\x00') getdents64(r7, 0x0, 0xffffffff00000018) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) listen(r2, 0x50) r8 = socket$inet6(0xa, 0x800, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r9, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) futimesat(r9, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={{0x77359400}}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000002e000c05f8bd7000000000000a0000007770616e300000007839ebeb1f9f1969c88cceaa156903047d1f3ea7b2cb36fb9ca2575b4c2ef6aa87f43b1b43b57aaff47545eb50af4dd43deef8ff1c39cd2e75a405d69d35945336e14d5e03b807d72320743331f92defcbe11e3a0a71271a1902067a57abe3d9b48d7ea7024d4adabf1c4236807157f303265a786f0a4ea94a4a354f75c1a57bc7a61da7dd72eeeb444f5f273036ac1cf9266ebdf5f3a0cd5393ae38d6fa85ae94eab71b79712b3ace4bb9de8a7154bb55e249fa747a59eb0ba79f49cff7c56106c31c6078ab2a1d3f6d413012ae9e8233d77af5319ca824d05353b724aee69402b60adf3fde7bcfe064d97737ddaca30ff846ccd38b27013e717127f28254985415f5484174a2ad55c7c9e7dbc1ccc98ae69e903648f5bddd3f37b6b504dac8ecac39001f2ec242e432a60eb3b92dd07e1b1c69a17c6d0263b2f33bd3c3a885c3442c5c18757f87db175127922c72de3b171e17455e2a41067c45462a09ed8a2e8cbc71aa9b99fe8f77b87a0b5014d9e6aa1bede0428a15fb042fcd9d74a84367de8ed7120dc0a7591ad075a23c64ddd225f177dbb28da7df765ff4a66e69edf78b29af27649192e9cb872998a1937702a778e5606e66dd4aa63e388ec3cc04ffe589b1d654490c08a049c50fcd73961843aadb617b08bcd0e9e73ee344f52744418d333103c3a8454781e086342bd08e7ef940425fcee14683927fd43757e3d280ee31a26c4a7991c33cb22652bfd52f24e1951e1e7440d6eab00ac9a6406d9253f6af8aaa55c7e3eae91cc466a542690398"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x28}}, 0x0) 255.965917ms ago: executing program 4 (id=2610): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x400000000}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xfffffffc, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3ff, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x9, 0xffffffff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x5, 0x0, 0x40, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x7fff, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff, 0x2}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) 232.455097ms ago: executing program 4 (id=2611): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000040)={@mcast1={0xff, 0x5}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x5}, 0x2000000, 0x3, 0x1f, 0x100, 0x529f, 0x82d90202}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000d80)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x822a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10, 0x0, 0x800000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="5953fcfffffffddbdf256b"], 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r3) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @loopback, @multicast2}, &(0x7f0000000400)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @rand_addr, @multicast2}, &(0x7f0000000480)=0xc) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000200)={0x1d, r11}, 0x10) sendmsg$can_bcm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r11, @ANYRES64=r10, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000580)={'gre0\x00', &(0x7f00000004c0)={'erspan0\x00', 0x0, 0x10, 0x7800, 0x4, 0x0, {{0x23, 0x4, 0x1, 0x7, 0x8c, 0x65, 0x0, 0x63, 0x4, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x4c, 0x66, 0x3, 0x8, [{@empty, 0x6}, {@private=0xa010102, 0x3}, {@rand_addr=0x64010100, 0x2}, {@private=0xa010101, 0x401}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xbde}, {@empty, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x1}, {@multicast1, 0x4}, {@loopback, 0x2}]}, @rr={0x7, 0x2b, 0xec, [@dev={0xac, 0x14, 0x14, 0x3b}, @multicast1, @local, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @remote, @multicast2]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r5, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6e, &(0x7f0000000840)=[{}, {}], 0x10, 0x10, &(0x7f0000000880), &(0x7f00000008c0), 0x8, 0x1b, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r6, &(0x7f0000000d40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000d00)={&(0x7f0000000b40)={0x19c, r7, 0x430, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x19c}}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRESHEX=r0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32, @ANYBLOB="18000000000000000000000000000000181100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000280)={0x5e, 0x10, 0x2, 0x5, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, @remote, @private1]}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r15}, 0x10) sync() 227.282607ms ago: executing program 0 (id=2612): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20008844) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b0000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x68f}, 0x18) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) socket$netlink(0x10, 0x3, 0xe) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f00000005c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0xd, 'team0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa108000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) write(r3, &(0x7f0000004200)='t', 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x4, 0x8, 0xb, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000000c0), &(0x7f0000000180)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0xf, 0xc340) 195.575267ms ago: executing program 3 (id=2613): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x8) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x6ca000, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402002, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500000000000000f79d000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fed6000085000000060000008520000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000646c6c2500f80000002020207b1a10ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000a41e3000ffffffffbf91000000000000b7021eea010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xb2, &(0x7f0000000640)=""/178, 0x41100, 0x46, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x25f8a, r1, 0x2, &(0x7f0000000780)=[r1, r3, r1, r1, r1, r4], &(0x7f00000007c0)=[{0x2, 0x2, 0xe, 0xb}, {0x5, 0x2, 0x10, 0x2}], 0x10, 0x5}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x365be7e64cea61f4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff9, 0x10001}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x401, &(0x7f0000000340)=0x0) io_getevents(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a8", 0x2d}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) 131.752788ms ago: executing program 8 (id=2614): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x100, 0x8) r1 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x6ca000, 0x4) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x402002, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000700), 0x201, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0x2f, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500000000000000f79d000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fed6000085000000060000008520000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000018010000646c6c2500f80000002020207b1a10ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100000085000000060000009500000000000000a41e3000ffffffffbf91000000000000b7021eea010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0xb2, &(0x7f0000000640)=""/178, 0x41100, 0x46, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x25f8a, r1, 0x2, &(0x7f0000000780)=[r1, r3, r1, r1, r1, r4], &(0x7f00000007c0)=[{0x2, 0x2, 0xe, 0xb}, {0x5, 0x2, 0x10, 0x2}], 0x10, 0x5}, 0x94) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x365be7e64cea61f4) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffff9, 0x10001}}, './file0\x00'}) socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x401, &(0x7f0000000340)=0x0) io_getevents(r5, 0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a8", 0x2d}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0x33fe0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000063019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a0008", @ANYRES32, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) 126.401279ms ago: executing program 4 (id=2615): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000d10ffc)=0x7ffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x2, @loopback={0xfec0ffff00000000}}], 0x1c) sendto$inet6(r6, &(0x7f0000000000)='\a', 0x1, 0x40008d0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x3b}}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x25dfdbff, {}, [@RTA_OIF={0x8, 0x4, r8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x2, {0x2f, 0x0, 0x4, 0x0, 0x9, 0x30, 0x8}}}}}]}, 0x44}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}]}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 51.89824ms ago: executing program 3 (id=2617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$cgroup_netprio_ifpriomap(r3, &(0x7f00000002c0)={'pimreg1', 0x32, 0x34}, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) 36.81828ms ago: executing program 3 (id=2618): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8ae}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r0, 0x0, 0x4}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x400, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0x11a}, 0x20) 13.97521ms ago: executing program 8 (id=2619): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x2e, 0x0, 0xa, 0x3}, 0x28) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(0x0, 0x100000000000003, 0xafb903) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) r2 = socket$inet6(0xa, 0x80000, 0x8ffff) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) r3 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x105042, 0x39) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) pwrite64(r4, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x141, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0x40603d07, &(0x7f0000000040)) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000000)=0xb0, 0x4) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000001400)=""/40) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) fremovexattr(r3, &(0x7f00000012c0)=ANY=[@ANYBLOB='trus|6\x00\x00\x00\x00\x00\x00/input/e']) recvmmsg(r2, &(0x7f0000000800), 0x62, 0x12141, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000000240)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f00001be000/0x1000)=nil, 0x1000, 0x1, 0x10010, r8, 0xffffe000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f0000000100)={@mcast1}, &(0x7f0000001280)=0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) 0s ago: executing program 4 (id=2620): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x7}]}) write$bt_hci(r0, 0x0, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mkdir(&(0x7f0000000200)='./file0\x00', 0x50) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r1}, 0x18) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000402002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710054da2e35593193", @ANYRES64], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) kernel console output (not intermixed with test programs): 94][ T8065] veth1_macvtap: entered promiscuous mode [ 104.850017][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.858934][ T8065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.875621][ T8065] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.884416][ T8065] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.893230][ T8065] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.901963][ T8065] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.929215][ T8122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.951017][ T8122] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.960211][ T12] bridge_slave_1: left allmulticast mode [ 104.965881][ T12] bridge_slave_1: left promiscuous mode [ 104.971687][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.980940][ T12] bridge_slave_0: left allmulticast mode [ 104.986606][ T12] bridge_slave_0: left promiscuous mode [ 104.992327][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.011610][ T8243] loop1: detected capacity change from 0 to 256 [ 105.101733][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.111294][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.120534][ T12] bond0 (unregistering): Released all slaves [ 105.130109][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.137155][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.148862][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.155954][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.172902][ T12] hsr_slave_0: left promiscuous mode [ 105.178474][ T12] hsr_slave_1: left promiscuous mode [ 105.204076][ T12] team0 (unregistering): Port device team_slave_1 removed [ 105.213838][ T12] team0 (unregistering): Port device team_slave_0 removed [ 105.306745][ T8122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.406592][ T8191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.420493][ T8191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.429366][ T8191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.441440][ T8191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.473262][ T8122] veth0_vlan: entered promiscuous mode [ 105.483610][ T8122] veth1_vlan: entered promiscuous mode [ 105.497778][ T8122] veth0_macvtap: entered promiscuous mode [ 105.512802][ T8122] veth1_macvtap: entered promiscuous mode [ 105.518836][ T8269] loop1: detected capacity change from 0 to 512 [ 105.543074][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.549439][ T8272] netlink: 'syz.8.1725': attribute type 1 has an invalid length. [ 105.553811][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.566082][ T8269] ext4: Unknown parameter 'fsmagic' [ 105.568468][ T8122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.580674][ T3546] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.587733][ T3546] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.602314][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.609474][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.621001][ T8122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.643063][ T8122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.651872][ T8122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.660714][ T8122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.669421][ T8122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.770563][ T8283] loop1: detected capacity change from 0 to 256 [ 105.774109][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1729'. [ 105.807440][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.811941][ T8289] loop8: detected capacity change from 0 to 128 [ 105.822404][ T8289] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 105.889685][ T8301] FAULT_INJECTION: forcing a failure. [ 105.889685][ T8301] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 105.903017][ T8301] CPU: 0 UID: 0 PID: 8301 Comm: syz.8.1730 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 105.903043][ T8301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.903056][ T8301] Call Trace: [ 105.903063][ T8301] [ 105.903071][ T8301] __dump_stack+0x1d/0x30 [ 105.903094][ T8301] dump_stack_lvl+0xe8/0x140 [ 105.903142][ T8301] dump_stack+0x15/0x1b [ 105.903156][ T8301] should_fail_ex+0x265/0x280 [ 105.903310][ T8301] should_fail_alloc_page+0xf2/0x100 [ 105.903337][ T8301] alloc_pages_bulk_noprof+0xef/0x540 [ 105.903367][ T8301] copy_splice_read+0xf3/0x5f0 [ 105.903423][ T8301] ? _parse_integer_limit+0x170/0x190 [ 105.903452][ T8301] ? __pfx_copy_splice_read+0x10/0x10 [ 105.903475][ T8301] splice_file_to_pipe+0x23e/0x3a0 [ 105.903547][ T8301] do_splice+0xc4d/0x10b0 [ 105.903576][ T8301] ? proc_fail_nth_write+0x12d/0x160 [ 105.903651][ T8301] ? __rcu_read_unlock+0x4f/0x70 [ 105.903670][ T8301] ? __fget_files+0x184/0x1c0 [ 105.903688][ T8301] __se_sys_splice+0x26c/0x3a0 [ 105.903720][ T8301] __x64_sys_splice+0x78/0x90 [ 105.903816][ T8301] x64_sys_call+0xb0a/0x2fb0 [ 105.903838][ T8301] do_syscall_64+0xd2/0x200 [ 105.903922][ T8301] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 105.904071][ T8301] ? clear_bhb_loop+0x40/0x90 [ 105.904134][ T8301] ? clear_bhb_loop+0x40/0x90 [ 105.904151][ T8301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.904195][ T8301] RIP: 0033:0x7fdb8794e929 [ 105.904211][ T8301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.904227][ T8301] RSP: 002b:00007fdb85f96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 105.904246][ T8301] RAX: ffffffffffffffda RBX: 00007fdb87b76080 RCX: 00007fdb8794e929 [ 105.904259][ T8301] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 105.904271][ T8301] RBP: 00007fdb85f96090 R08: 000000007ffff000 R09: 0000000000000000 [ 105.904281][ T8301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.904331][ T8301] R13: 0000000000000000 R14: 00007fdb87b76080 R15: 00007ffd5a9200e8 [ 105.904351][ T8301] [ 106.125881][ T8191] veth0_vlan: entered promiscuous mode [ 106.133382][ T8191] veth1_vlan: entered promiscuous mode [ 106.144499][ T8191] veth0_macvtap: entered promiscuous mode [ 106.151558][ T8191] veth1_macvtap: entered promiscuous mode [ 106.165333][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.177351][ T8191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.186822][ T8191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.195584][ T8191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.204308][ T8191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.213112][ T8191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.260238][ T8307] loop1: detected capacity change from 0 to 256 [ 106.435280][ T786] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.594121][ T8313] chnl_net:caif_netlink_parms(): no params data found [ 106.622038][ T8327] loop0: detected capacity change from 0 to 256 [ 106.642011][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.649192][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.656600][ T8313] bridge_slave_0: entered allmulticast mode [ 106.663799][ T8313] bridge_slave_0: entered promiscuous mode [ 106.671003][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.678232][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.685508][ T8313] bridge_slave_1: entered allmulticast mode [ 106.692320][ T8313] bridge_slave_1: entered promiscuous mode [ 106.711411][ T8313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.722227][ T8313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.722364][ T8334] 9pnet_fd: Insufficient options for proto=fd [ 106.745120][ T8334] serio: Serial port ptm0 [ 106.750223][ T8313] team0: Port device team_slave_0 added [ 106.756706][ T8313] team0: Port device team_slave_1 added [ 106.777153][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.784319][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.810638][ T8313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.822636][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.829624][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.855692][ T8313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.890928][ T8313] hsr_slave_0: entered promiscuous mode [ 106.897503][ T8313] hsr_slave_1: entered promiscuous mode [ 106.903733][ T8313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.912454][ T8313] Cannot create hsr debugfs directory [ 106.933032][ T8346] 9pnet_virtio: no channels available for device 127.0.0.1 [ 106.941353][ T8346] netlink: 'syz.8.1740': attribute type 13 has an invalid length. [ 106.981941][ T8346] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.989124][ T8346] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.029094][ T8346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.038981][ T8346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.073804][ T8346] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.082885][ T8346] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.092099][ T8346] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.101191][ T8346] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.280932][ T786] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.309951][ T8370] 9pnet_fd: Insufficient options for proto=fd [ 107.311711][ T8369] loop8: detected capacity change from 0 to 512 [ 107.320524][ T8370] serio: Serial port ptm0 [ 107.328205][ T8369] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.334793][ T8369] ext4: Unknown parameter 'euid<00000000000000000000' [ 107.344516][ T786] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.366198][ T8367] loop4: detected capacity change from 0 to 256 [ 107.378980][ T8372] loop1: detected capacity change from 0 to 512 [ 107.385704][ T8372] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 107.401177][ T8367] FAT-fs (loop4): codepage cp855 not found [ 107.405160][ T8372] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1750'. [ 107.407360][ T29] kauditd_printk_skb: 997 callbacks suppressed [ 107.407373][ T29] audit: type=1400 audit(1750888926.068:8144): avc: denied { create } for pid=8371 comm="syz.1.1750" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.443163][ T29] audit: type=1400 audit(1750888926.068:8145): avc: denied { bind } for pid=8371 comm="syz.1.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 107.458115][ T8313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 107.472514][ T29] audit: type=1400 audit(1750888926.138:8146): avc: denied { unlink } for pid=8065 comm="syz-executor" name=AC65 dev="tmpfs" ino=79 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 107.500309][ T8313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 107.513036][ T786] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.537926][ T8313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 107.547681][ T8378] loop8: detected capacity change from 0 to 2048 [ 107.558045][ T8313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 107.569258][ T8378] EXT4-fs: Invalid want_extra_isize 7 [ 107.631873][ T786] bridge_slave_1: left allmulticast mode [ 107.637546][ T786] bridge_slave_1: left promiscuous mode [ 107.643291][ T786] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.650511][ T8390] loop1: detected capacity change from 0 to 256 [ 107.657838][ T786] bridge_slave_0: left allmulticast mode [ 107.659438][ T29] audit: type=1326 audit(1750888926.318:8147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 107.663558][ T786] bridge_slave_0: left promiscuous mode [ 107.663725][ T786] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.687095][ T29] audit: type=1326 audit(1750888926.318:8148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 107.724155][ T29] audit: type=1326 audit(1750888926.368:8149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 107.747929][ T29] audit: type=1326 audit(1750888926.388:8150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 107.771476][ T29] audit: type=1326 audit(1750888926.388:8151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 107.794878][ T29] audit: type=1326 audit(1750888926.388:8152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8392 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f320c9811e5 code=0x7ffc0000 [ 107.818341][ T29] audit: type=1326 audit(1750888926.388:8153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8389 comm="syz.1.1753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 107.911862][ T786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.921721][ T786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.932028][ T786] bond0 (unregistering): Released all slaves [ 107.951832][ T8313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.965633][ T8313] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.975066][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.982185][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.993113][ T3546] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.000198][ T3546] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.011141][ T786] hsr_slave_0: left promiscuous mode [ 108.016695][ T786] hsr_slave_1: left promiscuous mode [ 108.022747][ T786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.030466][ T786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.039205][ T786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.046649][ T786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.056654][ T786] veth1_macvtap: left promiscuous mode [ 108.062357][ T786] veth0_macvtap: left promiscuous mode [ 108.067896][ T786] veth1_vlan: left promiscuous mode [ 108.073443][ T786] veth0_vlan: left promiscuous mode [ 108.127323][ T786] team0 (unregistering): Port device team_slave_1 removed [ 108.139620][ T786] team0 (unregistering): Port device team_slave_0 removed [ 108.223998][ T8407] serio: Serial port ptm0 [ 108.277963][ T8313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.285116][ T8412] mmap: syz.4.1756 (8412) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.350801][ T8313] veth0_vlan: entered promiscuous mode [ 108.359382][ T8313] veth1_vlan: entered promiscuous mode [ 108.374473][ T8313] veth0_macvtap: entered promiscuous mode [ 108.382362][ T8313] veth1_macvtap: entered promiscuous mode [ 108.392541][ T8313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.403183][ T8313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.412070][ T8313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.420910][ T8313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.429704][ T8313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.438389][ T8313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.480898][ T8424] loop2: detected capacity change from 0 to 128 [ 108.488441][ T8424] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿ' [ 108.580894][ T8430] loop4: detected capacity change from 0 to 256 [ 108.639404][ T8441] 9pnet_fd: Insufficient options for proto=fd [ 108.648118][ T8441] serio: Serial port ptm0 [ 108.693779][ T8445] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1766'. [ 108.730760][ T8453] loop0: detected capacity change from 0 to 256 [ 108.740256][ T8451] 9pnet_virtio: no channels available for device 127.0.0.1 [ 108.748427][ T8451] netlink: 'syz.1.1767': attribute type 13 has an invalid length. [ 108.788793][ T8451] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.796018][ T8451] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.837155][ T8451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.847409][ T8451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.882680][ T8451] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.891867][ T8451] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.901030][ T8451] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.909897][ T8451] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.140416][ T8471] 9pnet_fd: Insufficient options for proto=fd [ 109.147945][ T8471] serio: Serial port ptm0 [ 109.168874][ T8473] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1778'. [ 109.202006][ T8480] loop1: detected capacity change from 0 to 512 [ 109.211363][ T8480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.224496][ T8480] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.237810][ T8480] EXT4-fs error (device loop1): ext4_empty_dir:3078: inode #12: comm syz.1.1780: Directory hole found for htree leaf block 0 [ 109.251933][ T8480] EXT4-fs (loop1): Remounting filesystem read-only [ 109.264091][ T8480] tipc: Enabling of bearer rejected, failed to enable media [ 109.331952][ T8065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.342538][ T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 109.354268][ T8487] loop2: detected capacity change from 0 to 256 [ 109.369126][ T51] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 109.386832][ T8490] serio: Serial port ptm0 [ 109.407032][ T8492] wg2: entered promiscuous mode [ 109.412116][ T8492] wg2: entered allmulticast mode [ 109.441745][ T8495] FAULT_INJECTION: forcing a failure. [ 109.441745][ T8495] name failslab, interval 1, probability 0, space 0, times 0 [ 109.454513][ T8495] CPU: 0 UID: 0 PID: 8495 Comm: syz.4.1785 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 109.454531][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.454539][ T8495] Call Trace: [ 109.454542][ T8495] [ 109.454547][ T8495] __dump_stack+0x1d/0x30 [ 109.454565][ T8495] dump_stack_lvl+0xe8/0x140 [ 109.454612][ T8495] dump_stack+0x15/0x1b [ 109.454621][ T8495] should_fail_ex+0x265/0x280 [ 109.454639][ T8495] should_failslab+0x8c/0xb0 [ 109.454652][ T8495] kmem_cache_alloc_node_noprof+0x57/0x320 [ 109.454668][ T8495] ? __alloc_skb+0x101/0x320 [ 109.454719][ T8495] __alloc_skb+0x101/0x320 [ 109.454733][ T8495] ? audit_log_start+0x365/0x6c0 [ 109.454751][ T8495] audit_log_start+0x380/0x6c0 [ 109.454817][ T8495] audit_seccomp+0x48/0x100 [ 109.454832][ T8495] ? __seccomp_filter+0x68c/0x10d0 [ 109.454844][ T8495] __seccomp_filter+0x69d/0x10d0 [ 109.454920][ T8495] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 109.454967][ T8495] ? vfs_write+0x75e/0x8e0 [ 109.455041][ T8495] ? __rcu_read_unlock+0x4f/0x70 [ 109.455054][ T8495] ? __fget_files+0x184/0x1c0 [ 109.455066][ T8495] __secure_computing+0x82/0x150 [ 109.455078][ T8495] syscall_trace_enter+0xcf/0x1e0 [ 109.455132][ T8495] do_syscall_64+0xac/0x200 [ 109.455143][ T8495] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 109.455157][ T8495] ? clear_bhb_loop+0x40/0x90 [ 109.455175][ T8495] ? clear_bhb_loop+0x40/0x90 [ 109.455255][ T8495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.455267][ T8495] RIP: 0033:0x7eff304de929 [ 109.455276][ T8495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.455337][ T8495] RSP: 002b:00007eff2eb46e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 109.455349][ T8495] RAX: ffffffffffffffda RBX: 0000000000000502 RCX: 00007eff304de929 [ 109.455356][ T8495] RDX: 00007eff2eb46ef0 RSI: 0000000000000000 RDI: 00007eff305614cc [ 109.455427][ T8495] RBP: 0000200000000fc0 R08: 00007eff2eb46bb7 R09: 00007eff2eb46e40 [ 109.455434][ T8495] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 109.455441][ T8495] R13: 00007eff2eb46ef0 R14: 00007eff2eb46eb0 R15: 00002000000001c0 [ 109.455456][ T8495] [ 109.458448][ T8495] loop4: detected capacity change from 0 to 512 [ 109.701252][ T8495] EXT4-fs error (device loop4): __ext4_iget:5379: inode #4: block 193290: comm syz.4.1785: invalid block [ 109.715656][ T8495] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.1785: Bad quota inode: 4, type: 1 [ 109.733482][ T8500] netlink: 'syz.2.1786': attribute type 1 has an invalid length. [ 109.742668][ T8495] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 109.758925][ T8495] EXT4-fs (loop4): mount failed [ 109.771332][ T8506] FAULT_INJECTION: forcing a failure. [ 109.771332][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 109.784150][ T8506] CPU: 0 UID: 0 PID: 8506 Comm: syz.8.1789 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 109.784167][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.784174][ T8506] Call Trace: [ 109.784178][ T8506] [ 109.784182][ T8506] __dump_stack+0x1d/0x30 [ 109.784195][ T8506] dump_stack_lvl+0xe8/0x140 [ 109.784253][ T8506] dump_stack+0x15/0x1b [ 109.784262][ T8506] should_fail_ex+0x265/0x280 [ 109.784282][ T8506] should_failslab+0x8c/0xb0 [ 109.784295][ T8506] kmem_cache_alloc_node_noprof+0x57/0x320 [ 109.784365][ T8506] ? __alloc_skb+0x101/0x320 [ 109.784381][ T8506] __alloc_skb+0x101/0x320 [ 109.784397][ T8506] netlink_alloc_large_skb+0xba/0xf0 [ 109.784441][ T8506] netlink_sendmsg+0x3cf/0x6b0 [ 109.784453][ T8506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 109.784464][ T8506] __sock_sendmsg+0x142/0x180 [ 109.784479][ T8506] ____sys_sendmsg+0x31e/0x4e0 [ 109.784498][ T8506] ___sys_sendmsg+0x17b/0x1d0 [ 109.784593][ T8506] __x64_sys_sendmsg+0xd4/0x160 [ 109.784613][ T8506] x64_sys_call+0x2999/0x2fb0 [ 109.784654][ T8506] do_syscall_64+0xd2/0x200 [ 109.784664][ T8506] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 109.784678][ T8506] ? clear_bhb_loop+0x40/0x90 [ 109.784690][ T8506] ? clear_bhb_loop+0x40/0x90 [ 109.784753][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.784765][ T8506] RIP: 0033:0x7fdb8794e929 [ 109.784774][ T8506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.784784][ T8506] RSP: 002b:00007fdb85fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 109.784795][ T8506] RAX: ffffffffffffffda RBX: 00007fdb87b75fa0 RCX: 00007fdb8794e929 [ 109.784803][ T8506] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 109.784867][ T8506] RBP: 00007fdb85fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.784874][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.784944][ T8506] R13: 0000000000000000 R14: 00007fdb87b75fa0 R15: 00007ffd5a9200e8 [ 109.784954][ T8506] [ 110.062088][ T8510] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1790'. [ 110.085167][ T8517] netlink: 'syz.4.1800': attribute type 10 has an invalid length. [ 110.093168][ T8517] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1800'. [ 110.106269][ T8517] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1800'. [ 110.124136][ T8522] serio: Serial port ptm0 [ 110.134139][ T8520] loop8: detected capacity change from 0 to 512 [ 110.161668][ T8520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.179585][ T8520] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.211030][ T8520] EXT4-fs error (device loop8): ext4_empty_dir:3078: inode #12: comm syz.8.1793: Directory hole found for htree leaf block 0 [ 110.228323][ T8529] loop4: detected capacity change from 0 to 256 [ 110.256236][ T8520] EXT4-fs (loop8): Remounting filesystem read-only [ 110.304008][ T8520] tipc: Enabling of bearer rejected, failed to enable media [ 110.364202][ T7862] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.373486][ T56] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 110.389723][ T56] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 110.402730][ T8540] 9pnet_virtio: no channels available for device 127.0.0.1 [ 110.411270][ T8540] netlink: 'syz.1.1801': attribute type 13 has an invalid length. [ 110.544241][ T8548] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1805'. [ 110.600871][ T8558] netlink: 'syz.4.1809': attribute type 1 has an invalid length. [ 110.619915][ T8560] 9pnet_virtio: no channels available for device 127.0.0.1 [ 110.627966][ T8560] netlink: 'syz.8.1808': attribute type 13 has an invalid length. [ 110.689305][ T8572] loop8: detected capacity change from 0 to 512 [ 110.694386][ T8330] IPVS: starting estimator thread 0... [ 110.701234][ T8573] loop2: detected capacity change from 0 to 256 [ 110.702413][ T8574] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 110.720686][ T8572] ext4: Unknown parameter 'fsmagic' [ 110.789621][ T8577] IPVS: using max 2640 ests per chain, 132000 per kthread [ 110.831822][ T8582] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1818'. [ 110.926919][ T8596] loop1: detected capacity change from 0 to 256 [ 111.044507][ T3391] IPVS: starting estimator thread 0... [ 111.050653][ T8612] loop0: detected capacity change from 0 to 256 [ 111.058805][ T8608] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 111.075189][ T8616] loop4: detected capacity change from 0 to 512 [ 111.082134][ T8616] ext4: Unknown parameter 'fsmagic' [ 111.138284][ T8620] netlink: 'syz.2.1830': attribute type 1 has an invalid length. [ 111.149683][ T8613] IPVS: using max 2592 ests per chain, 129600 per kthread [ 111.179679][ T8624] netlink: 76 bytes leftover after parsing attributes in process `syz.8.1831'. [ 111.213986][ T8632] netlink: 188 bytes leftover after parsing attributes in process `syz.8.1833'. [ 111.225161][ T8632] netlink: 'syz.8.1833': attribute type 1 has an invalid length. [ 111.250386][ T8636] loop2: detected capacity change from 0 to 256 [ 111.522579][ T8645] loop2: detected capacity change from 0 to 256 [ 111.542989][ T8645] FAT-fs (loop2): codepage cp855 not found [ 112.046037][ T8656] loop1: detected capacity change from 0 to 256 [ 112.069143][ T8656] FAT-fs (loop1): codepage cp855 not found [ 112.083346][ T8665] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1847'. [ 112.094307][ T8665] netlink: 'syz.4.1847': attribute type 1 has an invalid length. [ 112.201399][ T8671] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 112.227669][ T8673] 9pnet_virtio: no channels available for device 127.0.0.1 [ 112.236621][ T8673] netlink: 'syz.4.1849': attribute type 13 has an invalid length. [ 112.273869][ T8673] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.281161][ T8673] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.323329][ T8673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.333848][ T8673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.391217][ T8673] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.400166][ T8673] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.409090][ T8673] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.418112][ T8673] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.447788][ T29] kauditd_printk_skb: 1099 callbacks suppressed [ 112.447854][ T29] audit: type=1326 audit(1750888931.108:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.8.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 112.478834][ T29] audit: type=1326 audit(1750888931.108:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.8.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 112.502329][ T29] audit: type=1326 audit(1750888931.108:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.8.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 112.525980][ T29] audit: type=1326 audit(1750888931.108:9246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.8.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 112.549609][ T29] audit: type=1326 audit(1750888931.108:9247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.8.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 112.573075][ T29] audit: type=1326 audit(1750888931.108:9248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.8.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 112.596470][ T29] audit: type=1326 audit(1750888931.108:9249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.8.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 112.619951][ T29] audit: type=1326 audit(1750888931.108:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.8.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 112.643899][ T29] audit: type=1326 audit(1750888931.108:9251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.8.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 112.667403][ T29] audit: type=1326 audit(1750888931.108:9252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8685 comm="syz.8.1855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 112.726445][ T8700] netlink: 'syz.8.1860': attribute type 1 has an invalid length. [ 112.752666][ T8704] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 112.783914][ T8706] loop4: detected capacity change from 0 to 256 [ 112.802995][ T8706] FAT-fs (loop4): codepage cp855 not found [ 112.900041][ T8721] loop8: detected capacity change from 0 to 256 [ 112.995621][ T8731] loop1: detected capacity change from 0 to 512 [ 113.002557][ T8731] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.009075][ T8731] ext4: Unknown parameter 'euid<00000000000000000000' [ 113.132019][ T8734] loop1: detected capacity change from 0 to 2048 [ 113.138683][ T8734] EXT4-fs: Invalid want_extra_isize 7 [ 113.147915][ T8736] 9pnet_virtio: no channels available for device 127.0.0.1 [ 113.156472][ T8736] netlink: 'syz.0.1873': attribute type 13 has an invalid length. [ 113.194755][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.202037][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.241047][ T8736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.250995][ T8736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.285491][ T8736] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.294475][ T8736] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.303491][ T8736] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.312491][ T8736] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.455365][ T8748] loop0: detected capacity change from 0 to 512 [ 113.471249][ T8748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.484170][ T8748] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.497223][ T8748] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1878: corrupted inode contents [ 113.509393][ T8748] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.1878: mark_inode_dirty error [ 113.521322][ T8748] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.1878: corrupted inode contents [ 113.533287][ T8748] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1878: mark_inode_dirty error [ 113.555531][ T8122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.663969][ T8763] loop4: detected capacity change from 0 to 256 [ 113.674552][ T8765] netlink: 'syz.0.1885': attribute type 1 has an invalid length. [ 113.695753][ T8755] loop2: detected capacity change from 0 to 8192 [ 113.785458][ T8770] __nla_validate_parse: 6 callbacks suppressed [ 113.785469][ T8770] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1887'. [ 113.875973][ T8786] netlink: 'syz.8.1891': attribute type 1 has an invalid length. [ 113.883902][ T8786] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1891'. [ 113.898815][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1886'. [ 113.926013][ T8789] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.934954][ T8789] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.943806][ T8789] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.952387][ T8791] loop8: detected capacity change from 0 to 256 [ 113.952998][ T8789] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.970152][ T8789] vxlan0: entered promiscuous mode [ 113.978743][ T8791] FAT-fs (loop8): codepage cp855 not found [ 114.105547][ T8802] 9pnet_fd: Insufficient options for proto=fd [ 114.113014][ T8802] serio: Serial port ptm0 [ 114.145282][ T8804] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1898'. [ 114.173928][ T8809] 9pnet_fd: Insufficient options for proto=fd [ 114.181939][ T8809] serio: Serial port ptm0 [ 114.281840][ T8814] loop0: detected capacity change from 0 to 256 [ 114.772908][ T8841] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 114.781818][ T8841] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 114.790677][ T8841] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 114.799559][ T8841] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 114.805657][ T8843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1909'. [ 114.844421][ T8841] loop8: detected capacity change from 0 to 512 [ 114.855330][ T8841] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 114.867472][ T8845] serio: Serial port ptm0 [ 114.872658][ T8841] EXT4-fs (loop8): 1 truncate cleaned up [ 114.879091][ T8841] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.992467][ T7862] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.020808][ T8852] 9pnet_virtio: no channels available for device 127.0.0.1 [ 115.028586][ T8852] netlink: 'syz.8.1913': attribute type 13 has an invalid length. [ 115.038125][ T8852] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 115.047252][ T8852] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 115.056385][ T8852] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 115.065517][ T8852] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 115.100727][ T8854] loop4: detected capacity change from 0 to 256 [ 115.253398][ T8869] loop0: detected capacity change from 0 to 256 [ 115.273079][ T8869] FAT-fs (loop0): codepage cp855 not found [ 115.522198][ T8873] 9pnet_fd: Insufficient options for proto=fd [ 115.540704][ T8873] serio: Serial port ptm0 [ 115.554003][ T8875] serio: Serial port ptm0 [ 115.567408][ T8877] loop2: detected capacity change from 0 to 512 [ 115.575357][ T8877] ext4: Unknown parameter 'fsmagic' [ 115.734376][ T8893] loop1: detected capacity change from 0 to 256 [ 116.022180][ T8897] serio: Serial port ptm0 [ 116.061523][ T8901] 9pnet_virtio: no channels available for device 127.0.0.1 [ 116.062813][ T8903] serio: Serial port ptm0 [ 116.069375][ T8901] netlink: 'syz.4.1933': attribute type 13 has an invalid length. [ 116.112388][ T8907] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 116.121347][ T8907] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 116.130211][ T8907] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 116.139041][ T8907] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 116.159129][ T8907] loop0: detected capacity change from 0 to 512 [ 116.167198][ T8907] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.178411][ T8907] EXT4-fs (loop0): 1 truncate cleaned up [ 116.185607][ T8907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.303372][ T8924] 9pnet_virtio: no channels available for device 127.0.0.1 [ 116.312473][ T8122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.322502][ T8924] netlink: 'syz.4.1941': attribute type 13 has an invalid length. [ 116.339955][ T8927] loop0: detected capacity change from 0 to 256 [ 116.377175][ T8932] serio: Serial port ptm0 [ 116.533777][ T3391] IPVS: starting estimator thread 0... [ 116.562815][ T8954] 9pnet_virtio: no channels available for device 127.0.0.1 [ 116.570798][ T8954] netlink: 'syz.2.1953': attribute type 13 has an invalid length. [ 116.609231][ T8954] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.616428][ T8954] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.624680][ T8951] IPVS: using max 4512 ests per chain, 225600 per kthread [ 116.681314][ T8954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.694222][ T8954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.739107][ T8954] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.748245][ T8954] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.757364][ T8954] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.766441][ T8954] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.783942][ T8954] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.792886][ T8954] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.801792][ T8954] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.810670][ T8954] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.862241][ T8963] serio: Serial port ptm0 [ 116.902142][ T8969] loop2: detected capacity change from 0 to 256 [ 116.945637][ T8972] loop4: detected capacity change from 0 to 1024 [ 116.952274][ T8972] EXT4-fs: Ignoring removed orlov option [ 116.961875][ T8972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.152972][ T8191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.184710][ T8982] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1962'. [ 117.211957][ T8991] netlink: 'syz.4.1965': attribute type 10 has an invalid length. [ 117.219960][ T8991] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1965'. [ 117.231943][ T8991] netlink: 'syz.4.1965': attribute type 1 has an invalid length. [ 117.245788][ T8995] loop2: detected capacity change from 0 to 256 [ 117.307042][ T9000] 9pnet_virtio: no channels available for device 127.0.0.1 [ 117.316018][ T9000] netlink: 'syz.0.1969': attribute type 13 has an invalid length. [ 117.324471][ T9000] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 117.333511][ T9000] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 117.342559][ T9000] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 117.351663][ T9000] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 117.384723][ T9006] loop4: detected capacity change from 0 to 256 [ 117.529456][ T9013] loop8: detected capacity change from 0 to 256 [ 117.547122][ T29] kauditd_printk_skb: 846 callbacks suppressed [ 117.547135][ T29] audit: type=1326 audit(1750888936.208:10099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.4.1971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7eff304de929 code=0x7ffc0000 [ 117.815917][ T9020] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1976'. [ 117.829001][ T29] audit: type=1326 audit(1750888936.488:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 117.852852][ T29] audit: type=1326 audit(1750888936.488:10101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 117.877660][ T29] audit: type=1326 audit(1750888936.548:10102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 117.901184][ T29] audit: type=1326 audit(1750888936.548:10103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 117.924706][ T29] audit: type=1326 audit(1750888936.548:10104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 117.948231][ T29] audit: type=1326 audit(1750888936.548:10105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 117.971729][ T29] audit: type=1326 audit(1750888936.548:10106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 117.995334][ T29] audit: type=1326 audit(1750888936.548:10107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 118.018976][ T29] audit: type=1326 audit(1750888936.548:10108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9019 comm="syz.1.1976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f320c94e929 code=0x7ffc0000 [ 118.119525][ T9033] netlink: 'syz.8.1980': attribute type 10 has an invalid length. [ 118.127403][ T9033] netlink: 168 bytes leftover after parsing attributes in process `syz.8.1980'. [ 118.138733][ T9033] netlink: 'syz.8.1980': attribute type 1 has an invalid length. [ 118.197985][ T9036] serio: Serial port ptm0 [ 118.254741][ T9038] loop8: detected capacity change from 0 to 512 [ 118.266228][ T9042] FAULT_INJECTION: forcing a failure. [ 118.266228][ T9042] name failslab, interval 1, probability 0, space 0, times 0 [ 118.274343][ T9038] ext4: Unknown parameter 'fsmagic' [ 118.278958][ T9042] CPU: 1 UID: 0 PID: 9042 Comm: syz.0.1984 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 118.279023][ T9042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.279036][ T9042] Call Trace: [ 118.279042][ T9042] [ 118.279050][ T9042] __dump_stack+0x1d/0x30 [ 118.279146][ T9042] dump_stack_lvl+0xe8/0x140 [ 118.279165][ T9042] dump_stack+0x15/0x1b [ 118.279182][ T9042] should_fail_ex+0x265/0x280 [ 118.279228][ T9042] should_failslab+0x8c/0xb0 [ 118.279258][ T9042] kmem_cache_alloc_node_noprof+0x57/0x320 [ 118.279299][ T9042] ? __alloc_skb+0x101/0x320 [ 118.279327][ T9042] __alloc_skb+0x101/0x320 [ 118.279354][ T9042] netlink_alloc_large_skb+0xba/0xf0 [ 118.279402][ T9042] netlink_sendmsg+0x3cf/0x6b0 [ 118.279423][ T9042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 118.279442][ T9042] __sock_sendmsg+0x142/0x180 [ 118.279467][ T9042] ____sys_sendmsg+0x31e/0x4e0 [ 118.279531][ T9042] ___sys_sendmsg+0x17b/0x1d0 [ 118.279611][ T9042] __x64_sys_sendmsg+0xd4/0x160 [ 118.279655][ T9042] x64_sys_call+0x2999/0x2fb0 [ 118.279676][ T9042] do_syscall_64+0xd2/0x200 [ 118.279768][ T9042] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 118.279794][ T9042] ? clear_bhb_loop+0x40/0x90 [ 118.279815][ T9042] ? clear_bhb_loop+0x40/0x90 [ 118.279841][ T9042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.279862][ T9042] RIP: 0033:0x7ff71188e929 [ 118.279876][ T9042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.279901][ T9042] RSP: 002b:00007ff70fef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.279981][ T9042] RAX: ffffffffffffffda RBX: 00007ff711ab5fa0 RCX: 00007ff71188e929 [ 118.279994][ T9042] RDX: 0000000002000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 118.280006][ T9042] RBP: 00007ff70fef7090 R08: 0000000000000000 R09: 0000000000000000 [ 118.280018][ T9042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.280030][ T9042] R13: 0000000000000000 R14: 00007ff711ab5fa0 R15: 00007ffd8b0ca3e8 [ 118.280049][ T9042] [ 118.353749][ T9045] loop1: detected capacity change from 0 to 256 [ 118.475831][ T9055] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1987'. [ 118.582007][ T9064] netlink: 'syz.4.1992': attribute type 10 has an invalid length. [ 118.602032][ T9064] netlink: 'syz.4.1992': attribute type 1 has an invalid length. [ 118.731095][ T9081] loop4: detected capacity change from 0 to 512 [ 118.737943][ T9081] ext4: Unknown parameter 'fsmagic' [ 118.743603][ T9083] loop8: detected capacity change from 0 to 256 [ 118.788314][ T9087] loop1: detected capacity change from 0 to 512 [ 118.796338][ T9087] EXT4-fs: Ignoring removed oldalloc option [ 118.807212][ T9087] EXT4-fs (loop1): 1 truncate cleaned up [ 118.813615][ T9087] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.846402][ T8065] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.888065][ T9096] __nla_validate_parse: 1 callbacks suppressed [ 118.888082][ T9096] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2003'. [ 118.925210][ T9105] netlink: 'syz.4.2006': attribute type 10 has an invalid length. [ 118.933152][ T9105] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2006'. [ 118.944217][ T9105] netlink: 'syz.4.2006': attribute type 1 has an invalid length. [ 119.054748][ T9115] 9pnet_virtio: no channels available for device 127.0.0.1 [ 119.063769][ T9115] netlink: 'syz.1.2010': attribute type 13 has an invalid length. [ 119.094198][ T9123] loop4: detected capacity change from 0 to 512 [ 119.101997][ T9123] ext4: Unknown parameter 'fsmagic' [ 119.102441][ T9118] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 119.185127][ T9134] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 119.194051][ T9134] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 119.202965][ T9134] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 119.211825][ T9134] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 119.234466][ T9134] loop2: detected capacity change from 0 to 512 [ 119.241719][ T9140] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2017'. [ 119.253522][ T9134] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.279224][ T9134] EXT4-fs (loop2): 1 truncate cleaned up [ 119.288508][ T9134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.313725][ T9144] serio: Serial port ptm0 [ 119.355268][ T9138] loop4: detected capacity change from 0 to 8192 [ 119.389020][ T8313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.447409][ T8330] IPVS: starting estimator thread 0... [ 119.449930][ T9152] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 119.535945][ T9169] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2031'. [ 119.545052][ T9157] IPVS: using max 2448 ests per chain, 122400 per kthread [ 119.647212][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2027'. [ 119.672600][ T9181] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.681438][ T9181] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.690242][ T9181] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.698967][ T9181] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.718929][ T9181] vxlan0: entered promiscuous mode [ 119.742675][ T9183] loop0: detected capacity change from 0 to 8192 [ 119.926771][ T9195] loop0: detected capacity change from 0 to 256 [ 120.078620][ T9202] loop2: detected capacity change from 0 to 256 [ 120.142767][ T9206] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2044'. [ 120.207060][ T9215] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2047'. [ 120.285783][ T9220] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 120.329383][ T9228] loop8: detected capacity change from 0 to 256 [ 120.374041][ T9235] 9pnet_fd: Insufficient options for proto=fd [ 120.386060][ T9235] serio: Serial port ptm0 [ 120.391968][ T9238] serio: Serial port ptm1 [ 120.397089][ T9240] 9pnet_virtio: no channels available for device 127.0.0.1 [ 120.437482][ T9244] 9pnet_virtio: no channels available for device 127.0.0.1 [ 120.513678][ T9252] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 120.545376][ T9257] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2062'. [ 120.600878][ T9263] loop1: detected capacity change from 0 to 256 [ 120.630906][ T9265] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2065'. [ 120.757793][ T9270] 9pnet_fd: Insufficient options for proto=fd [ 120.765727][ T9270] serio: Serial port ptm0 [ 120.803715][ T9274] 9pnet_virtio: no channels available for device 127.0.0.1 [ 120.812376][ T9274] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 120.821476][ T9274] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 120.830502][ T9274] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 120.839623][ T9274] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 120.926276][ T9284] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2074'. [ 120.988105][ T9298] 9pnet_fd: Insufficient options for proto=fd [ 120.996151][ T9298] serio: Serial port ptm0 [ 121.017740][ T9303] loop0: detected capacity change from 0 to 256 [ 121.038666][ T9306] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 121.242705][ T9311] loop4: detected capacity change from 0 to 164 [ 121.354658][ T9329] 9pnet_virtio: no channels available for device 127.0.0.1 [ 121.374040][ T9333] serio: Serial port ptm0 [ 121.407428][ T9337] loop8: detected capacity change from 0 to 256 [ 121.410808][ T9339] loop4: detected capacity change from 0 to 256 [ 121.667392][ T9341] loop8: detected capacity change from 0 to 164 [ 121.694703][ T9343] 9pnet_virtio: no channels available for device 127.0.0.1 [ 121.704662][ T9343] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.713708][ T9343] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.722653][ T9343] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.731555][ T9343] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 121.741571][ T9347] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 121.826883][ T9358] 9pnet_virtio: no channels available for device 127.0.0.1 [ 121.888457][ T9367] loop1: detected capacity change from 0 to 256 [ 122.011482][ T9374] loop4: detected capacity change from 0 to 164 [ 122.024116][ T9376] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 122.053599][ T9380] 9pnet_virtio: no channels available for device 127.0.0.1 [ 122.088699][ T9384] loop4: detected capacity change from 0 to 1024 [ 122.100953][ T9384] EXT4-fs: Ignoring removed orlov option [ 122.108327][ T9386] 9pnet_virtio: no channels available for device 127.0.0.1 [ 122.108552][ T9384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.372179][ T9411] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 122.460368][ T9420] loop8: detected capacity change from 0 to 256 [ 122.482201][ T8191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.512926][ T9422] 9pnet_virtio: no channels available for device 127.0.0.1 [ 122.520216][ T9424] loop0: detected capacity change from 0 to 256 [ 122.521623][ T9422] validate_nla: 16 callbacks suppressed [ 122.521635][ T9422] netlink: 'syz.4.2130': attribute type 13 has an invalid length. [ 122.590022][ T9429] loop4: detected capacity change from 0 to 164 [ 122.599687][ T9429] syz.4.2133: attempt to access beyond end of device [ 122.599687][ T9429] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 122.613817][ T9429] syz.4.2133: attempt to access beyond end of device [ 122.613817][ T9429] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 122.663740][ T9436] 9pnet_fd: Insufficient options for proto=fd [ 122.671913][ T9436] serio: Serial port ptm0 [ 122.688273][ T29] kauditd_printk_skb: 1111 callbacks suppressed [ 122.688286][ T29] audit: type=1326 audit(1750888941.348:11220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9425 comm="syz.0.2131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7ff71188e929 code=0x7ffc0000 [ 122.744259][ T9442] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 122.845688][ T9453] 9pnet_virtio: no channels available for device 127.0.0.1 [ 122.853315][ T9455] loop4: detected capacity change from 0 to 164 [ 122.854266][ T9453] netlink: 'syz.8.2144': attribute type 13 has an invalid length. [ 122.870745][ T9455] syz.4.2145: attempt to access beyond end of device [ 122.870745][ T9455] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 122.885057][ T9455] syz.4.2145: attempt to access beyond end of device [ 122.885057][ T9455] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 122.945077][ T9464] loop8: detected capacity change from 0 to 256 [ 122.952289][ T29] audit: type=1400 audit(1750888941.618:11221): avc: denied { connect } for pid=9460 comm="syz.4.2148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 123.004953][ T9461] netlink: 'syz.4.2148': attribute type 2 has an invalid length. [ 123.016745][ T9469] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 123.062745][ T29] audit: type=1400 audit(1750888941.728:11222): avc: denied { ioctl } for pid=9472 comm="syz.1.2153" path="socket:[30005]" dev="sockfs" ino=30005 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.103839][ T9475] loop1: detected capacity change from 0 to 164 [ 123.244881][ T9479] loop1: detected capacity change from 0 to 256 [ 123.346246][ T29] audit: type=1326 audit(1750888942.008:11223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.8.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 123.369807][ T29] audit: type=1326 audit(1750888942.008:11224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.8.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 123.393932][ T29] audit: type=1326 audit(1750888942.008:11225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.8.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 123.417503][ T29] audit: type=1326 audit(1750888942.008:11226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.8.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 123.441225][ T29] audit: type=1326 audit(1750888942.008:11227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.8.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 123.465377][ T29] audit: type=1326 audit(1750888942.058:11228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.8.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 123.488885][ T29] audit: type=1326 audit(1750888942.058:11229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9478 comm="syz.8.2154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb8794e929 code=0x7ffc0000 [ 123.577590][ T9489] 9pnet_virtio: no channels available for device 127.0.0.1 [ 123.585655][ T9489] netlink: 'syz.8.2158': attribute type 13 has an invalid length. [ 123.606539][ T9492] loop8: detected capacity change from 0 to 256 [ 123.729775][ T9502] loop1: detected capacity change from 0 to 164 [ 123.740518][ T9502] syz.1.2162: attempt to access beyond end of device [ 123.740518][ T9502] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 123.754769][ T9502] syz.1.2162: attempt to access beyond end of device [ 123.754769][ T9502] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 123.804010][ T9506] loop4: detected capacity change from 0 to 164 [ 123.899281][ T9517] loop1: detected capacity change from 0 to 256 [ 123.931778][ T9521] 9pnet_virtio: no channels available for device 127.0.0.1 [ 123.939741][ T9521] netlink: 'syz.4.2172': attribute type 13 has an invalid length. [ 123.951365][ T9523] 9pnet_fd: Insufficient options for proto=fd [ 123.959408][ T9523] serio: Serial port ptm0 [ 124.027771][ T9533] loop2: detected capacity change from 0 to 164 [ 124.069138][ T9539] __nla_validate_parse: 7 callbacks suppressed [ 124.069153][ T9539] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2181'. [ 124.148969][ T9552] 9pnet_fd: Insufficient options for proto=fd [ 124.156599][ T9552] serio: Serial port ptm0 [ 124.187792][ T9554] 9pnet_virtio: no channels available for device 127.0.0.1 [ 124.196613][ T9554] netlink: 'syz.1.2186': attribute type 13 has an invalid length. [ 124.248232][ T9566] tbf_change: 1 callbacks suppressed [ 124.248248][ T9566] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 124.262500][ T9568] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 124.270793][ T9567] loop2: detected capacity change from 0 to 164 [ 124.281125][ T9567] syz.2.2191: attempt to access beyond end of device [ 124.281125][ T9567] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 124.295295][ T9567] syz.2.2191: attempt to access beyond end of device [ 124.295295][ T9567] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 124.305643][ T9570] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2193'. [ 124.334556][ T9575] FAULT_INJECTION: forcing a failure. [ 124.334556][ T9575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.347714][ T9575] CPU: 1 UID: 0 PID: 9575 Comm: syz.2.2194 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 124.347745][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.347777][ T9575] Call Trace: [ 124.347783][ T9575] [ 124.347808][ T9575] __dump_stack+0x1d/0x30 [ 124.347834][ T9575] dump_stack_lvl+0xe8/0x140 [ 124.347901][ T9575] dump_stack+0x15/0x1b [ 124.347919][ T9575] should_fail_ex+0x265/0x280 [ 124.347950][ T9575] should_fail+0xb/0x20 [ 124.347972][ T9575] should_fail_usercopy+0x1a/0x20 [ 124.348082][ T9575] _copy_from_user+0x1c/0xb0 [ 124.348104][ T9575] kstrtouint_from_user+0x69/0xf0 [ 124.348174][ T9575] ? 0xffffffff81000000 [ 124.348187][ T9575] ? selinux_file_permission+0x1e4/0x320 [ 124.348215][ T9575] proc_fail_nth_write+0x50/0x160 [ 124.348287][ T9575] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 124.348324][ T9575] vfs_write+0x266/0x8e0 [ 124.348355][ T9575] ? vfs_read+0x47f/0x6f0 [ 124.348380][ T9575] ? __rcu_read_unlock+0x4f/0x70 [ 124.348470][ T9575] ? __fget_files+0x184/0x1c0 [ 124.348492][ T9575] ksys_write+0xda/0x1a0 [ 124.348519][ T9575] __x64_sys_write+0x40/0x50 [ 124.348535][ T9575] x64_sys_call+0x2cdd/0x2fb0 [ 124.348555][ T9575] do_syscall_64+0xd2/0x200 [ 124.348575][ T9575] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 124.348618][ T9575] ? clear_bhb_loop+0x40/0x90 [ 124.348638][ T9575] ? clear_bhb_loop+0x40/0x90 [ 124.348656][ T9575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.348674][ T9575] RIP: 0033:0x7fa40ea8d3df [ 124.348735][ T9575] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 124.348752][ T9575] RSP: 002b:00007fa40d0f7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 124.348800][ T9575] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa40ea8d3df [ 124.348811][ T9575] RDX: 0000000000000001 RSI: 00007fa40d0f70a0 RDI: 0000000000000004 [ 124.348829][ T9575] RBP: 00007fa40d0f7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.348843][ T9575] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 124.348856][ T9575] R13: 0000000000000000 R14: 00007fa40ecb5fa0 R15: 00007ffd7c6c72d8 [ 124.348875][ T9575] [ 124.593253][ T9579] loop2: detected capacity change from 0 to 256 [ 124.600694][ T9581] 9pnet_fd: Insufficient options for proto=fd [ 124.614480][ T9581] serio: Serial port ptm0 [ 124.644534][ T9589] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2201'. [ 124.685447][ T9593] 9pnet_virtio: no channels available for device 127.0.0.1 [ 124.694236][ T9595] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 124.695100][ T9593] netlink: 'syz.0.2203': attribute type 13 has an invalid length. [ 124.718923][ T9597] loop8: detected capacity change from 0 to 164 [ 124.729373][ T9597] syz.8.2205: attempt to access beyond end of device [ 124.729373][ T9597] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 124.744301][ T9597] syz.8.2205: attempt to access beyond end of device [ 124.744301][ T9597] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 124.758199][ T9599] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2206'. [ 124.770381][ T9603] loop0: detected capacity change from 0 to 256 [ 124.827255][ T9609] loop1: detected capacity change from 0 to 256 [ 124.922615][ T9616] loop2: detected capacity change from 0 to 1024 [ 124.929670][ T9616] EXT4-fs: Ignoring removed orlov option [ 124.937953][ T9616] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.174419][ T8313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.191108][ T9625] 9pnet_fd: Insufficient options for proto=fd [ 125.198664][ T9625] serio: Serial port ptm0 [ 125.274659][ T9631] loop2: detected capacity change from 0 to 256 [ 125.666291][ T9642] 9pnet_virtio: no channels available for device 127.0.0.1 [ 125.674131][ T9642] netlink: 'syz.8.2218': attribute type 13 has an invalid length. [ 125.688752][ T9644] loop1: detected capacity change from 0 to 164 [ 125.722735][ T9648] FAULT_INJECTION: forcing a failure. [ 125.722735][ T9648] name failslab, interval 1, probability 0, space 0, times 0 [ 125.735531][ T9648] CPU: 0 UID: 0 PID: 9648 Comm: syz.8.2221 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 125.735558][ T9648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.735569][ T9648] Call Trace: [ 125.735575][ T9648] [ 125.735581][ T9648] __dump_stack+0x1d/0x30 [ 125.735600][ T9648] dump_stack_lvl+0xe8/0x140 [ 125.735698][ T9648] dump_stack+0x15/0x1b [ 125.735714][ T9648] should_fail_ex+0x265/0x280 [ 125.735742][ T9648] should_failslab+0x8c/0xb0 [ 125.735769][ T9648] __kmalloc_noprof+0xa5/0x3e0 [ 125.735943][ T9648] ? start_sync_thread+0x44c/0x1650 [ 125.735962][ T9648] ? netdev_name_node_lookup+0xa4/0xd0 [ 125.735996][ T9648] start_sync_thread+0x44c/0x1650 [ 125.736081][ T9648] ? selinux_capable+0x1f9/0x270 [ 125.736183][ T9648] ? should_fail_ex+0xdb/0x280 [ 125.736212][ T9648] ? sized_strscpy+0x157/0x1a0 [ 125.736236][ T9648] do_ip_vs_set_ctl+0x2c6/0x8c0 [ 125.736269][ T9648] ? do_ip_setsockopt+0x1af3/0x2240 [ 125.736298][ T9648] nf_setsockopt+0x196/0x1b0 [ 125.736320][ T9648] ip_setsockopt+0x102/0x110 [ 125.736412][ T9648] tcp_setsockopt+0x98/0xb0 [ 125.736444][ T9648] sock_common_setsockopt+0x66/0x80 [ 125.736542][ T9648] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 125.736569][ T9648] smc_setsockopt+0x180/0x750 [ 125.736590][ T9648] ? __pfx_smc_setsockopt+0x10/0x10 [ 125.736727][ T9648] __sys_setsockopt+0x181/0x200 [ 125.736781][ T9648] __x64_sys_setsockopt+0x64/0x80 [ 125.736807][ T9648] x64_sys_call+0x2bd5/0x2fb0 [ 125.736864][ T9648] do_syscall_64+0xd2/0x200 [ 125.736882][ T9648] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.736909][ T9648] ? clear_bhb_loop+0x40/0x90 [ 125.736932][ T9648] ? clear_bhb_loop+0x40/0x90 [ 125.736952][ T9648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.736973][ T9648] RIP: 0033:0x7fdb8794e929 [ 125.736989][ T9648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.737007][ T9648] RSP: 002b:00007fdb85fb7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 125.737107][ T9648] RAX: ffffffffffffffda RBX: 00007fdb87b75fa0 RCX: 00007fdb8794e929 [ 125.737119][ T9648] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000006 [ 125.737130][ T9648] RBP: 00007fdb85fb7090 R08: 0000000000000018 R09: 0000000000000000 [ 125.737141][ T9648] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.737153][ T9648] R13: 0000000000000000 R14: 00007fdb87b75fa0 R15: 00007ffd5a9200e8 [ 125.737170][ T9648] [ 125.777364][ T9646] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2220'. [ 125.796019][ T9654] 9pnet_fd: Insufficient options for proto=fd [ 125.913875][ T9656] serio: Serial port ptm0 [ 126.110883][ T9658] random: crng reseeded on system resumption [ 126.167813][ T9673] loop0: detected capacity change from 0 to 256 [ 126.195675][ T9677] loop1: detected capacity change from 0 to 164 [ 126.223516][ T9679] 9pnet_virtio: no channels available for device 127.0.0.1 [ 126.232216][ T9679] netlink: 'syz.1.2232': attribute type 13 has an invalid length. [ 126.240841][ T9681] loop2: detected capacity change from 0 to 256 [ 126.306889][ T9685] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2234'. [ 126.354798][ T9690] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 126.434348][ T9696] serio: Serial port ptm0 [ 127.071210][ T9707] loop0: detected capacity change from 0 to 164 [ 127.072736][ T9709] loop8: detected capacity change from 0 to 256 [ 127.125120][ T9714] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2245'. [ 127.162887][ T9719] loop4: detected capacity change from 0 to 256 [ 127.210752][ T9728] loop2: detected capacity change from 0 to 256 [ 127.289367][ T9732] 9pnet_virtio: no channels available for device 127.0.0.1 [ 127.298955][ T9732] netlink: 'syz.1.2251': attribute type 13 has an invalid length. [ 127.337953][ T9737] FAULT_INJECTION: forcing a failure. [ 127.337953][ T9737] name failslab, interval 1, probability 0, space 0, times 0 [ 127.350631][ T9737] CPU: 1 UID: 0 PID: 9737 Comm: syz.0.2253 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 127.350707][ T9737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 127.350749][ T9737] Call Trace: [ 127.350754][ T9737] [ 127.350761][ T9737] __dump_stack+0x1d/0x30 [ 127.350782][ T9737] dump_stack_lvl+0xe8/0x140 [ 127.350808][ T9737] dump_stack+0x15/0x1b [ 127.350825][ T9737] should_fail_ex+0x265/0x280 [ 127.350855][ T9737] should_failslab+0x8c/0xb0 [ 127.350919][ T9737] kmem_cache_alloc_node_noprof+0x57/0x320 [ 127.351014][ T9737] ? __alloc_skb+0x101/0x320 [ 127.351052][ T9737] __alloc_skb+0x101/0x320 [ 127.351082][ T9737] netlink_alloc_large_skb+0xba/0xf0 [ 127.351114][ T9737] netlink_sendmsg+0x3cf/0x6b0 [ 127.351132][ T9737] ? __pfx_netlink_sendmsg+0x10/0x10 [ 127.351201][ T9737] __sock_sendmsg+0x142/0x180 [ 127.351223][ T9737] ____sys_sendmsg+0x31e/0x4e0 [ 127.351254][ T9737] ___sys_sendmsg+0x17b/0x1d0 [ 127.351389][ T9737] __x64_sys_sendmsg+0xd4/0x160 [ 127.351418][ T9737] x64_sys_call+0x2999/0x2fb0 [ 127.351477][ T9737] do_syscall_64+0xd2/0x200 [ 127.351493][ T9737] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 127.351529][ T9737] ? clear_bhb_loop+0x40/0x90 [ 127.351551][ T9737] ? clear_bhb_loop+0x40/0x90 [ 127.351644][ T9737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.351664][ T9737] RIP: 0033:0x7ff71188e929 [ 127.351679][ T9737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.351764][ T9737] RSP: 002b:00007ff70fef7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.351777][ T9737] RAX: ffffffffffffffda RBX: 00007ff711ab5fa0 RCX: 00007ff71188e929 [ 127.351784][ T9737] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 127.351806][ T9737] RBP: 00007ff70fef7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.351813][ T9737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.351820][ T9737] R13: 0000000000000000 R14: 00007ff711ab5fa0 R15: 00007ffd8b0ca3e8 [ 127.351831][ T9737] [ 127.570128][ T9739] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 127.621047][ T9748] loop4: detected capacity change from 0 to 164 [ 127.627716][ T9745] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2257'. [ 127.638307][ T9748] bio_check_eod: 6 callbacks suppressed [ 127.638321][ T9748] syz.4.2258: attempt to access beyond end of device [ 127.638321][ T9748] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 127.660557][ T9748] syz.4.2258: attempt to access beyond end of device [ 127.660557][ T9748] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 127.676804][ T9752] loop0: detected capacity change from 0 to 256 [ 127.692170][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 127.692184][ T29] audit: type=1326 audit(1750888946.358:11567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71188e929 code=0x7ffc0000 [ 127.722697][ T29] audit: type=1326 audit(1750888946.358:11568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff71188e929 code=0x7ffc0000 [ 127.746686][ T29] audit: type=1326 audit(1750888946.418:11569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71188e929 code=0x7ffc0000 [ 127.775655][ T29] audit: type=1326 audit(1750888946.418:11570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9755 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff7118c11e5 code=0x7ffc0000 [ 127.799269][ T29] audit: type=1326 audit(1750888946.418:11571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7ff71188e929 code=0x7ffc0000 [ 127.822972][ T29] audit: type=1326 audit(1750888946.418:11572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71188e929 code=0x7ffc0000 [ 127.846577][ T29] audit: type=1326 audit(1750888946.418:11573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71188e929 code=0x7ffc0000 [ 127.851148][ T9759] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2261'. [ 127.870212][ T29] audit: type=1326 audit(1750888946.418:11574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff71188e929 code=0x7ffc0000 [ 127.902743][ T29] audit: type=1326 audit(1750888946.418:11575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71188e929 code=0x7ffc0000 [ 127.926260][ T29] audit: type=1326 audit(1750888946.418:11576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.0.2259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff71188e929 code=0x7ffc0000 [ 128.036168][ T9766] FAULT_INJECTION: forcing a failure. [ 128.036168][ T9766] name failslab, interval 1, probability 0, space 0, times 0 [ 128.048900][ T9766] CPU: 1 UID: 0 PID: 9766 Comm: syz.4.2264 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 128.048930][ T9766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.048943][ T9766] Call Trace: [ 128.048950][ T9766] [ 128.048957][ T9766] __dump_stack+0x1d/0x30 [ 128.049003][ T9766] dump_stack_lvl+0xe8/0x140 [ 128.049023][ T9766] dump_stack+0x15/0x1b [ 128.049036][ T9766] should_fail_ex+0x265/0x280 [ 128.049066][ T9766] should_failslab+0x8c/0xb0 [ 128.049153][ T9766] kmem_cache_alloc_node_noprof+0x57/0x320 [ 128.049231][ T9766] ? __alloc_skb+0x101/0x320 [ 128.049260][ T9766] __alloc_skb+0x101/0x320 [ 128.049288][ T9766] ? audit_log_start+0x365/0x6c0 [ 128.049401][ T9766] audit_log_start+0x380/0x6c0 [ 128.049431][ T9766] audit_seccomp+0x48/0x100 [ 128.049459][ T9766] ? __seccomp_filter+0x68c/0x10d0 [ 128.049495][ T9766] __seccomp_filter+0x69d/0x10d0 [ 128.049519][ T9766] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 128.049552][ T9766] ? vfs_write+0x75e/0x8e0 [ 128.049607][ T9766] __secure_computing+0x82/0x150 [ 128.049626][ T9766] syscall_trace_enter+0xcf/0x1e0 [ 128.049649][ T9766] do_syscall_64+0xac/0x200 [ 128.049669][ T9766] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.049695][ T9766] ? clear_bhb_loop+0x40/0x90 [ 128.049775][ T9766] ? clear_bhb_loop+0x40/0x90 [ 128.049798][ T9766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.049822][ T9766] RIP: 0033:0x7eff304de929 [ 128.049905][ T9766] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.049921][ T9766] RSP: 002b:00007eff2eb47038 EFLAGS: 00000246 ORIG_RAX: 000000000000006f [ 128.049938][ T9766] RAX: ffffffffffffffda RBX: 00007eff30705fa0 RCX: 00007eff304de929 [ 128.049951][ T9766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 128.049964][ T9766] RBP: 00007eff2eb47090 R08: 0000000000000000 R09: 0000000000000000 [ 128.049977][ T9766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.049990][ T9766] R13: 0000000000000000 R14: 00007eff30705fa0 R15: 00007ffcdaad4ef8 [ 128.050065][ T9766] [ 128.293328][ T9770] 9pnet_fd: Insufficient options for proto=fd [ 128.301345][ T9770] serio: Serial port ptm0 [ 128.309656][ T9774] loop4: detected capacity change from 0 to 256 [ 128.338782][ T9778] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 128.383010][ T9782] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2271'. [ 128.477514][ T9786] FAULT_INJECTION: forcing a failure. [ 128.477514][ T9786] name failslab, interval 1, probability 0, space 0, times 0 [ 128.490219][ T9786] CPU: 1 UID: 0 PID: 9786 Comm: syz.8.2273 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 128.490246][ T9786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.490257][ T9786] Call Trace: [ 128.490261][ T9786] [ 128.490268][ T9786] __dump_stack+0x1d/0x30 [ 128.490288][ T9786] dump_stack_lvl+0xe8/0x140 [ 128.490307][ T9786] dump_stack+0x15/0x1b [ 128.490320][ T9786] should_fail_ex+0x265/0x280 [ 128.490345][ T9786] should_failslab+0x8c/0xb0 [ 128.490363][ T9786] kmem_cache_alloc_noprof+0x50/0x310 [ 128.490386][ T9786] ? vm_area_dup+0x33/0x2c0 [ 128.490413][ T9786] vm_area_dup+0x33/0x2c0 [ 128.490439][ T9786] __split_vma+0xe9/0x650 [ 128.490463][ T9786] ? __mpol_equal+0x2e/0x1e0 [ 128.490491][ T9786] ? can_vma_merge_right+0x105/0x2e0 [ 128.490508][ T9786] vma_modify+0x21e/0xc80 [ 128.490529][ T9786] vma_modify_policy+0x101/0x130 [ 128.490556][ T9786] mbind_range+0x1b8/0x440 [ 128.490572][ T9786] ? mas_find+0x4ea/0x610 [ 128.490590][ T9786] __se_sys_mbind+0x648/0xac0 [ 128.490619][ T9786] __x64_sys_mbind+0x78/0x90 [ 128.490644][ T9786] x64_sys_call+0x14af/0x2fb0 [ 128.490679][ T9786] do_syscall_64+0xd2/0x200 [ 128.490693][ T9786] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 128.490714][ T9786] ? clear_bhb_loop+0x40/0x90 [ 128.490730][ T9786] ? clear_bhb_loop+0x40/0x90 [ 128.490749][ T9786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.490770][ T9786] RIP: 0033:0x7fdb8794e929 [ 128.490786][ T9786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.490802][ T9786] RSP: 002b:00007fdb85fb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 128.490822][ T9786] RAX: ffffffffffffffda RBX: 00007fdb87b75fa0 RCX: 00007fdb8794e929 [ 128.490834][ T9786] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 128.490847][ T9786] RBP: 00007fdb85fb7090 R08: 0000000000000000 R09: 0000000000000002 [ 128.490858][ T9786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.490870][ T9786] R13: 0000000000000000 R14: 00007fdb87b75fa0 R15: 00007ffd5a9200e8 [ 128.490888][ T9786] [ 128.747025][ T9793] loop4: detected capacity change from 0 to 256 [ 128.785083][ T9795] 9pnet_virtio: no channels available for device 127.0.0.1 [ 128.787679][ T9798] loop8: detected capacity change from 0 to 256 [ 128.808087][ T9795] netlink: 'syz.0.2276': attribute type 13 has an invalid length. [ 128.955167][ T9813] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 128.976509][ T9817] dummy0: entered allmulticast mode [ 128.984362][ T9817] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.024830][ T9821] xt_hashlimit: max too large, truncated to 1048576 [ 129.052666][ T9824] loop0: detected capacity change from 0 to 256 [ 129.063079][ T9826] loop1: detected capacity change from 0 to 164 [ 129.071188][ T9826] syz.1.2287: attempt to access beyond end of device [ 129.071188][ T9826] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 129.085133][ T9826] syz.1.2287: attempt to access beyond end of device [ 129.085133][ T9826] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 129.130052][ T9831] 9pnet_virtio: no channels available for device 127.0.0.1 [ 129.138066][ T9831] netlink: 'syz.1.2289': attribute type 13 has an invalid length. [ 129.152506][ T9833] loop2: detected capacity change from 0 to 164 [ 129.162383][ T9833] syz.2.2290: attempt to access beyond end of device [ 129.162383][ T9833] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 129.179637][ T9833] syz.2.2290: attempt to access beyond end of device [ 129.179637][ T9833] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 129.200473][ T9835] loop1: detected capacity change from 0 to 2048 [ 129.207466][ T9835] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.220940][ T9835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.255273][ T9845] 9pnet_fd: Insufficient options for proto=fd [ 129.280709][ T9845] serio: Serial port ptm0 [ 129.289927][ T9846] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2291: bg 0: block 234: padding at end of block bitmap is not set [ 129.304600][ T9846] EXT4-fs (loop1): Remounting filesystem read-only [ 129.319878][ T9835] __nla_validate_parse: 2 callbacks suppressed [ 129.319911][ T9835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2291'. [ 129.365205][ T9659] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.547348][ T9849] chnl_net:caif_netlink_parms(): no params data found [ 129.581598][ T9849] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.588678][ T9849] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.595943][ T9849] bridge_slave_0: entered allmulticast mode [ 129.602370][ T9849] bridge_slave_0: entered promiscuous mode [ 129.608995][ T9849] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.616051][ T9849] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.623290][ T9849] bridge_slave_1: entered allmulticast mode [ 129.629773][ T9849] bridge_slave_1: entered promiscuous mode [ 129.648847][ T9849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.659594][ T9849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.683246][ T9849] team0: Port device team_slave_0 added [ 129.689026][ T9866] loop8: detected capacity change from 0 to 164 [ 129.690237][ T9849] team0: Port device team_slave_1 added [ 129.703206][ T9866] syz.8.2299: attempt to access beyond end of device [ 129.703206][ T9866] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 129.717256][ T9866] syz.8.2299: attempt to access beyond end of device [ 129.717256][ T9866] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 129.742965][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.749986][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.776063][ T9849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.791960][ T9849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.798950][ T9849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.802231][ T9870] netlink: 'syz.4.2301': attribute type 8 has an invalid length. [ 129.825117][ T9849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.869039][ T9870] loop4: detected capacity change from 0 to 512 [ 129.876476][ T41] bridge_slave_1: left allmulticast mode [ 129.882208][ T41] bridge_slave_1: left promiscuous mode [ 129.887980][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.889657][ T9872] 9pnet_virtio: no channels available for device 127.0.0.1 [ 129.903110][ T41] bridge_slave_0: left allmulticast mode [ 129.905962][ T9872] netlink: 'syz.8.2302': attribute type 13 has an invalid length. [ 129.908762][ T41] bridge_slave_0: left promiscuous mode [ 129.919009][ T9870] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 129.922492][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.938443][ T9870] EXT4-fs (loop4): mount failed [ 130.001790][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.011081][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.021475][ T41] bond0 (unregistering): Released all slaves [ 130.031381][ T9849] hsr_slave_0: entered promiscuous mode [ 130.037609][ T9849] hsr_slave_1: entered promiscuous mode [ 130.045609][ T9849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.054152][ T9849] Cannot create hsr debugfs directory [ 130.063549][ T9879] loop0: detected capacity change from 0 to 164 [ 130.072035][ T41] hsr_slave_0: left promiscuous mode [ 130.072713][ T9879] syz.0.2303: attempt to access beyond end of device [ 130.072713][ T9879] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 130.093828][ T41] hsr_slave_1: left promiscuous mode [ 130.093885][ T9879] syz.0.2303: attempt to access beyond end of device [ 130.093885][ T9879] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 130.105133][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.133174][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.151386][ T9883] loop2: detected capacity change from 0 to 256 [ 130.191601][ T41] team0 (unregistering): Port device team_slave_1 removed [ 130.201189][ T41] team0 (unregistering): Port device team_slave_0 removed [ 130.204578][ T9888] loop0: detected capacity change from 0 to 256 [ 130.414560][ T9894] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2310'. [ 130.437855][ T9896] FAULT_INJECTION: forcing a failure. [ 130.437855][ T9896] name failslab, interval 1, probability 0, space 0, times 0 [ 130.450717][ T9896] CPU: 1 UID: 0 PID: 9896 Comm: syz.8.2311 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 130.450755][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.450767][ T9896] Call Trace: [ 130.450772][ T9896] [ 130.450780][ T9896] __dump_stack+0x1d/0x30 [ 130.450801][ T9896] dump_stack_lvl+0xe8/0x140 [ 130.450818][ T9896] dump_stack+0x15/0x1b [ 130.450891][ T9896] should_fail_ex+0x265/0x280 [ 130.450918][ T9896] ? netlbl_cipsov4_add+0x1d4/0x1280 [ 130.450971][ T9896] should_failslab+0x8c/0xb0 [ 130.450994][ T9896] __kmalloc_cache_noprof+0x4c/0x320 [ 130.451091][ T9896] netlbl_cipsov4_add+0x1d4/0x1280 [ 130.451186][ T9896] ? genl_family_rcv_msg_attrs_parse+0x13b/0x190 [ 130.451210][ T9896] ? genl_family_rcv_msg_attrs_parse+0x184/0x190 [ 130.451302][ T9896] genl_family_rcv_msg_doit+0x140/0x1b0 [ 130.451436][ T9896] genl_rcv_msg+0x422/0x460 [ 130.451462][ T9896] ? __pfx_netlbl_cipsov4_add+0x10/0x10 [ 130.451519][ T9896] netlink_rcv_skb+0x120/0x220 [ 130.451551][ T9896] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.451640][ T9896] genl_rcv+0x28/0x40 [ 130.451658][ T9896] netlink_unicast+0x59e/0x670 [ 130.451752][ T9896] netlink_sendmsg+0x58b/0x6b0 [ 130.451770][ T9896] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.451788][ T9896] __sock_sendmsg+0x142/0x180 [ 130.451811][ T9896] ____sys_sendmsg+0x31e/0x4e0 [ 130.451847][ T9896] ___sys_sendmsg+0x17b/0x1d0 [ 130.451973][ T9896] __x64_sys_sendmsg+0xd4/0x160 [ 130.452060][ T9896] x64_sys_call+0x2999/0x2fb0 [ 130.452072][ T9896] do_syscall_64+0xd2/0x200 [ 130.452127][ T9896] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.452184][ T9896] ? clear_bhb_loop+0x40/0x90 [ 130.452195][ T9896] ? clear_bhb_loop+0x40/0x90 [ 130.452263][ T9896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.452276][ T9896] RIP: 0033:0x7fdb8794e929 [ 130.452285][ T9896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.452295][ T9896] RSP: 002b:00007fdb85fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.452307][ T9896] RAX: ffffffffffffffda RBX: 00007fdb87b75fa0 RCX: 00007fdb8794e929 [ 130.452314][ T9896] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 130.452321][ T9896] RBP: 00007fdb85fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.452350][ T9896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.452357][ T9896] R13: 0000000000000000 R14: 00007fdb87b75fa0 R15: 00007ffd5a9200e8 [ 130.452367][ T9896] [ 130.737169][ T9899] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 130.737353][ T41] IPVS: stop unused estimator thread 0... [ 130.779825][ T9904] 9pnet_fd: Insufficient options for proto=fd [ 130.791531][ T9904] serio: Serial port ptm0 [ 130.805655][ T9907] FAULT_INJECTION: forcing a failure. [ 130.805655][ T9907] name failslab, interval 1, probability 0, space 0, times 0 [ 130.817678][ T9849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 130.818416][ T9907] CPU: 1 UID: 0 PID: 9907 Comm: syz.0.2316 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 130.818445][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.818457][ T9907] Call Trace: [ 130.818463][ T9907] [ 130.818469][ T9907] __dump_stack+0x1d/0x30 [ 130.818491][ T9907] dump_stack_lvl+0xe8/0x140 [ 130.818561][ T9907] dump_stack+0x15/0x1b [ 130.818578][ T9907] should_fail_ex+0x265/0x280 [ 130.818641][ T9907] should_failslab+0x8c/0xb0 [ 130.818664][ T9907] kmem_cache_alloc_node_noprof+0x57/0x320 [ 130.818693][ T9907] ? __alloc_skb+0x101/0x320 [ 130.818752][ T9907] __alloc_skb+0x101/0x320 [ 130.818779][ T9907] ? audit_log_start+0x365/0x6c0 [ 130.818887][ T9907] audit_log_start+0x380/0x6c0 [ 130.818920][ T9907] audit_seccomp+0x48/0x100 [ 130.818946][ T9907] ? __seccomp_filter+0x68c/0x10d0 [ 130.819044][ T9907] __seccomp_filter+0x69d/0x10d0 [ 130.819069][ T9907] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.819103][ T9907] ? vfs_write+0x75e/0x8e0 [ 130.819173][ T9907] ? __rcu_read_unlock+0x4f/0x70 [ 130.819207][ T9907] ? __fget_files+0x184/0x1c0 [ 130.819282][ T9907] __secure_computing+0x82/0x150 [ 130.819306][ T9907] syscall_trace_enter+0xcf/0x1e0 [ 130.819330][ T9907] do_syscall_64+0xac/0x200 [ 130.819349][ T9907] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.819374][ T9907] ? clear_bhb_loop+0x40/0x90 [ 130.819446][ T9907] ? clear_bhb_loop+0x40/0x90 [ 130.819533][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.819554][ T9907] RIP: 0033:0x7ff71188e929 [ 130.819570][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.819589][ T9907] RSP: 002b:00007ff70fef6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 130.819608][ T9907] RAX: ffffffffffffffda RBX: 00007ff711ab5fa0 RCX: 00007ff71188e929 [ 130.819621][ T9907] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 130.819649][ T9907] RBP: 00007ff70fef7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.819661][ T9907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.819674][ T9907] R13: 0000000000000000 R14: 00007ff711ab5fa0 R15: 00007ffd8b0ca3e8 [ 130.819693][ T9907] [ 130.837687][ T9909] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2312'. [ 131.058334][ T9849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.070361][ T9849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.090032][ T9849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.149145][ T9924] loop8: detected capacity change from 0 to 256 [ 131.170338][ T9849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.207614][ T9849] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.223973][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.231122][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.256616][ T9849] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.267014][ T9849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.296186][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.303320][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.350244][ T9849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.429677][ T9947] SELinux: policydb version 0 does not match my version range 15-34 [ 131.437794][ T9947] SELinux: failed to load policy [ 131.480669][ T9849] veth0_vlan: entered promiscuous mode [ 131.488110][ T9849] veth1_vlan: entered promiscuous mode [ 131.515168][ T9849] veth0_macvtap: entered promiscuous mode [ 131.535321][ T9958] loop8: detected capacity change from 0 to 256 [ 131.558356][ T9849] veth1_macvtap: entered promiscuous mode [ 131.594849][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.620952][ T9963] loop0: detected capacity change from 0 to 256 [ 131.630718][ T9849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.640645][ T9849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.649372][ T9849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.658203][ T9849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.666976][ T9849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.667083][ T9965] loop4: detected capacity change from 0 to 1024 [ 131.684294][ T9965] EXT4-fs: Ignoring removed orlov option [ 131.684888][ T9963] FAT-fs (loop0): codepage cp855 not found [ 131.701998][ T9965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.764739][ T9976] FAULT_INJECTION: forcing a failure. [ 131.764739][ T9976] name failslab, interval 1, probability 0, space 0, times 0 [ 131.777535][ T9976] CPU: 1 UID: 0 PID: 9976 Comm: syz.3.2297 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 131.777640][ T9976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.777675][ T9976] Call Trace: [ 131.777680][ T9976] [ 131.777687][ T9976] __dump_stack+0x1d/0x30 [ 131.777750][ T9976] dump_stack_lvl+0xe8/0x140 [ 131.777769][ T9976] dump_stack+0x15/0x1b [ 131.777786][ T9976] should_fail_ex+0x265/0x280 [ 131.777816][ T9976] should_failslab+0x8c/0xb0 [ 131.777913][ T9976] kmem_cache_alloc_node_noprof+0x57/0x320 [ 131.777942][ T9976] ? __alloc_skb+0x101/0x320 [ 131.778036][ T9976] __alloc_skb+0x101/0x320 [ 131.778135][ T9976] netlink_ack+0xfd/0x500 [ 131.778174][ T9976] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 131.778201][ T9976] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 131.778221][ T9976] ? __pfx_nl802154_post_doit+0x10/0x10 [ 131.778255][ T9976] netlink_rcv_skb+0x192/0x220 [ 131.778316][ T9976] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.778417][ T9976] genl_rcv+0x28/0x40 [ 131.778439][ T9976] netlink_unicast+0x59e/0x670 [ 131.778466][ T9976] netlink_sendmsg+0x58b/0x6b0 [ 131.778484][ T9976] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.778562][ T9976] __sock_sendmsg+0x142/0x180 [ 131.778586][ T9976] ____sys_sendmsg+0x31e/0x4e0 [ 131.778657][ T9976] ___sys_sendmsg+0x17b/0x1d0 [ 131.778700][ T9976] __x64_sys_sendmsg+0xd4/0x160 [ 131.778780][ T9976] x64_sys_call+0x2999/0x2fb0 [ 131.778853][ T9976] do_syscall_64+0xd2/0x200 [ 131.778871][ T9976] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 131.778896][ T9976] ? clear_bhb_loop+0x40/0x90 [ 131.778942][ T9976] ? clear_bhb_loop+0x40/0x90 [ 131.778962][ T9976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.778982][ T9976] RIP: 0033:0x7f7b81a9e929 [ 131.778996][ T9976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.779030][ T9976] RSP: 002b:00007f7b80107038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.779049][ T9976] RAX: ffffffffffffffda RBX: 00007f7b81cc5fa0 RCX: 00007f7b81a9e929 [ 131.779102][ T9976] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 131.779114][ T9976] RBP: 00007f7b80107090 R08: 0000000000000000 R09: 0000000000000000 [ 131.779173][ T9976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.779186][ T9976] R13: 0000000000000000 R14: 00007f7b81cc5fa0 R15: 00007fffc244d188 [ 131.779206][ T9976] [ 132.040146][ T9983] netlink: 'syz.3.2332': attribute type 1 has an invalid length. [ 132.063784][ T9985] netlink: 'syz.2.2333': attribute type 10 has an invalid length. [ 132.071740][ T9985] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2333'. [ 132.082199][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2333'. [ 132.093528][ T8191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.155097][ T9989] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2335'. [ 132.182591][ T9995] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 132.238639][T10001] 9pnet_fd: Insufficient options for proto=fd [ 132.249210][T10001] serio: Serial port ptm0 [ 132.254868][ T9999] loop4: detected capacity change from 0 to 164 [ 132.307702][T10011] netlink: 'syz.3.2344': attribute type 1 has an invalid length. [ 132.387992][T10015] netlink: 'syz.8.2345': attribute type 1 has an invalid length. [ 132.451643][T10019] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 132.497001][T10025] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 132.531956][T10032] loop0: detected capacity change from 0 to 164 [ 132.555567][T10035] loop4: detected capacity change from 0 to 256 [ 132.570547][T10040] loop0: detected capacity change from 0 to 256 [ 132.594351][T10043] netlink: 'syz.8.2358': attribute type 1 has an invalid length. [ 132.693639][T10045] loop3: detected capacity change from 0 to 256 [ 132.703659][ T29] kauditd_printk_skb: 735 callbacks suppressed [ 132.703673][ T29] audit: type=1326 audit(1750888951.368:12305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 132.740981][ T29] audit: type=1326 audit(1750888951.398:12306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 132.764698][ T29] audit: type=1326 audit(1750888951.398:12307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 132.788292][ T29] audit: type=1326 audit(1750888951.398:12308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10051 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7b81ad11e5 code=0x7ffc0000 [ 132.811971][ T29] audit: type=1326 audit(1750888951.398:12309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 132.835528][ T29] audit: type=1326 audit(1750888951.398:12310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 132.859143][ T29] audit: type=1326 audit(1750888951.398:12311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 132.882704][ T29] audit: type=1326 audit(1750888951.398:12312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 132.906251][ T29] audit: type=1326 audit(1750888951.398:12313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 132.929825][ T29] audit: type=1326 audit(1750888951.398:12314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10044 comm="syz.3.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 133.104388][T10068] loop8: detected capacity change from 0 to 164 [ 133.116178][T10068] bio_check_eod: 4 callbacks suppressed [ 133.116193][T10068] syz.8.2368: attempt to access beyond end of device [ 133.116193][T10068] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 133.137948][T10068] syz.8.2368: attempt to access beyond end of device [ 133.137948][T10068] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 133.180738][T10075] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 133.224841][T10078] netlink: 'syz.2.2371': attribute type 10 has an invalid length. [ 133.232722][T10078] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2371'. [ 133.275337][T10081] 9pnet_virtio: no channels available for device 127.0.0.1 [ 133.297934][T10083] loop8: detected capacity change from 0 to 256 [ 133.391269][T10091] 9pnet_fd: Insufficient options for proto=fd [ 133.398592][T10091] serio: Serial port ptm0 [ 133.495157][T10098] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2380'. [ 133.560249][T10105] loop2: detected capacity change from 0 to 164 [ 133.568988][T10105] syz.2.2382: attempt to access beyond end of device [ 133.568988][T10105] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 133.582971][T10105] syz.2.2382: attempt to access beyond end of device [ 133.582971][T10105] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 133.614536][T10108] 9pnet_virtio: no channels available for device 127.0.0.1 [ 133.652952][T10112] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2385'. [ 133.669009][T10116] loop3: detected capacity change from 0 to 256 [ 133.877046][T10128] loop2: detected capacity change from 0 to 256 [ 133.937652][T10130] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2392'. [ 134.007893][T10137] loop0: detected capacity change from 0 to 164 [ 134.017073][T10137] syz.0.2394: attempt to access beyond end of device [ 134.017073][T10137] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 134.031088][T10137] syz.0.2394: attempt to access beyond end of device [ 134.031088][T10137] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.126817][T10142] 9pnet_virtio: no channels available for device 127.0.0.1 [ 134.134442][T10142] validate_nla: 5 callbacks suppressed [ 134.134454][T10142] netlink: 'syz.2.2396': attribute type 13 has an invalid length. [ 134.157595][T10144] netlink: 'syz.0.2397': attribute type 10 has an invalid length. [ 134.339400][T10167] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.365787][T10171] loop0: detected capacity change from 0 to 164 [ 134.376199][T10171] syz.0.2405: attempt to access beyond end of device [ 134.376199][T10171] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 134.390909][T10171] syz.0.2405: attempt to access beyond end of device [ 134.390909][T10171] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.407168][T10175] 9pnet_virtio: no channels available for device 127.0.0.1 [ 134.415346][T10175] netlink: 'syz.4.2409': attribute type 13 has an invalid length. [ 134.438262][T10180] 9pnet_fd: Insufficient options for proto=fd [ 134.445788][T10180] serio: Serial port ptm0 [ 134.447538][T10182] netlink: 'syz.4.2412': attribute type 10 has an invalid length. [ 134.457982][T10182] __nla_validate_parse: 3 callbacks suppressed [ 134.457995][T10182] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2412'. [ 134.489401][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2413'. [ 134.575009][T10194] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2417'. [ 134.586771][T10199] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 134.634765][T10211] loop8: detected capacity change from 0 to 164 [ 134.645559][T10211] syz.8.2423: attempt to access beyond end of device [ 134.645559][T10211] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 134.663405][T10210] 9pnet_virtio: no channels available for device 127.0.0.1 [ 134.670957][T10210] netlink: 'syz.3.2422': attribute type 13 has an invalid length. [ 134.673288][T10211] syz.8.2423: attempt to access beyond end of device [ 134.673288][T10211] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 134.720070][T10217] loop4: detected capacity change from 0 to 256 [ 134.734173][T10219] netlink: 'syz.8.2427': attribute type 10 has an invalid length. [ 134.742219][T10219] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2427'. [ 134.755761][T10210] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.763100][T10210] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.805183][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2429'. [ 134.826769][T10210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.837675][T10210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.870866][T10210] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.879928][T10210] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.888990][T10210] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.897948][T10210] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.957592][T10237] netlink: 'syz.2.2433': attribute type 10 has an invalid length. [ 134.965576][T10237] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2433'. [ 134.978408][T10237] netlink: 'syz.2.2433': attribute type 1 has an invalid length. [ 134.991026][T10237] bond1: entered promiscuous mode [ 134.996368][T10237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.019387][T10242] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2435'. [ 135.091223][T10250] loop2: detected capacity change from 0 to 164 [ 135.111512][T10252] 9pnet_virtio: no channels available for device 127.0.0.1 [ 135.120181][T10252] netlink: 'syz.3.2438': attribute type 13 has an invalid length. [ 135.128790][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2440'. [ 135.198087][T10265] 9pnet_virtio: no channels available for device 127.0.0.1 [ 135.212026][T10265] netlink: 'syz.3.2444': attribute type 13 has an invalid length. [ 135.242271][T10269] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2446'. [ 135.318573][T10274] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2448'. [ 135.341169][T10274] bond1: entered promiscuous mode [ 135.346453][T10274] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.423011][T10287] loop0: detected capacity change from 0 to 256 [ 135.426870][T10285] loop8: detected capacity change from 0 to 164 [ 135.502246][T10298] loop2: detected capacity change from 0 to 256 [ 135.518098][T10300] 9pnet_fd: Insufficient options for proto=fd [ 135.529355][T10300] serio: Serial port ptm0 [ 135.587465][T10306] loop8: detected capacity change from 0 to 512 [ 135.594388][T10306] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 135.605758][T10306] EXT4-fs (loop8): 1 truncate cleaned up [ 135.611853][T10306] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.679309][ T7862] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.806239][T10327] loop2: detected capacity change from 0 to 164 [ 135.816089][T10330] loop8: detected capacity change from 0 to 256 [ 136.017573][T10342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 136.026440][T10342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 136.035409][T10342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 136.044202][T10342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 136.057818][T10342] loop4: detected capacity change from 0 to 512 [ 136.064623][T10342] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.075677][T10342] EXT4-fs (loop4): 1 truncate cleaned up [ 136.082327][T10342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.134426][ T8191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.168312][T10351] loop4: detected capacity change from 0 to 256 [ 136.476888][T10378] bond2: entered promiscuous mode [ 136.493927][T10378] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.612321][T10394] 9pnet_fd: Insufficient options for proto=fd [ 136.640673][T10394] serio: Serial port ptm0 [ 136.671342][T10403] loop8: detected capacity change from 0 to 256 [ 136.708900][T10409] loop2: detected capacity change from 0 to 256 [ 136.799715][T10416] bond2: entered promiscuous mode [ 136.804861][T10416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.926234][T10426] loop0: detected capacity change from 0 to 164 [ 136.941298][T10428] loop8: detected capacity change from 0 to 256 [ 137.184764][T10447] bond3: entered promiscuous mode [ 137.190318][T10447] 8021q: adding VLAN 0 to HW filter on device bond3 [ 137.216184][T10454] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 137.235590][T10456] loop0: detected capacity change from 0 to 256 [ 137.361305][T10464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20001 - 0 [ 137.370218][T10464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20001 - 0 [ 137.379014][T10464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20001 - 0 [ 137.387889][T10464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20001 - 0 [ 137.556922][T10470] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 137.700885][T10478] 9pnet_virtio: no channels available for device 127.0.0.1 [ 137.719553][ T29] kauditd_printk_skb: 1014 callbacks suppressed [ 137.719566][ T29] audit: type=1326 audit(1750888956.378:13329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10474 comm="syz.3.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 137.749910][ T29] audit: type=1326 audit(1750888956.418:13330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10474 comm="syz.3.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 137.773542][ T29] audit: type=1326 audit(1750888956.418:13331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10474 comm="syz.3.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 137.797180][ T29] audit: type=1326 audit(1750888956.418:13332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10474 comm="syz.3.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 137.850056][ T29] audit: type=1326 audit(1750888956.498:13333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10474 comm="syz.3.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 137.873752][ T29] audit: type=1326 audit(1750888956.498:13334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10474 comm="syz.3.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 137.897608][ T29] audit: type=1326 audit(1750888956.498:13335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10474 comm="syz.3.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 137.921400][ T29] audit: type=1326 audit(1750888956.498:13336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10474 comm="syz.3.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 137.924807][T10488] loop8: detected capacity change from 0 to 256 [ 137.945190][ T29] audit: type=1326 audit(1750888956.498:13337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10474 comm="syz.3.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 137.945349][ T29] audit: type=1326 audit(1750888956.498:13338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10474 comm="syz.3.2525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f7b81a9e929 code=0x7ffc0000 [ 138.024822][T10492] 9pnet_fd: Insufficient options for proto=fd [ 138.033593][T10484] loop2: detected capacity change from 0 to 512 [ 138.040372][T10484] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.066708][T10488] FAT-fs (loop8): codepage cp855 not found [ 138.076594][T10484] EXT4-fs (loop2): 1 truncate cleaned up [ 138.083720][T10484] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.096911][T10498] 9pnet_virtio: no channels available for device 127.0.0.1 [ 138.107188][T10498] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 138.116223][T10498] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 138.125321][T10498] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 138.134300][T10498] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 138.201853][T10502] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 138.238373][ T8313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.253036][T10506] loop3: detected capacity change from 0 to 1024 [ 138.262057][T10506] EXT4-fs: Ignoring removed orlov option [ 138.271294][T10506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.361594][T10521] 9pnet_fd: Insufficient options for proto=fd [ 138.491193][T10529] loop4: detected capacity change from 0 to 512 [ 138.501220][T10529] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 138.515668][T10529] EXT4-fs (loop4): 1 truncate cleaned up [ 138.525218][T10529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.553342][ T9849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.574797][T10535] loop3: detected capacity change from 0 to 164 [ 138.585602][ T8191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.636054][T10544] loop4: detected capacity change from 0 to 1024 [ 138.642821][T10544] EXT4-fs: Ignoring removed orlov option [ 138.650259][T10544] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.740222][T10549] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 138.777548][T10553] 9pnet_fd: Insufficient options for proto=fd [ 138.880874][T10564] loop3: detected capacity change from 0 to 512 [ 138.887802][T10564] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 138.898177][ T8191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.908365][T10564] EXT4-fs (loop3): 1 truncate cleaned up [ 138.921598][T10564] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.022243][ T9849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.045190][T10575] loop3: detected capacity change from 0 to 164 [ 139.151642][T10581] loop3: detected capacity change from 0 to 256 [ 139.158248][T10583] 9pnet_virtio: no channels available for device 127.0.0.1 [ 139.168233][T10585] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 139.183866][T10583] validate_nla: 23 callbacks suppressed [ 139.183881][T10583] netlink: 'syz.0.2566': attribute type 13 has an invalid length. [ 139.213452][T10581] FAT-fs (loop3): codepage cp855 not found [ 139.228726][T10590] loop4: detected capacity change from 0 to 512 [ 139.238377][T10590] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.250652][T10590] EXT4-fs (loop4): 1 truncate cleaned up [ 139.256983][T10590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.328747][T10601] netlink: 'syz.8.2573': attribute type 10 has an invalid length. [ 139.338054][T10601] netlink: 'syz.8.2573': attribute type 1 has an invalid length. [ 139.388219][ T8191] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.419367][T10607] loop4: detected capacity change from 0 to 164 [ 139.457034][T10611] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 139.489854][T10613] netlink: 'syz.8.2579': attribute type 10 has an invalid length. [ 139.497759][T10613] __nla_validate_parse: 25 callbacks suppressed [ 139.497771][T10613] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2579'. [ 139.519846][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2579'. [ 139.520088][T10615] netlink: 'syz.0.2580': attribute type 10 has an invalid length. [ 139.536581][T10615] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2580'. [ 139.553199][T10617] 9pnet_virtio: no channels available for device 127.0.0.1 [ 139.560857][T10617] netlink: 'syz.2.2581': attribute type 13 has an invalid length. [ 139.582594][T10615] netlink: 'syz.0.2580': attribute type 1 has an invalid length. [ 139.611622][T10615] bond1: entered promiscuous mode [ 139.616996][T10615] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.647398][T10625] loop8: detected capacity change from 0 to 512 [ 139.654413][T10625] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 139.665994][T10625] EXT4-fs (loop8): 1 truncate cleaned up [ 139.672457][T10625] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.719651][ T7862] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.754104][T10632] loop2: detected capacity change from 0 to 164 [ 139.768587][T10632] bio_check_eod: 8 callbacks suppressed [ 139.768601][T10632] syz.2.2588: attempt to access beyond end of device [ 139.768601][T10632] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 139.793597][T10635] loop8: detected capacity change from 0 to 256 [ 139.801301][T10632] syz.2.2588: attempt to access beyond end of device [ 139.801301][T10632] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 139.819090][T10637] netlink: 'syz.0.2589': attribute type 10 has an invalid length. [ 139.827136][T10637] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2589'. [ 139.844703][T10637] netlink: 'syz.0.2589': attribute type 1 has an invalid length. [ 139.883468][T10643] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 139.905442][T10645] 9pnet_virtio: no channels available for device 127.0.0.1 [ 139.913308][T10645] netlink: 'syz.4.2592': attribute type 13 has an invalid length. [ 139.921687][T10645] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20001 - 0 [ 139.930674][T10645] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20001 - 0 [ 139.939710][T10645] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20001 - 0 [ 139.948943][T10645] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20001 - 0 [ 139.991967][T10654] loop0: detected capacity change from 0 to 512 [ 139.998766][T10654] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.013835][T10656] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2594'. [ 140.024196][T10654] EXT4-fs (loop0): 1 truncate cleaned up [ 140.030622][T10654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.043975][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 140.084534][T10663] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 140.106442][ T8122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.124039][T10665] loop0: detected capacity change from 0 to 256 [ 140.137695][T10667] loop2: detected capacity change from 0 to 164 [ 140.147898][T10667] syz.2.2600: attempt to access beyond end of device [ 140.147898][T10667] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 140.162233][T10667] syz.2.2600: attempt to access beyond end of device [ 140.162233][T10667] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 140.285468][T10677] loop2: detected capacity change from 0 to 256 [ 140.305976][T10677] FAT-fs (loop2): codepage cp855 not found [ 140.316962][T10680] loop3: detected capacity change from 0 to 1024 [ 140.338777][T10680] EXT4-fs: Ignoring removed orlov option [ 140.346336][T10680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.364676][T10685] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2607'. [ 140.420669][T10688] 9pnet_virtio: no channels available for device 127.0.0.1 [ 140.493970][T10696] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 140.534914][T10700] loop0: detected capacity change from 0 to 1024 [ 140.541688][T10700] EXT4-fs: Ignoring removed orlov option [ 140.542153][ T9849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.550169][T10700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.581985][T10703] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2613'. [ 140.593147][T10703] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2613'. [ 140.625568][T10708] netlink: 168 bytes leftover after parsing attributes in process `syz.8.2614'. [ 140.738466][T10719] loop8: detected capacity change from 0 to 256 [ 140.752739][T10721] 9pnet_fd: Insufficient options for proto=fd [ 140.775902][T10700] ================================================================== [ 140.784111][T10700] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 140.792119][T10700] [ 140.794444][T10700] write to 0xffff88811a1128b8 of 4 bytes by task 10711 on cpu 0: [ 140.802172][T10700] writeback_single_inode+0x14a/0x3e0 [ 140.807563][T10700] sync_inode_metadata+0x5b/0x90 [ 140.812527][T10700] generic_buffers_fsync_noflush+0xd9/0x120 [ 140.818447][T10700] ext4_sync_file+0x1ab/0x690 [ 140.823145][T10700] vfs_fsync_range+0x10a/0x130 [ 140.827936][T10700] ext4_buffered_write_iter+0x34f/0x3c0 [ 140.833491][T10700] ext4_file_write_iter+0x383/0xf00 [ 140.838702][T10700] iter_file_splice_write+0x5ef/0x970 [ 140.844085][T10700] direct_splice_actor+0x153/0x2a0 [ 140.849192][T10700] splice_direct_to_actor+0x30f/0x680 [ 140.854558][T10700] do_splice_direct+0xda/0x150 [ 140.859318][T10700] do_sendfile+0x380/0x650 [ 140.863739][T10700] __x64_sys_sendfile64+0x105/0x150 [ 140.868924][T10700] x64_sys_call+0xb39/0x2fb0 [ 140.873499][T10700] do_syscall_64+0xd2/0x200 [ 140.878003][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.883878][T10700] [ 140.886183][T10700] read to 0xffff88811a1128b8 of 4 bytes by task 10700 on cpu 1: [ 140.893802][T10700] vfs_fsync_range+0x9b/0x130 [ 140.898472][T10700] ext4_buffered_write_iter+0x34f/0x3c0 [ 140.904004][T10700] ext4_file_write_iter+0x383/0xf00 [ 140.909187][T10700] iter_file_splice_write+0x5ef/0x970 [ 140.914590][T10700] direct_splice_actor+0x153/0x2a0 [ 140.919691][T10700] splice_direct_to_actor+0x30f/0x680 [ 140.925050][T10700] do_splice_direct+0xda/0x150 [ 140.929812][T10700] do_sendfile+0x380/0x650 [ 140.934227][T10700] __x64_sys_sendfile64+0x105/0x150 [ 140.939413][T10700] x64_sys_call+0xb39/0x2fb0 [ 140.943995][T10700] do_syscall_64+0xd2/0x200 [ 140.948483][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.954361][T10700] [ 140.956667][T10700] value changed: 0x00000038 -> 0x00000002 [ 140.962365][T10700] [ 140.964677][T10700] Reported by Kernel Concurrency Sanitizer on: [ 140.970806][T10700] CPU: 1 UID: 0 PID: 10700 Comm: syz.0.2612 Not tainted 6.16.0-rc3-syzkaller-00057-g92ca6c498a5e #0 PREEMPT(voluntary) [ 140.983290][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 140.993328][T10700] ================================================================== [ 141.040883][ T8122] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.