last executing test programs: 21m8.439717638s ago: executing program 32 (id=1027): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x10, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x66, &(0x7f00000015c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x30, 0x3a, 0xff, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x2, {0x0, 0x6, ';C#', 0x9, 0x89, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2}}}}}}}, 0x0) 16m9.08148782s ago: executing program 33 (id=2906): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000004e00)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x27}, @mcast2, {[], @echo_reply}}}}}, 0x0) r1 = creat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x160) ftruncate(r1, 0x81fd) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r2 = gettid() pivot_root(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r6}, 0x18) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 15m29.963959496s ago: executing program 34 (id=3081): r0 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x7db2, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x40) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x110) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 12m38.299153333s ago: executing program 35 (id=4376): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000000000", @ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)=r5}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000002040)={0x3, 0xf8, 0x200}) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), r5) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r8, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000001, 0x72}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x60000000}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffff9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4014}, 0x20000000) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r7}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8914, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') preadv(r9, &(0x7f0000002240)=[{0x0}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newtfilter={0x908, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0x9}, {}, {0xc, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x8dc, 0x2, [@TCA_U32_POLICE={0x874, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0xffff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb14}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x974, 0x1, 0x8, 0x2cca, 0x6, 0x8, 0x6, 0x9, 0xb61b, 0xc, 0x7, 0x9, 0x4010, 0x0, 0x90e, 0x2, 0x40a9, 0x2, 0x3, 0x81, 0x0, 0x5, 0x8, 0xff, 0xf, 0x7, 0x4, 0xfff, 0x8, 0xfffffffe, 0x9, 0x4, 0x54, 0x7ff, 0xb3ad, 0xfffffff4, 0x0, 0x2, 0x9, 0x8369, 0xffffe470, 0x4, 0x3, 0x4, 0x4, 0x7, 0xffff, 0x5b, 0xe, 0x800, 0xfffffff7, 0x1ff, 0x6, 0x1, 0x602, 0x7, 0x9, 0x1, 0x0, 0x8, 0x6, 0x80, 0x7, 0x1ff, 0x16, 0x4, 0x6, 0x2, 0x1, 0xfffffffa, 0x10001, 0x3, 0x2e5f, 0x9, 0x400, 0x1, 0x8001, 0x40, 0x1, 0x40, 0x7ff, 0xda3, 0x3, 0x9, 0xff, 0x1, 0x6, 0x80, 0x8001, 0x7ff, 0x8, 0xfffffffe, 0x0, 0x9, 0x6, 0xfffffffc, 0xd43e, 0x8, 0xe51c, 0x4, 0x663, 0x400, 0xc0000000, 0x1ff, 0x8, 0x7, 0xc000, 0xc1db, 0x3, 0x0, 0x9be4, 0x4, 0x757, 0x5, 0x9, 0x5, 0x9, 0x2, 0xe5, 0x9, 0x6, 0x200, 0x1000000, 0x0, 0x324e, 0x8, 0x3, 0x3, 0xfffff890, 0xb, 0x7f, 0xb72, 0x6, 0x5, 0x2ce4d7fd, 0x5, 0xfffffff9, 0xfff, 0x0, 0x0, 0x2, 0x61ea, 0xffffffff, 0x6, 0x53, 0xfffffff9, 0x401, 0x2, 0xfffffffc, 0x1, 0x0, 0x1, 0x9, 0x8000, 0x3ff, 0x8, 0x5, 0x29c, 0x3000000, 0x1, 0xc76b, 0x101, 0x7, 0x10001, 0x0, 0x0, 0x6, 0x3, 0xfff, 0xd2f0, 0x9, 0x1, 0x6661f5b2, 0x5, 0x2, 0xffffffff, 0x5, 0x5, 0x6, 0x8, 0x3, 0x8ef8, 0xe, 0x9, 0x7e7, 0x7ff, 0x0, 0x5a7, 0x1, 0x54c4, 0xff, 0x9a6a, 0x9, 0xfffff462, 0x2, 0x5, 0x200, 0x100, 0x7f, 0x2, 0x6, 0x1, 0x0, 0xf, 0x6, 0x2, 0xc5, 0x5, 0x7, 0xd, 0x1, 0x5, 0x5, 0x8, 0x0, 0x80, 0x5, 0xed, 0xc7, 0x10000, 0x5, 0x0, 0x80, 0x7, 0x7, 0x81, 0x1, 0x9, 0x4, 0x3, 0x8, 0x10000, 0x0, 0x6, 0x7fff, 0xfffff801, 0x40000000, 0xfff, 0xac, 0x2ef3, 0x2, 0xe3, 0xcb, 0x9, 0x1, 0x7ff, 0x1d3d, 0x5, 0x4, 0x7, 0x6, 0x9, 0x6, 0x80, 0x9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x7, 0x3, 0x9, 0x1f, 0xc, 0x9, 0x6, 0x81, 0x6, 0x8, 0x8, 0xffff, 0x2, 0x6, 0x80, 0x5, 0x4, 0x3, 0x0, 0xd, 0x4e, 0xdee6, 0x2, 0x9, 0x9, 0x8, 0x675, 0xbfe, 0x1, 0x0, 0x8, 0x0, 0xffff1e9f, 0xffff0000, 0x1, 0x40, 0xa, 0x7, 0x0, 0x101, 0x0, 0x8000, 0x4, 0x17, 0x6, 0x7ff, 0xfffffffb, 0x1ff, 0x10000, 0x3b, 0x9, 0x2131, 0x0, 0x401, 0x9, 0x6, 0xd, 0xfff, 0xfffffffb, 0x8, 0x400, 0xa17, 0x3adca696, 0x0, 0x1, 0xb3, 0xffffffff, 0x9, 0xf6, 0x1, 0x8, 0x2, 0x3, 0x5, 0x3, 0x3, 0x7, 0x6, 0xfffffffc, 0x2, 0xfff, 0x9, 0x8, 0x9, 0x9f, 0x10001, 0x2aa, 0x0, 0x8, 0x6, 0x2, 0x800, 0xd, 0x1, 0x6, 0x100000, 0x0, 0x9, 0x2733, 0xb, 0x0, 0x6, 0x9, 0x3, 0xc, 0x6, 0x4, 0x7, 0x9, 0x99, 0xffff9b83, 0x5, 0x4, 0x0, 0x5, 0x8, 0x100, 0x2, 0x4, 0x8, 0x400, 0x0, 0x8, 0x7f, 0x3, 0x2, 0xb, 0x3, 0x9, 0x0, 0x943, 0x2, 0x5, 0x9, 0x7f, 0x4, 0x2, 0xfff, 0x1, 0x3, 0xff, 0x3, 0x4, 0x8e, 0x8, 0x7ff, 0x8, 0x5, 0x3, 0x9, 0x8, 0x6, 0x2, 0x0, 0x7ff, 0x9, 0x7746, 0xffffffff, 0x8001, 0x5, 0x9, 0xff, 0x7, 0x2, 0x200000, 0x1, 0x8, 0x0, 0x4, 0xffffffc0, 0x7fff, 0x8, 0x9, 0x25, 0x571, 0x9, 0x7, 0x9, 0xffffff19, 0x8c0d, 0xf87, 0x5, 0xfffffffa, 0x1, 0x0, 0x7fff, 0x1ff, 0x3, 0x8000, 0x20e, 0x103c4199, 0x9, 0xffffff00, 0x5, 0x81, 0x80, 0x9, 0x9, 0x2, 0x462d, 0x1000, 0x200, 0x9, 0x0, 0x200, 0xf7, 0xfffeffff, 0x2ed, 0x0, 0x2, 0x2, 0x3, 0xc, 0xc88d, 0x7, 0xfffff5ec, 0x5, 0x759d5f22, 0x4, 0xfa1a, 0x6, 0x5, 0x0, 0x5, 0x40, 0xf, 0x2, 0x18edaf59, 0x3, 0x8000, 0x3, 0x4eb3592a, 0x8, 0x40, 0x1000, 0x11c, 0xf99, 0x80, 0x6, 0x8, 0x401, 0xed, 0x0, 0x10001, 0x2, 0x7, 0x8000, 0x9, 0x9, 0x3, 0x1000, 0x7f, 0x6, 0xb, 0x5]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x20000000, 0x4, 0x3, 0x7fff, {0xa, 0x82c614eb2c1442bd, 0x1, 0x445, 0x5, 0xfffffff7}, {0x5, 0x1, 0x6, 0x8001, 0x1, 0x3}, 0x3, 0x9, 0x3}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}]}, @TCA_U32_SEL={0x64, 0x5, {0x0, 0xf7, 0x5, 0x0, 0x0, 0x0, 0x200, 0xc, [{0x9, 0x2, 0xf2f, 0x24}, {0x72f, 0x1, 0x3, 0x6}, {0x10000000, 0x3, 0x6, 0x4}, {0x8, 0x400000c9, 0x10000, 0x3}, {0x5, 0x3, 0x5, 0x1b}]}}]}}]}, 0x908}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) 10m42.73922704s ago: executing program 37 (id=5426): r0 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0x100007, @remote, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1700000000000000040000000300", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 9m8.043613388s ago: executing program 38 (id=5911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x206, 0x3601) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x2c) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0xf00, 0x10000) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000380)=@get={0x1, 0x0, 0x3ff}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8413, &(0x7f0000000140)={[], [{@permit_directio}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}, 0x22}, {@audit}, {@measure}, {@seclabel}, {@hash}]}, 0x0, 0x523, &(0x7f0000000600)="$eJzs3c9vI1cdAPDvuPb+zDYpcIBKtKUtyq5g7aRR24hDKRKCUyWg3JeQOFEUJ17FTruJVjQRfwASQoDECS5ckPgDkFAlLhwRUiU4FwECIdjCASS6g8YeuyGxnTRx4mzy+Uiz837MzPe9Xc9o3szsTAAX1qv59DBN01sRMZ6XF/Lp2SyzHfFMRLz34P58NiWRpq//PYkkL+tsK225HNfbq0QUI7725YhvJvvjNja3VuZqtep6nq80V+9WGptbt5dX55aqS9W1mZnpl2Zfnn1xduo43Vu8niduRMQrX/zz97/z0y+98svPvvmHO3+9+a2k3ea3Yk8/PqTioMp210txJc/fyufrRwx2FhV3J64ebp2d/CcCAMDpys5LP5Kf5z88YNn3T6lNAAAAwHClnx+L/yade3f7XOpTDgAAADxCChExFkmhnD/vOxaFQrkcrWd4PxbXCrV6o/mZxfrG2kJWFzERpcLicq06lT8rPBGlJMtPt9If5F/Yk5+JiCci4nvjV1v58ny9tjDqix8AAABwQVzfM/7/13h7/A8AAACcMxOjbgAAAABw4oz/AQAA4Pwz/gcAAIBz7SuvvZZNaef71wtvbG6s1N+4vVBtrJRXN+bL8/X1u+Wlen2p9c6+1YEb634Iem3jXqVZbTQrjc2tO6v1jbXmneXuJ7ABAACAU/bE02//PomI7c9dbU2ZS7vq/5N/J2BkDQROTPeSXST5/NL+hd59vL3gn06vXcDJe2zUDQBGpjjqBgAjUxp1A4CRSw6o7/vwzm/y+aeG2x4AAGD4Jj/R//5/YeCa24OrgTPPTgwXl/v/cHG17v/3eOSvJycLcK6UnAHAhXfs+/8H8n+IAABg1MZaU1Io55f3xqJQKJcjbrQ+C1BKFpdr1amIeDwifjdeupzlp1trJgeOGQAAAAAAAAAAAAAAAAAAAAAAAACAtjRNIh3g2YG1AAAAwKMgovCX5Fftd/lPjj8/tvf6wKXk3+ORfyL0zR+9/oN7c83m+nRW/o9uefOHefkLo7iCAQAAAOzVGad3xvEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDw7+fz+/HsP7s+fZuS/fSEiJiKyuJ2pXVOMK635lShFxLV/JlHctV4ScXkY8bezrn+8V/wka1Y3ZI/4cfXk48dE/rfQK/71IcSHi+zt7Pjzaq/9rxDPtOa9979ixP/lj6r/8S+6x7/H+uz/Nw4Z48l3fl7pG38n4sli7+NPJ37SJ/5zh4z/ja9vbfWrS38cMRm94++OVWmu3q00NrduL6/OLVWXqmszM9Mvzb48++LsVGVxuVbN/+wZ47uf/MXDQf2/1if+xAH9f/6Q/X//nXsPPtpOlnrFv/lcj/i//km+xP74hYjWb+LTeTqrn+ykt9vp3Z762W+fGtT/hT79P+jf/+Yh+3/rq9/+4yEXBQBOQWNza2WuVquun81EUjz2drJR+lnpjsTZSry1v+rpOPIG0zRNs33qGA1Ljh69b+Ld+BALJ92SUR+ZAACAYfvg7H/ULQEAAAAAAAAAAAAAAAAAAICL6zTesrY35k43lQzjFdoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEPxvwAAAP//su7kZQ==") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0xf}]}}, @TCA_RATE={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 8m31.241373136s ago: executing program 39 (id=6103): syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0100259d7000fcdbdf2502000000", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r4], 0x4) write$tun(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) 8m30.069662165s ago: executing program 40 (id=6110): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) personality(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x52b242d) 8m27.086014893s ago: executing program 41 (id=6123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 7m55.933579199s ago: executing program 42 (id=6253): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c084, &(0x7f0000000540)={[{@i_version}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobh}, {@dioread_nolock}, {@test_dummy_encryption}], [{@dont_appraise}]}, 0xfd, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES32=r2, @ANYBLOB="104e0600016201003c001280110001006272696467655f736c6176650000000024000580060002000100000005000100", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) 7m53.485553769s ago: executing program 43 (id=6264): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950"], 0x15) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c084, &(0x7f0000000540)={[{@i_version}, {@data_journal}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobh}, {@dioread_nolock}, {@test_dummy_encryption}], [{@dont_appraise}]}, 0xfd, 0x43d, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES32=r2, @ANYBLOB="104e0600016201003c001280110001006272696467655f736c6176650000000024000580060002000100000005000100", @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) 7m49.277385437s ago: executing program 44 (id=6275): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x504, &(0x7f0000000ac0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSG0EmKPIHVD4kZR7DiKnaUJPaRnrkhU4gRH/gDOPXHnguDGpRyQ+BGBGiQORjMep25qN6FJ7Cj+fKTRvDdv4u/3NZ336pfGL4CRdT0i9iNiIiI+jYjZ7HouO+Kj9pHc9+Tg/srhwf2VXLRan/wjl7Yn16LraxLXstcsRsQPvhPx49zzcRu7exvL1WplO6vPN2tb843dvVvrteW1ylpls1xeWlxa+OD2++Vz6+tbtYms9OXHv9//xk+TtGayK939OE/trheO4iTGI+J7FxFsCMay/kwMOxFeSj4iXo+It9PnfzbG0u8mAHCVtVqz0ZrtrgMAV10+XQPL5UvZWsBM5POlUnsN742YzlfrjebNu/WdzdX2WtlcFPJ316uVhWytcC4KuaS+mJaf1svH6rcj4rWI+PnkVFovrdSrq8P8hw8AjLBrx+b/f0+2538A4IorDjsBAGDgzP8AMHrM/wAwesz/ADB62vP/1LDTAAAGyPt/ABg95n8AGCnf//jj5GgdZp9/vfrZ7s5G/bNbq5XGRqm2s1JaqW9vldbq9bX0M3tqJ71etV7fWnwvdu7NfXOr0Zxv7O7dqdV3Npt30s/1vlMppHftD6BnAEA/r7316E+5ZEb+cCo9omsvh8JQMwMuWn7YCQBDMzbsBIChsdsXjK4zvMe3PABXRI8tep9R7PULQq1Wq3VxKQEX7MYXrP/DqOpa//e/gGHEWP+H0WX9H0ZXq5U77Z7/cdobAYDLzRo/0Ofn/69n599kPxz40erxOx5eZFYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwuXX2/y1le4HPRD5fKkW8EhFzUcjdXa9WFiLi1Yj442RhMqkvDjlnAOCs8n/NZft/3Zh9d+aZpjevHRUnIuInv/zkF/eWm83tP0RM5P452bnefJhdLw8+ewDgZJ15Oj13vZF/cnB/pXMMMp+/fTsiiu34hwcTcXgUfzzG03MxChEx/a9cVm/Lda1dnMX+g4j4fK/+52ImXQNp73x6PH4S+5VBxJ/qxM8/Ez+f5tY+J38WnzuHXGDUPErGn496PX/5uJ6eez//xXSEOrts/EteauUwHQOfxu+Mf2N9xr/rp43x3u++2y5NPd/2IOKL4xGd2Idd408nfq5P/HdPGf/PX3rz7X5trV9F3Ije8btjzTdrW/ON3b1b67XltcpaZbNcXlpcWvjg9vvl+XSNer7/bPD3D2++2q8t6f90n/jFE/r/1VP2/9f//fSHX3lB/K+/0yt+Pt54QfxkTvzaKeMvT/+22K8tib/ap/8nff9vnjL+47/sPbdtOAAwPI3dvY3larWy/bKFw7N9uYLC/1FI/spegjR6Fr41qFgT0bvpZ++0n+ljTa3WS8XqN2Kcx6obcBkcPfQR8Z9hJwMAAAAAAAAAAAAAAPQ0iN9YGnYfAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLr+FwAA//8Xqc+p") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x0, 0x6, 0x1fc}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @var={0x1, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x61]}}, 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x44d, &(0x7f0000000900)="$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") r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7m33.600789832s ago: executing program 45 (id=6344): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800001f1a0068099b3c0000000000001860000000000000824d086bb227733218120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000ef, 0x1af1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000140000007b8af8ff0000010000000000000000000702fe0fe39fffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r3) 7m29.686621306s ago: executing program 46 (id=6356): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) io_setup(0x8, 0x0) io_getevents(0x0, 0x3, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, 0x0, 0x0) getpeername$inet6(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000000000", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000002040)={0x3, 0xf8, 0x200}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) unshare(0x62040200) 7m28.768796051s ago: executing program 47 (id=6360): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80080) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000200)=0x7ffffffc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x54, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x54}}, 0x0) 7m24.893123803s ago: executing program 48 (id=6370): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt(r0, 0x7, 0x7, &(0x7f0000000000)=""/56, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0x390, 0xf0, 0xffffffff, 0x2a0, 0x390, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv6=@private1, @ipv6=@private0, @port, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv6=@private1, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@multicast1, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x726) 7m7.289229609s ago: executing program 49 (id=6430): io_setup(0x8, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getpeername$inet6(r0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000000000", @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000002040)={0x3, 0xf8, 0x200}) 6m52.49692344s ago: executing program 50 (id=6481): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) socket(0x10, 0x803, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r6, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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") open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40) 6m5.75819883s ago: executing program 51 (id=6668): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x6, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m42.476949506s ago: executing program 52 (id=6788): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x1, 0x70bd2a, 0x25dfdbfd, {0x2, 0x80, 0x80, 0x1, 0x8, 0x0, 0x0, 0x8, 0x2}, [@FRA_SRC={0x8, 0x2, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20004040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) timer_delete(0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x5}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x54}, 0x1, 0xba01}, 0x0) 5m34.474871099s ago: executing program 53 (id=6833): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r6, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0], 0x0, 0xa1, &(0x7f0000000cc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x48, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) openat$cgroup(r6, &(0x7f0000000940)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x22, 0x1b, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0xffff6699}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0xd, 0x1, 0xa, 0x20, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x200, 0x31, &(0x7f00000000c0)=""/49, 0x41100, 0x3c, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000005c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x10, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r0, r3, r4], &(0x7f0000000840)=[{0x4, 0x2, 0x5, 0x8}, {0x1, 0x2, 0x8be8, 0xb}], 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000a00)="f23b8b9b5236d29d4cbe525ae582b27abed2730201ff8de674beaf026a1cfc790c8bf202aad95baea442da7b31bd32e495c8682def9e64c717670170e36ee3145913bcf0c9fe9b8f1fdb", 0x4a) 4m46.159546638s ago: executing program 54 (id=7231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x590, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="227a150dee234231f4a0557a3d7946754f87833172825ffdd78e220b79ce131dbe07e1a44474d8934efc4591d8c7ce8857e4152ebd1c156455bf66fa8c6abbe10777a80f4f641515a4b42d6ec951a9303fb30fcbb8d56d1d3a3c6b21161629692e8c9de181a82199b1127df53823056128ac282a9f131c9c0a156e67673a2158f1022af58891cff1e7811e4d619187e607e58ddcf46ed4283e15a9bf96221cd5514d09b6f4d7eafb5a5c1d8c63bc65d49f498d481b0c0363faadd03a606a3b10e77f052cea913146f3f70ec95adc7acfcec797128a5d71ac373590182309ad8f92"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setreuid(0x0, 0xee00) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0) 4m40.605753863s ago: executing program 55 (id=7261): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x1, 0x0) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m15.193566292s ago: executing program 56 (id=7450): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m0.30950887s ago: executing program 57 (id=7539): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = dup(0xffffffffffffffff) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x14c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xb}, [@IFLA_AF_SPEC={0x12c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x8, 0xd}, {0x8, 0x0, 0x0, 0x0, 0x38}]}}, @AF_INET6={0x40, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x88, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_MPLS={0x4}]}]}, 0x14c}}, 0x0) 3m56.952230492s ago: executing program 6 (id=7549): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 3m56.748092885s ago: executing program 58 (id=7552): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) truncate(&(0x7f0000000000)='./file0\x00', 0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m55.983147966s ago: executing program 6 (id=7559): syz_io_uring_setup(0x10b, &(0x7f0000000140), &(0x7f0000000300)=0x0, &(0x7f0000000280)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0xffffffffffffff11) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$eJzs3M9r034YwPGn6dZ0+7Ifpy/oxQe96CXMelQPVTYQC0q3inoQMpZpaG1HErQVwZw97e8YHr0J4j+w/8LbEGSnnYyszbKs+4Wza2f7fkHJkzz5tE8SUp5PId16uv66uupbq3YgRl7FEAllR2RWXNmTiZe5dpxLtsvdgoRyY+7N9sfFZ88fFkul+bLqQnHpVkFVp698ffv+09VvwX9PPk+bpmzOvtj6Wfi++f/mpa1fS69cX11f641AbV1uNAJ7ueboiutXLdXHNcf2HXXrvuMdyK/WGmtrLbXrK1OTa57j+2rXW2pIS4OG5uOq6mpZlk5N7sZ5GSG5Px5R2SiX7eK5FIMLw/OKdlZEJg7dDZWNwVQEAAAG6fj+30j22ev/je7+X+SU/v9DvNf0l573/1lJ+v+q0+7/A6+l9kvbTff/ONHZ+n/jfIrB38iEqZV7B1KeV5w4ehD9PwAAAAAAAAAAAAAAAAAAAAAA/4KdKJqJomhmd2mISBSvmyKSTa0fMXSknq0fVunrH6VeZnyBT7j+GAKpB/fyIj/CZqVZybSXnfzCg9L8nLalHvzbbjYr2SR/s5PXg/lxmYzzhSPzObl+rZPfzd1/VErn15uVCVk5sfKwV6cAAAAAAIChZ2liNtmYl2R+b1lqSne+PX/vROH+7wNd8/sxuTzWv+MAAAAAAADH81vvqnat5nj9CbJ9/KwzByJnG347MntSRlZETtmnvCgy+BN1KDDlQpQxzMGdnr1hlBHpbBmPvwy67gIAAAAAw2V/PjDoSgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGF39+OuyQR8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFH8DgAA//8sg70h") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nodiscard}, {@usrjquota}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f00000002c0)=[{r5, 0x1666}], 0x1, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) syz_clone(0x2c9a4080, 0x0, 0x500, 0x0, 0x0, 0xfffffffffffffffc) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x41) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c000140000000000000010108000440000000013c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340000000ed"], 0xf4}}, 0x0) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000100)=""/104) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0xc0, 0x0, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014000100"], 0xfc}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 3m55.11775589s ago: executing program 6 (id=7560): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000000000000000c3082989c2c757d9e947d096ba9000000000000000f0ffffff", @ANYRES8, @ANYBLOB, @ANYRES64], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="c9a78e74422d7c924664e8e2848e0757b5aa3509920c8ed0e9f023503d61a785407fcd8923f546d5ad05aab21044fb7c4253cdb5ffa55cacbd619492f9139e55709b382f1762fc6c2fb6aacb11ea0398875f1f305f971eaf8f1e0071e2652574b640587b3cac65b9f4ae72bdd2f1f1dad2dccb957bcf8ff4156fd7af15e59cedb72074c39b6db7969cd035852328116c276a295d1747cade66198f9cfdbf748c", @ANYRESDEC=r2, @ANYBLOB="2302a9d0816f8cf035a8cbde32df4adeb039cf9c2346cc5a67b125c25fb804d34a269875d30c96210c7359e444c3f92d1848d2bf7dbf4b1b69a6d028c76326ef8cad5c", @ANYRES64=r2, @ANYRES32, @ANYRES16=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 3m53.80408998s ago: executing program 4 (id=7562): socket(0x11, 0x3, 0x0) epoll_create1(0x0) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 3m53.571146654s ago: executing program 4 (id=7563): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)) truncate(&(0x7f0000000000)='./file0\x00', 0x5) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m53.317377917s ago: executing program 4 (id=7566): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000040)=@fragment={0x11, 0x0, 0x2, 0x1, 0x0, 0x1f, 0x65}, 0x8) 3m53.249573008s ago: executing program 4 (id=7567): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xfff1, 0xffff}, {0xf, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffa}]}, 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000004000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, 0x0) setns(r8, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m51.566848744s ago: executing program 1 (id=7570): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=0x0, @ANYBLOB="000000000000000000c3082989c2c757d9e947d096ba9000000000000000f0ffffff", @ANYRES8, @ANYBLOB, @ANYRES64], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="c9a78e74422d7c924664e8e2848e0757b5aa3509920c8ed0e9f023503d61a785407fcd8923f546d5ad05aab21044fb7c4253cdb5ffa55cacbd619492f9139e55709b382f1762fc6c2fb6aacb11ea0398875f1f305f971eaf8f1e0071e2652574b640587b3cac65b9f4ae72bdd2f1f1dad2dccb957bcf8ff4156fd7af15e59cedb72074c39b6db7969cd035852328116c276a295d1747cade66198f9cfdbf748c", @ANYRESDEC=r2, @ANYBLOB="2302a9d0816f8cf035a8cbde32df4adeb039cf9c2346cc5a67b125c25fb804d34a269875d30c96210c7359e444c3f92d1848d2bf7dbf4b1b69a6d028c76326ef8cad5c", @ANYRES64=r2, @ANYRES32, @ANYRES16=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 3m50.895325554s ago: executing program 6 (id=7571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xfff1, 0xffff}, {0xf, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffa}]}, 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000004000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, 0x0) setns(r8, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m50.161824536s ago: executing program 4 (id=7572): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000007b3a6d7b850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$dir(0xffffffffffffff9c, 0x0, 0x40200, 0x111) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=0x0, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) 3m48.716282078s ago: executing program 6 (id=7577): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$tipc(0x1e, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socket$kcm(0x2a, 0x2, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x70}, 0x122) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 3m48.511702621s ago: executing program 1 (id=7579): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@float={0x8, 0x0, 0x0, 0x10, 0xc}, @var={0x7, 0x0, 0x0, 0xe, 0x4}, @enum64={0xe, 0x3, 0x0, 0x13, 0x0, 0xb, [{0x7, 0x3, 0x80}, {0x2, 0x4, 0x4}, {0xa, 0x3, 0x2}]}]}}, 0x0, 0x66, 0x0, 0x0, 0xfffffffb, 0x0, @void, @value}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setscheduler(r3, 0x3, &(0x7f00000001c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r6) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) 3m48.365595133s ago: executing program 6 (id=7580): bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) fcntl$getown(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 3m48.365053533s ago: executing program 59 (id=7580): bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) fcntl$getown(r0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 3m47.625334744s ago: executing program 1 (id=7582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8}, 0x18) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = dup(r5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r6, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c00)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0], 0x0, 0xa1, &(0x7f0000000cc0)=[{}, {}], 0x10, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x48, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) openat$cgroup(r6, &(0x7f0000000940)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x22, 0x28, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0xffff6699}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}, @jmp={0x5, 0x0, 0xd, 0x1, 0xa, 0x20, 0x8}]}, &(0x7f0000000000)='syzkaller\x00', 0x200, 0x31, &(0x7f00000000c0)=""/49, 0x41100, 0x3c, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000005c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0x10, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000780)=[r0, r3, r4], &(0x7f0000000840)=[{0x4, 0x2, 0x5, 0x8}, {0x1, 0x2, 0x8be8, 0xb}], 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_opts(r4, 0x0, 0x0, &(0x7f0000000a00)="f23b8b9b5236d29d4cbe525ae582b27abed2730201ff8de674beaf026a1cfc790c8bf202aad95baea442da7b31bd32e495c8682def9e64c717670170e36ee3145913bcf0c9fe9b8f1fdb", 0x4a) 3m46.400271623s ago: executing program 4 (id=7585): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m46.399667243s ago: executing program 60 (id=7585): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m46.062533318s ago: executing program 1 (id=7587): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xfff1, 0xffff}, {0xf, 0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffa}]}, 0x2c}}, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000004000085000000860000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, 0x0) setns(r7, 0x24020000) syz_clone3(&(0x7f0000000300)={0x136820100, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3m43.776508543s ago: executing program 1 (id=7597): syz_io_uring_setup(0x10b, &(0x7f0000000140), &(0x7f0000000300)=0x0, &(0x7f0000000280)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0xffffffffffffff11) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@errors_continue}, {@usrquota}, {@prjquota}, {@usrquota}, {@resuid={'resuid', 0x3d, 0xee00}}, {@usrjquota, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0xffffffff}}, {@nodiscard}, {@usrjquota}]}, 0xff, 0x46e, &(0x7f0000000e40)="$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") r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f00000002c0)=[{r5, 0x1666}], 0x1, 0x0, 0x0, 0x0) readv(r4, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) syz_clone(0x2c9a4080, 0x0, 0x500, 0x0, 0x0, 0xfffffffffffffffc) r7 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x41) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000070000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021340011800a0001006c696d6974000000240002800c00024000000000000000030c000140000000000000010108000440000000013c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000100003800c00008008000340000000ed"], 0xf4}}, 0x0) ioctl$EVIOCGREP(r7, 0x80084503, &(0x7f0000000100)=""/104) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0xc0, 0x0, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014000100"], 0xfc}}, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 3m43.458561918s ago: executing program 1 (id=7599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x4000801) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@tcp6, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1/file0\x00', 0x200010, &(0x7f0000000340)={[], [{@euid_eq}]}, 0xfe, 0x57a, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mknodat$loop(r2, 0x0, 0xc000, 0x0) 3m43.458400818s ago: executing program 61 (id=7599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004080}, 0x4000801) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@tcp6, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1/file0\x00', 0x200010, &(0x7f0000000340)={[], [{@euid_eq}]}, 0xfe, 0x57a, &(0x7f0000000580)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mknodat$loop(r2, 0x0, 0xc000, 0x0) 1m58.672605573s ago: executing program 5 (id=8883): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m58.658843763s ago: executing program 5 (id=8884): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 1m55.59471288s ago: executing program 5 (id=8941): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000300)=0x20, 0x4) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 1m55.54563874s ago: executing program 5 (id=8942): newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000540), 0x2000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@remote}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in=@rand_addr=0x64010102, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0xfffffffd}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, r5, 0x9c3fa077fa966179, 0x70bd26, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4040805}, 0x4000054) 1m55.518657231s ago: executing program 5 (id=8943): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0xa04d}}, {@errors_continue}]}, 0xdf, 0x52e, &(0x7f0000000e00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x5, 0x1, 0x0, r2}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x50, r0, 0x100000000) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f00000001c0)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x0, 0x1, 0xc5, 0x100, @void}}}}}}}}, 0x32) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x200548c5) ioctl$INCFS_IOC_CREATE_FILE(r3, 0xc058671e, &(0x7f0000000180)={{}, {0x3}, 0x23, 0x0, 0x0, &(0x7f0000000080)='./file1\x00', &(0x7f0000000140)='./file1\x00', &(0x7f0000000340)="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", 0x1b2, 0x0, &(0x7f0000000580)={0x2, 0x192, {0x0, 0xc, 0xf9, "0df5e6d7356f95089de1918ce57ee5fb4f0f6e8ad2f8b156f786210d267d0a402cbe6ef06d36e588aa8c3780773f3b33c5e77b7743cf02574e5221f8586a885e08d25d57c1e4c83e8e58e99f1c54a3ababa55f0344dc47d76ada4b911f7f4e2d367a6b5fea942639c40eb0fed5b069d68ff588209069edcf02f4c1c655e4e4ea28abd3aa4f0dc4844505e705775bc82600be75bbbdbcbf600e1f319413ff1402d8347bdff535e3dd17258219d157b32f88b58db0a5403ca8cdd6d919772c3c64fc4d876243efccee6c7283aa0e037f6b81020eb12accf684542f9f3eff447132bfed4242921fa8da5e088ebe66da0f3955f0b06082cd2ead56", 0x8c, "91420994be8ec30401a8ef9c5c4a4c7ed43b77be5994f24c2af0abaa404deffe83db8d30868aff4d71c101ba486c53fd2e2325d14a87f3bd68a49daa8b3a77ce8e8ea05542065ae321e83f82bb5aecad1927060d66dd90662260b60867005d1deb107879e67b93fd284370c8895fa379e0a1fc2f6ac97cb946aecc58fef4865ad1fdf07f7b2bd1e6fb350f14"}, 0x13, "4d3a015f9d9c16b20809345dff5530bc3367b7"}, 0x1b1}) 1m55.421687782s ago: executing program 5 (id=8944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x6}) 1m40.216741215s ago: executing program 62 (id=8944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x18) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r1, 0x6}) 15.953651695s ago: executing program 7 (id=10353): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x7ff, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}, 0x1c) r2 = socket$kcm(0x10, 0x2, 0x4) listen(r0, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f0000000480)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r5, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) chown(&(0x7f0000000340)='./file0\x00', r8, r9) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x21}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 15.067799189s ago: executing program 7 (id=10360): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x800000001}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/18, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) 15.044290439s ago: executing program 7 (id=10362): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10138, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 14.144671603s ago: executing program 7 (id=10375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) (async, rerun: 32) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) (async, rerun: 64) sendfile(r4, r3, 0x0, 0x3ffff) (rerun: 64) sendfile(r4, r3, 0x0, 0x7ffff000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r5, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r6, 0x8, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4c041) r7 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000002c0), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioprio_set$pid(0x1, 0x0, 0x6000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x18) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x5}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 14.028314035s ago: executing program 7 (id=10376): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x0, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x122) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 13.581495842s ago: executing program 7 (id=10384): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 13.581219031s ago: executing program 63 (id=10384): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.205284685s ago: executing program 3 (id=10543): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x387, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x400002c8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000003c0)='./control\x00', 0x21000510) rmdir(&(0x7f0000000100)='./control\x00') r3 = msgget(0x2, 0x0) msgsnd(0xffffffffffffffff, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xff, 0x800) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000200)=""/215) syz_open_procfs(0x0, &(0x7f0000000740)='net/ip6_mr_vif\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2000, 0x2fd, 0x7}, 0x18) r5 = syz_clone(0x4c200, &(0x7f0000000300)="e9a24658d774f346e6b709e59026b9785f76aeb94cfe3150f57a15d952353988d36941b135ce0973b85da3edc03f68bfd2fd7f8f4662844078a480e01a907788a4c468bddf3be5d0aca08ae56e3ba9c9d9c2c4f8506e1c7b127b9fb025c44d6639bb88fd7cd0a2f1c63988ca", 0x6c, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0)="589d2e0e2682aedc4979660cd79ccab3b9a789ed739b1bf4eb571da87df7") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x10, 0x5, 0x354, 0x42, @mcast1, @private2, 0x80, 0x40, 0x7, 0x6}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='svcrdma_decode_short_err\x00', r6}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sched_getattr(r5, &(0x7f0000000500)={0x38}, 0x38, 0x0) 3.334778668s ago: executing program 3 (id=10556): r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xe) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x430, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x130}, 0x1, 0x0, 0x0, 0x400d4}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='kfree\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xffffffff]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x11) rt_sigaction(0x11, &(0x7f0000000480)={0x0, 0x1, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000000)) 3.2376084s ago: executing program 3 (id=10557): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000000bf090000000000005509010000000000852000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)) unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r3 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r3, &(0x7f0000ff9000/0x1000)=nil, 0x5000) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="066fe36dad0c8a", 0x7}, {&(0x7f0000001480)="1bc648f17014cd999c2d9060f42990ece9b4a65a986f423e3bd729339b9f4cb2a89f20221e8cfe8bb143636af8bcf136ca2887dd4475af947f1d3742ff4bfd45558050ee96b3afeac588b902e4bacf87ea4bee5794c59fca425f7dd0db86eff9c51d96c6b6dc69281233807184efd04adfba1b61cb87bdee368aa3632eaa9b19058e4af2c0b0cab2c694990a2e11d63c1582f177233c1ea7d0159c6e9ddf51f789c4533a6eef005ba1c96626955716c3ee6c8d86d8013ef951702a89b62e68cf1737b3708f3b48c01eda2240bb62cdf4ff1ae56c539170a9b4c39e40ae2e969ffcf730f110108761289b3b45d8f0c1d45178eecd1357cea9ae0f6769b47e7e5da2305fea440fd53aabc8a1132718e864a17978d9f60e0dba452cfff2116b8cfdd4b29d1cd9e09ef55cdc356f1d65d502a9195169d4cf34d9c7d70943dc89626cd637df2a3df5d2fc079ddf300b3737729723ebf47f9a3e02ede4736f70c19cd27881f12272b0174a168c77180896401ff0d759302767a1ac1a91030e9e726d4c74fa4b1bd5a50bfbe6c1b3b5f9689739a4335fb25504bfe13ef043bed9e71e6aeaa301179675d41a8ecaee3e1142a9dc96c46f4dfef9a35ca514d5d04c7569c48019cc3cd6a675cc3b55a369aa2b5d59503c039d58ff6430ed52433a60d49e7619d93604ee0abada1e3ba45ee511963f51cab99a3e73b3da411e102217d8cf7ec5fa7a65c6069b9749d89628f5a93f386cb80feb593ca7cbbecd5b9eab424d04c309b381d7cff92a8aa000742bf2d35abefcb3ba4ca743d0bc8a82f10c17829f13eea62dba4cd6d3dd751cb22adeefc52400528e314464b56ab5aa6ac421055338e0145b084c34db2f7e44689901ad86861edb8992b4ee522140c012b85549e9bf10f978bc26f252ef7efbfbcb90a83875fbd89091853a8a191d04b201f7aeecbaf422f66604ef8469f8f22878a96f08b6d8fb96dd364017790c9bcac4013b6ff92d8b25296721b590268659c01dbf497e9b7a97c39395ac56dfb9d113464563e79a2ec34e22b22bc5875c714b3611b4f80a5159410db18aefbaa9413e37092004a40428893fcf54a3a744a57a2e9bbdeb5280526604ffec0874614d575e78566f20299f27a2fcc6a6e00e170178364c1fa97506124779aded29e0aea2c292d051eeeec4cad4086c6cf8d05be1ceebd31702bcb98588f585e345ded031a83c92f683ea979e077e107e0bc9d183ad86a6ccb1b90b6a150679072e7056d326ff8139243bb56a30a94a2e57afde788d57f2021079cd47f1ffb929f9c2d8852dfd7f705425158563814228f94e0fe93869460fa5e9a191a406dd68dc6763e9157be78aa7fb6d46f48056a3f024a46105202b46535eb28cca143c46943424cc2e693344cab7503dce8f7b6d0a95b33aab80e997474d83c80d03f01c0945365969a1fc57fa22e7ce16274055def9bb83e813a0e473f102212d9b75697978911be4f31cd7b78f56f8dcd13b41abdd0b79b5b7c89273bd819e8cd3ea18e91a6eec9fee502655ae6411cd2197e89187c6c03801e39a0b892c387eae498a7d1ae833b14db1cd916783bf201f3f5d7a6ed47a70e1a84b066f43d446d23dddd9aa7414d0b24aaf803291da6340911908a39c48a780bd7eecde885cae0166d5b148bcf5fa2d6be1a93e33191ec4dd2e45acecb675f3227fc2e2565aea19ebf8d2631331ef8ba2262401f1eec57f365bad440165979c020666318d223547a2966403dcfaaaefe03c40cb1bd87e1c03ba428f00b57566df2f1c5a48d57859a89871bc96aae9973adeba3eb388b8916ce80f31bedfc87257d45290001e0f2da14cf1a8bebcbe570dce6f981b6a43e32c9befd238aeda2d71b8524f52ea8d88281afb7cf152be189f63c1370ba350b79871755b66a5fe53e75b77aff071c357115292d3c5fdc95905889f34136b07d252f1cf229416cf6f38034ee4cd88bf0d27b3bfc7c532f2c751c874a596e6d10c781eebf1abed4b1cd2f3258745d954112ebafab6455fda77d1ac6cb1a95c651a6e5ea50c2a8ae1ce456d9e62c3bc0fa3a7230d16dd95f207e9a6695a805ed8fa98f7c2a4e6c1b7955853e02f6b07f53e8765cc0318276419d527421b9bbecb8075f946427c6a529df1f0b60d120cd83846fd7c1a142db3f4d7335432dfac57bb81a2e781a6cf132fa7dfc75bcf588e95fa4850721bd35bb0fdfed0c0d7f49e65d191709609c3ddea9e602c2225e67e7f2ac0d0139e66180e713b6fa38c217a09f532b0aeb79cd2a8b0e7b145ff18a741d4a2b6acb4d046faabe17d5f7e069903adef4b4d56ad10693e7979a15540067d3bcb69613d7809ec47ef93a5ddaa59fa4fd291cb417beabb5ac485f54422b9bb2562385add4bdb9b4327a18a9812fbebfac042c0767e60be12dd3698e9270bafa5eb798d3fdcd7929cd7d42122e3db4e012191e2904d769b53f015ad2ec63015d872a236b8b6740145d886720ace4787588f08694bc0a72297c205ca7849c03255264202377797bd7f9a2eea2731d0b6668ca969d18a21d5739a15ab8ccac642b35405fab2955bb656cce0b94a94d8c5f1a78d51d8b26f5eb763305ee20c3b40fc35954d90b3b2bd26de2b47fba30382396c4fd0c914cdf73d8e96b779057a23a267ef4758a0340c866a2565cdb8aa132ae3d3748c7d429dcffe727d7d8d343a4f9f970a0a14051e37ad11950c982433182a9da21018a67ba4993ee58f6b3282154a4f821dff94891e1bfb919994da522c9abd9effdb9fc3f6bad791fc5b6a0c3e8c9307be40d76646b1114904f1fa5da0740e0ea40f4b0f96eabba2a9e1f10301c1e957148314c763c795ab93ffd2a933c4634e2404d346f46b5fcc4b5edf764253464dc8263779cf0373af27dd642f90fb326d8c1946dd2a1dfdf2a636d478da74a386fec3910b7bddf4960964c45e3976f8ebbc6a2bb30937fb4bc040d2602abdaba6793ccb4585f97fcb1cae8cb13a427712b7e351a4aedcec3e54d4db497fb68664fd7c08a52b92c07564d0c0fcc589e895166cd0dbeb4ec6f4bd5c4da45c7a56ef48e72d409c9fbe49721bf306ccbf35a1cde7ffa47e64d0377b8a174ef3e83e3c08282718b7133ccb070a7427b4c5f8061fefa74470cf60fbaa40d6aef4e346726f45d54ba5741a5698955f18fc89dae9b5cfa915dfc052678a0b6e362809d64c87aefb92ff298f994c03dc40d5938c2ad2ff3e6f8ce9bddace4dbbf70b6c1e4099009f166e96f6f8de464ad9368414bccb28e44a57059c5cd6338c091a0989724964abe2b4ff3f20d68285d69a6b5633d4755fe4fb918a235d3a7a9dd0dcadb1a2306b718c90a9051a07c72bf03226f766215f62078bc4f715dde0e1d87d44af894fa0d03fddc6146f248b42d6281f57ee1f527c3f413e4c3f2a137450ca849b2b712227a7cc07108896213e4ceacc2ea1b845e5a4ccfda156ae5cef3b620dc65480a42582aaacccda7f0d51ba42b80851d62065a64dcbb6d1822d168fa40c50a753fc2eaf95352eb454540092c858d2efb2e3a44917f197e4cdd0aeb79493e4febbede1c3f1555fffae3e8661c6abe6642d2a9f2c3e0f1f047e85f18a2515aa2a66885d8a887a576fa99fe792c90b1d1c39c396d14528f25449528866c98cd2fda38f2afb684ea14dd1902c7e29182d82957442cc70a1e902c785869783c36bb7e93dc2ac913d1e222fe4ae61342ad1b5757660ddec5cf464f97d097e3680ef1d9e9a2e667b3aecd47a0c71dd0bebd1c8cf2ccbed3dcf6d4b449d65b779af1e1b802acd5933d747b104884cea49b6400556252c5ea318c7505bf74bfcf790456a6dfdcbde23981a50e2609731b374c4a9a62553026fe800a0b6c88c0841a7b685597b4cf866c32f86917ef2a0783a23bd782fe87c758af38a01f9b07be8b7a1ba1df28043086164b3d7d39c6eed3561ccfd5f6b469328d1e917fd316f9f03b40e8c45e2b3690a172979a63ab6832c349ad2abf92deb842597455894cbd93b7a63f184680aeb9cc088b3624f1140b342a2a6b86fea4ecfd9acbc07b93654759fdc7d27736c5b09edecde075b1a23ae956af558c9ab6a6b0b6bdd27ef1b7f74c3d1558be4f6d3e53b3baed3b48d92f34c1802e8f13303d7111f6183277a667e343674b1e1ca2d5ea5efd01a37d00dad83937a65255ee45734822ca1592897fa587170c8b2bd07a932cf1886e77e23eef666cad00556a31baef730c438147663fd134a766530c98358252bf99fb5289896d5d7d6ba8d36b3035a9906cfbd24136595df9fd7b484861289ab40459a471659590002964d41aab71210c60ffe7bb48ae27123e215f25f0350f669b77428a8548b2ff1eb307e1fdb99578f35dfc3d4d38896005a8f62193879eb45ea5c24ac2b2c4796ce80fc82808d586119e3a525b2fe8f887c6040adcf88ea436880e23bd9cc061d53b27c7b0e6c72d092812fcdd9fcf352e25126c1dab50bc5bab9279d91fd94ec5c2a1ec539858d363a7e1a65f0efa72de35a82a425e2b08d0250939300c9aab77e516c16616c7557b1ba9479646cd03d12b69b027a6466db028d5268b0cde7d1a59f19fc0d2c4d21051efe120c9501f83780908ff02904a1a143ff482bcd401564a2ff37ce9dc290b0186446b41600a52fee657d6408e2e6f018736519bcbb0cfd7acc4bd76e81f73c3c2b8d81c656cbe1bae65bfa9a72a7f8c273405d3008c42651fef200ba198371f81bdf2dae077be952f3aea56c18492fae19e6914bb87e7dd01955a339729cc0d314c567481fc8dad6e161365761f4d0071907f1b05dfbce10891197e6851cb20884974a6612e8d0bcbc93a48713ad8616ad6467aba8ec7fced64b591f0e9f9194f4a1008282fdf648c6df4dece7dd487b315c0797a8161831295b51e1e96ac457c532707ef11e23da5b5a023f74d171d56929e359c49ae97c22a76e588c56f6820216390559ccc778845537bb0001af97124b2a0e7df32c3a58a2af51ad2b1c07c1347ea07f22e09100a4269eb7f961bec6e8da2f7c260414459aff91aa3c0f8813cbd78a846dc90524ff1beff469765f2b22f44b965b2285d595522a5eabbc6f257153a7a76df4efd557172bb4b8399991b2b50584c1091f05f7083f72e70754c27e7b71ea8f3302562cdf4f7ab73708ea6d1e674bb5161b809874461e70f34bbba3ea62d34011c1708c618d503c90dbb0d9227957fe184fdc972cfb16488c4aea81edfeac027be1e70ec54565f8fcb54020ce4819507df3ca466da64e01c0eea0e45a9620247758dff9e43c2451eaa6929fff769b45d0a05569c675100752a1a34226d6aca7ec103efc5d7a1d470f1d1f9314cef1b6f7e63ebddac5f23a7fcafc033ad13c604daedf7e8460dfaf7baf9bc1fe2957fd734ca761119cf569b4f5372a54ab6c8edda017bfff666cadca62f0c399bf5b290de301312b6811f987757137b7f644cddbb215c5be57cc00efbbb8513e94bd0b10f326a3f4dabc64d19de046c8b5aab4b06e9d6affeb2563007abadb3b367de80a004d2d9a6047b6f462966b3474332d70fc767a32e7ee1732668b19d4f226f99110b470467a11c135acbade8729f541500cfe8104444546f7a5307bcca57c29d395368b4838e226cc107aa769ed11f3265e55019ece9a1e08daf69294b891ef34006a76e06958d75a6f3edc05115f6c028d33faf0d922971dff060bedcec22b75c25c971c6b1aaedb04bf201696cbe8febdc58caac1a23bb5b127039be3e85492770a305f6ecaa30741e20b3fef477bd8cf", 0x1000}], 0x2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) creat(&(0x7f0000000180)='./file0\x00', 0x0) 2.225467675s ago: executing program 0 (id=10567): socket(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x45d, &(0x7f0000000a00)="$eJzs3M9vFFUcAPDvTLtFBGxF/MEPtYrGxh8tBVQOHtBo4gETEz3osWkLQRZqaE2EEAVj8GSMiXfj0X/Bk16M8WTiVe+GhBgugKc1sztDd5fdpV12u9X9fJKB92be9L3vvnnbN/N2G8DQmsz+SSK2R8QfETFeyzYWmKz9d+Pahfmb1y7MJ1GpvPN3Ui13/dqF+aJocd62PDOVRqSfJ7G3Rb3L586fmiuXF8/m+ZmV0x/OLJ87/8LJ03MnFk8snjl45MjhQ7Mvv3TwxZ7EmbXp+p5PlvbtfvP9r9869mVD/E1x9Mhkp4NPVyo9rm6wdtSlk9EBNoR1GYmIrLtK1fE/HiOx2nnj8cZnA20c0FeVSqWyrf3hixXgfyyJxrwhD8Oi+EWf3f8WW/Mk4Gj/ph8Dd/XV2g1QFveNfKsdGY00L1Nqur/tpcmIeO/iP99mW/TnOQQAQIMfs/nP863mf2k8VFfuvnxtaCIi7o+InRHxQETsiogHI6plH46IR9ZZf/Miye3zn/RKV4GtUTb/eyVf22qc/xWzv5gYyXM7qvGXkuMny4sH8tdkKkpbsvxshzp+ev33r9odq5//ZVtWfzEXzNtxZXRL4zkLcytzdxNzvauXIvaMtoo/ubUSkETE7ojY02UdJ5/9fl+7Y3eOv4MerDNVvot4ptb/F6Mp/kLSeX1y5p4oLx6YKa6K2/362+W329V/V/H3QNb/97a8/m/FP5HUr9cur7+Oy39+0faeptvrfyx5t5oey/d9PLeycnY2Yiw5Vmt0/f6Dq+cW+aJ8Fv/U/tbjf2esvhJ7IyK7iB+NiMci4vG87U9ExJMRsb9D/L+89tQH3cffX1n8C6v9f/TO/b+aGIvmPa0TI6d+/qGh0onb4r/Zuf8PV1NT+Z61vP+tpV3dXc0AAADw35NGxPZI0ulb6TSdnq59Xn5XRFpeWl557vjSR2cWat8RmIhIiydd43XPQ2fz2/pa/lJE1D5aUBw/lD83/mZkazU/Pb9UXhh08DDktrUZ/5m/RgbdOqDvfF8LhpfxD8PL+IfhZfzD8Gox/rcOoh3Axmv1+//TAbQD2HhN49+yHwwR9/8wvIx/GF7GPwyl5a1x5y/Jd0wUP6nL0wecKN76ev+To7Sus7ZshldjXf2ebopmbNpEaROOi+JvGq2l8Ma/FwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTDvwEAAP//7hXV/g==") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYBLOB="90f9c77a1d64f77c314c13201023a3b89d1d2a82b8ccfebe4a4e18632222bb5c4b0f13afd7f13c20386d069cd0dd46766867b984e33bfdb956dc25642ce8953f1dce1c4c76ec2e1bcba06430a70d12fee9082a923ed4d512f071a5b9eaa32bb1ddb2061d510135031de897edbb90a57ac2ef050318c75ae6134a9953ebed32cf8a68f7fdd52b479cacda1f3af92be70a46bcfc455e74331bfca2b956d7ae05345b7b00a248d042f17d84ec65f91207", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='ext4_discard_blocks\x00', r1, 0x0, 0x9}, 0xffffffffffffff65) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmmsg$inet(r8, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) 1.853295421s ago: executing program 0 (id=10568): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000840)=@framed={{}, [@snprintf]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d2800128014000180090001006c617374000000000400028010000180060001006c6173740000000008000340000001"], 0xb4}}, 0x20050800) 1.722545883s ago: executing program 3 (id=10570): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/126, 0x7e}, {&(0x7f00000004c0)=""/86, 0x56}, {&(0x7f0000000540)=""/242, 0xf2}], 0x3, 0x0) 1.605697825s ago: executing program 0 (id=10573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) write$binfmt_misc(r2, &(0x7f0000000300), 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r3], 0xfffffffffffffe9a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.568830646s ago: executing program 3 (id=10574): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x44f0) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x4e, 0x3, 0x4a, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, 0x7, 0x40, 0x0, 0x14a0}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', r6, r4, 0x3, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'wg2\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) connect$pppoe(r5, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 1.521981716s ago: executing program 0 (id=10575): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000005c0)='svcsock_tcp_state\x00', r0}, 0x18) creat(&(0x7f0000000080)='./file0\x00', 0xc7) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x6, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) mq_timedreceive(r1, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1.501290497s ago: executing program 0 (id=10576): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3800000940fae471f9a2001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c0016800800", @ANYRES64=r1], 0x38}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000800)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000640)=[{0x0, 0x97ff}, {&(0x7f0000000280)="afefc28912", 0x5}], 0x2}, 0x20000) set_mempolicy(0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r4}, 0x18) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f000042f000/0x4000)=nil, 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000580), 0x1, 0x503, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/4089, 0x4a, 0xff9, 0xa, 0x7ff, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000008f56ec268178256fad01e9fa9c2c3a5c95bea217124198983e8037d897a682f63c7bc9fc3dd8bf4c866c2b902d909c7b9c2e3e5211"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) 1.441123528s ago: executing program 3 (id=10578): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000280)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @typedef={0x0, 0x0, 0x0, 0x5}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f00000002c0)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000300)='syzkaller\x00', 0xfff, 0x26, &(0x7f0000000380)=""/38, 0x40f00, 0x7, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000003c0)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x1ff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000001c0)='mm_page_free\x00', r2, 0x0, 0x6}, 0x18) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)={0x2, 0x400000000000003, 0x20, 0x0, 0x23, 0x0, 0x0, 0x0, [@sadb_key={0x19, 0x8, 0x5d8, 0x0, "26235081d3205d53728bdf07aa22d9ca938e5b319ae49f03326ad1419c9e63134cc1c17c2b85dd5c61c1d3302ed76dd6138758845f597e18c54111a32d0608adf09e4510cbb08098ee309764c2eedfaa8fc868f2b99c737a5de2682d2bbac7290c19825522199ce5dfdca71f08f404d6befc4f7200450e41f0ea87db6ac1a08a0c23f17bd4f07743c1930666c0fc0f4435a7ac3b1928aec187cbfe116fc02edcb347c2cd1e7a4495e4defe2e3d36368675eacbcae462061fa2d238"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x118}}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x1, 0x1f, 0xfe, 0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000000000)="756c5312f593cad7f8b3464a8b877aa9cf78af5357da8c28964d3bf3292e89c292b53fc43659313c399b2c9336b98ad7f7395af10ebce0a0ec484b52f915fc35526f02d3c673a742e539ad3596f0405696433a0e96d90c3209a4fe5eca056f7e6765e3964376a117dca382b0d69f389c11be32a35b2a8180f7258e82145e1b74d4372b2704f919b806350acbdf0dbb3fd76d6611e4b1c00c43a94642e978b27b01a9e0a5386f60f934b7f45808657c844c9699561c597228ab5cd5ee913f6f79235ea437e3268ddadf3489397316e1a0071cae8169e635fb8590ba002eca9075eb3ff0846d34a9e4", 0xe8, r1}, 0x68) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r4) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000000)) 975.321115ms ago: executing program 8 (id=10585): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xdec7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 829.531257ms ago: executing program 8 (id=10587): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x44f0) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x4e, 0x3, 0x4a, @dev={0xfe, 0x80, '\x00', 0x2b}, @mcast2, 0x7, 0x40, 0x0, 0x14a0}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x5, '\x00', r6, r4, 0x3, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'wg2\x00'}}, 0x1e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) connect$pppoe(r5, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 825.877637ms ago: executing program 2 (id=10588): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x4000) 812.249937ms ago: executing program 0 (id=10589): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xe286}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001e80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x8}}}], 0x18}}], 0x1, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(0x0, 0xd931d3864d39ddd8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) dup3(r2, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x40000000c000000}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 754.204898ms ago: executing program 2 (id=10590): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000900000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000000000bf090000000000005509010000000000852000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) r4 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r4, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r4, &(0x7f0000ff9000/0x1000)=nil, 0x5000) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000140)="066fe36dad0c8a", 0x7}, {&(0x7f0000001480)="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", 0x1000}], 0x2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) creat(&(0x7f0000000180)='./file0\x00', 0x0) 532.966221ms ago: executing program 2 (id=10591): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000040)={[{@jqfmt_vfsold}]}, 0xfe, 0x56e, &(0x7f00000011c0)="$eJzs3U1rVFcfAPD/nbz4+jxGEGm7KAEXtVgnJumLhS7ssrRSod3bIbkGycSRzERMKlQXdeOmSKGUCqUfoPsupV+g9EMIrSBFQrvoZsqd3ImjmcnEODrTzu8HV8+5947nnLn3nPmfOSM3gKE1mf1RiHg5Ir5KIg61HBuN/ODkxnnrD6/NZVsS9fonfySR5Pua5yf53wfyzEsR8fOXEScKW8utrq4tlsrldDnPT9WWLk9VV9dOXlwqLaQL6aWZ2dnTb83OvPvO2z1r6+vn/vr247sfnL51bP2bH+8fvp3EmTiYH2ttxzO43pqZjMn8PRmLM0+cON2DwgZJ0u8KsCsjeT8fi2wMOBQjea8H/vu+iIg6MKQS/R+GVDMOaM7tW+bBI52jhjYT+n+pB+9vTIC2tn9047uR2NuYG+1fTx6bGWXz3YkelJ+V8dPvd25nW/TuewiArq7fiIhTo6Nbx78kH/9279QOznmyDOMfvDh3s/jnjXbxT2Ez/ok28c+BNn13N7r3/8L9Ni9LevUtdRb/vdc2/t2McSdG8tz/GjHfWHLhYjnNxrb/R8TxGNuT5bdbzzm9fq/e6Vhr/JdtWfnNWDCvx/3RPY+/Zr5UKz1Lm1s9uBHxStv4N9m8/kmb65+9H+d2WMbR9M6rnY51b//zVf8h4rW21//Rilay/frkVON+mGreFVv9efPoL53K73f7s+u/f/v2TySt67XVpy/j+71/p52Obd/+gx3v//Hk00Z6PN93tVSrLU9HjCcfbd0/8+i1zXzz/Kz9x49tP/61u//3RcRnXVteb9T85pGbHU8dgOv/6/xTXf+nT9z78PPvOpW/s/HvzUbqeL5nJ+PfTiv4LO8dAAAAAAAADJpCY5U1KRQ304VCsbjx+44jsb9QrlRrJy5UVi7Nb6zGTsRYobnSfajl9xDT+e9hm/mZJ/KzEXE4Ir4e2dfIF+cq5fl+Nx4AAAAAAAAAAAAAAAAAAAAGxIEO//8/81v7J4CNv9gaAs+VR37D8Ora/3vxpCdgIPn8h+G1q/6/r/f1AF48n/8wpMb6XQGgn3z+w/DS/2F46f8wvPR/AAAAAAAAAAAAAAAAAAAAAAAAAAAA6KlzZ89mW3394bW5LD9/ZXVlsXLl5HxaXSwurcwV5yrLl4sLlcpCOS3OVZa6/XvlSuXy9EysXJ2qpdXaVHV17fxSZeVS7fzFpdJCej71tCEAAAAAAAAAAAAAAAAAAADYqrq6tlgql9NlCYldJUYHoxoSLYlbPejdfR6YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDFPwEAAP//j6c30Q==") open(&(0x7f0000000140)='./file1\x00', 0x40282, 0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_NAME(0xf, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xb}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) gettid() mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 497.225522ms ago: executing program 8 (id=10592): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 416.362063ms ago: executing program 8 (id=10593): socket(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x45d, &(0x7f0000000a00)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r7}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x7, &(0x7f0000000740)=ANY=[@ANYRES16=r4, @ANYBLOB="90f9c77a1d64f77c314c13201023a3b89d1d2a82b8ccfebe4a4e18632222bb5c4b0f13afd7f13c20386d069cd0dd46766867b984e33bfdb956dc25642ce8953f1dce1c4c76ec2e1bcba06430a70d12fee9082a923ed4d512f071a5b9eaa32bb1ddb2061d510135031de897edbb90a57ac2ef050318c75ae6134a9953ebed32cf8a68f7fdd52b479cacda1f3af92be70a46bcfc455e74331bfca2b956d7ae05345b7b00a248d042f17d84ec65f91207", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='ext4_discard_blocks\x00', r1, 0x0, 0x9}, 0xffffffffffffff65) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmmsg$inet(r8, &(0x7f0000004980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008000) 313.980664ms ago: executing program 9 (id=10594): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r0}) socket$inet6(0xa, 0x3, 0x5) socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) syz_clone3(&(0x7f0000000680)={0x88300000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000004c0), &(0x7f0000000500), {0x20}, &(0x7f0000002480)=""/4096, 0x1000, &(0x7f0000000540)=""/183, &(0x7f0000000640)=[0x0, 0x0], 0x2}, 0x58) r3 = dup3(r2, r1, 0x0) sendmmsg$inet6(r3, &(0x7f0000001580)=[{{&(0x7f0000000180)={0xa, 0x4e22, 0xfff, @mcast2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1400000000000000290000000b0000000008"], 0x18}}], 0x1, 0x0) close$binfmt(r3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000001000000080000000000000020000200", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100a71d000002000000040000000100000000aa2c7faa4a8f0875a887e800000080fa1d10dc8afaae0000000000003ecb11e4af2afbf804ce9b35ef5df53dad2feabe1de560031e32c535745a7a98e15a19b85cece4aa23badc6ad826767017778c9fbdc39df2ac6f758807b7f2f1f9414ae797ec186e9641cfa0dbb9"], 0x50) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000600)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00018008000100030000000c000180080001"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800) 260.228905ms ago: executing program 2 (id=10595): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r2, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}, 0x1ff}], 0x1, 0x40002000, 0x0) write$binfmt_misc(r2, &(0x7f0000000300), 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) fstat(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, 0xffffffffffffffff, 0x0) write$selinux_load(0xffffffffffffffff, &(0x7f0000000900)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r3], 0xfffffffffffffe9a) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 230.452606ms ago: executing program 9 (id=10596): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffff7ffffe9}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000001980)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8fv\x9f\x05\xd1\x984\xc8\x14\xaaa\xe9\x91\x8e\xf9\xc8\xa4e\x00u\xef\xc2\xa5\xe27\xb4\xcds\xf4*I\x8f\x00\x00\x00\x00\x00\x00\x10\xac5\x1a\v\n\xca\x18\xfc\xd3G\xbd\'\xad<\x19O\xa6#\x82\xff \x03\xccA\x9f\x0e@\r\x1cD\x80nbWR\\\xfb\xc0a\xc5\x95P\xe7\xf4fPA\xc8\x03\xaeN\x12u\x91\x18\x17\xab\xc9\xf2\x1d\x96D\xc8\x0ft\x88\xb6{\xf6p\xfaU\x9a\x8f\xb1\xaf\x90\xb2u\'\xdc\x81\f\xe1\\89d\xe9\x06\xb1\xd9\x90\xb4\x9f\x11\'\xac\x14r\xfa\x88\xc9p#~E\x1c\xab\x96\b\xad\f\xe6\xc9\xad\xc9\xa0\f\x83\xb94\x0e[\xcd\xd6\xc9O\xba\xac\xc5\'\xdb\xce\xb4\xa4\xa3\x9a\x1eXk\x92g\x81\x7f\xfdBr\x84\xaf:O\xcf}N\xe1\x91\xaf\xd1\xb7\xd6=\xaf\xc1gf\x9d\x0fl;y\x05\xc0\xd7\xef\x05\xd3\xa0U\x12\xf4\xe2>\xad\x1df\xcf\xaaL,#\x82:\xb6\x8d\x89\xd9i\xcd\x88\x9a\x83Ig\x15m\x15\x1d\xd7m\xa48\xb3\x06\xec\xbe\xa2\xb8\xb6\xc8\xbec\x968\xa3\x00;\x85\x90-\x12\x16\xfa\x86jf\x9c\x17h\fIaUK\xf8\xc3\xf2\xe9\xaa\xb4=H\x8bF\xdb\x18\xcfM\xf8\x93\xb2\xb2F\x017k\xbe\xadr\x8b\xf0T^m0\xe2\xec\x9f\xddi\x82}\xa1\x85\xc1\xb9\x8b\xd9\x12(\xd5\xb3\xa7\xe8\xfen\xf8\xf5\xe4z\x02uC\x8f\x18\xe4D\x90\xfa1\x0e\x1c\xa7\xe0)Z\x86;V\x03\x84\x9b\x97\xe1\x97\xc3\x8bSc\xb4\xc7\xafk\xda\xb6\a\x1d\v\x00\x00\x00\x00\x00\x00\x00\xffbz:\x04\xfa\xb0\xbc\x15b\x1b\x1f\xbc\x17c5 p\x0f\xbb2\xc7k\x1b\xe8\xe3G\xba\x8d\x9e\xf3s\xd7\x13-\x0ec++B\x96\x98\r\x03\x88\xd6b)m\x80h/?i\x82t\xad\x91\xe7\x8b\x10\xed\x02\xd7wmt\x18\x12g\xbcL@\x9f\x98=\xc4\x9d2\xb9\xb5\xd0\x0f\xfc9\xac!\xd7\xb3\xe3n\xfe\xc0S\xa3\xc1\xe3\xd4\xa4kN\xba\xd4F\x97C \x1ckK,T\x03\xb6\x19\x9a\xeb\x11=\x8b\xd6\x86\x10oR\x8d\xcf\xa3\x8a\x01\x92T\x05bE\n{\xf8\xbac\x10\x9a\xee{,\xb4?\x92#{\xe4Mv\xab\x1d\x957\f\xd1') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01dfff"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 212.931516ms ago: executing program 8 (id=10597): socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x34, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xff74, 0x9, 0xf98}]}}]}, 0x64}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000003c0)={0x64, r5, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r6}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x10044084) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) rename(0x0, &(0x7f0000000080)='./file2\x00') r8 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r8, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffbf4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r11, 0x0, 0x4}, 0x18) connect$inet6(r9, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) close(r9) 187.093147ms ago: executing program 2 (id=10598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_enter\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000008c0)={r0, 0x5, 0x401, 0x5}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x468, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x200, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x8000, 0x0, 0x0, 0x0, 0x5, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7b2, 0x2, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffefb, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x8, 0x0, 0x0, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0x800d4, 0xc, 0x5, 0x0, 0xe, 0x0, 0x7f, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x4, 0x20000000, 0xd, 0x0, 0x3, 0x0, 0x0, 0xd, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x48cc45e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x23c00000]}, @TCA_TBF_RATE64={0xc}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}, 0x1}}]}}]}, 0x468}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000380)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d0301000000000095000000000000006926000000000000bf670000000000001507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110e22fff6) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 184.236747ms ago: executing program 9 (id=10599): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000000)=[{}], 0x4000) 107.650788ms ago: executing program 2 (id=10600): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x387, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x400002c8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000003c0)='./control\x00', 0x21000510) rmdir(&(0x7f0000000100)='./control\x00') r3 = msgget(0x2, 0x0) msgsnd(0xffffffffffffffff, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xff, 0x800) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000200)=""/215) syz_open_procfs(0x0, &(0x7f0000000740)='net/ip6_mr_vif\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) r5 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2000, 0x2fd, 0x7}, 0x18) r6 = syz_clone(0x4c200, &(0x7f0000000300)="e9a24658d774f346e6b709e59026b9785f76aeb94cfe3150f57a15d952353988d36941b135ce0973b85da3edc03f68bfd2fd7f8f4662844078a480e01a907788a4c468bddf3be5d0aca08ae56e3ba9c9d9c2c4f8506e1c7b127b9fb025c44d6639bb88fd7cd0a2f1c63988ca", 0x6c, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0)="589d2e0e2682aedc4979660cd79ccab3b9a789ed739b1bf4eb571da87df7") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x10, 0x5, 0x354, 0x42, @mcast1, @private2, 0x80, 0x40, 0x7, 0x6}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='svcrdma_decode_short_err\x00', r7}, 0x18) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TIOCGSOFTCAR(r5, 0x5419, &(0x7f00000005c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sched_getattr(r6, &(0x7f0000000500)={0x38}, 0x38, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) 107.262428ms ago: executing program 9 (id=10601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000029c0)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x480d0) 104.618368ms ago: executing program 8 (id=10602): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x387, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) r1 = inotify_init1(0x80800) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x400002c8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000003c0)='./control\x00', 0x21000510) rmdir(&(0x7f0000000100)='./control\x00') r3 = msgget(0x2, 0x0) msgsnd(0xffffffffffffffff, &(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0xff, 0x800) msgctl$MSG_STAT(r3, 0xb, &(0x7f0000000200)=""/215) syz_open_procfs(0x0, &(0x7f0000000740)='net/ip6_mr_vif\x00') bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = openat2(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x2000, 0x2fd, 0x7}, 0x18) r5 = syz_clone(0x4c200, &(0x7f0000000300)="e9a24658d774f346e6b709e59026b9785f76aeb94cfe3150f57a15d952353988d36941b135ce0973b85da3edc03f68bfd2fd7f8f4662844078a480e01a907788a4c468bddf3be5d0aca08ae56e3ba9c9d9c2c4f8506e1c7b127b9fb025c44d6639bb88fd7cd0a2f1c63988ca", 0x6c, &(0x7f0000000380), &(0x7f0000000400), &(0x7f00000004c0)="589d2e0e2682aedc4979660cd79ccab3b9a789ed739b1bf4eb571da87df7") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0x10, 0x5, 0x354, 0x42, @mcast1, @private2, 0x80, 0x40, 0x7, 0x6}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000640)='svcrdma_decode_short_err\x00', r6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) sched_getattr(r5, &(0x7f0000000500)={0x38}, 0x38, 0x0) 61.322439ms ago: executing program 9 (id=10603): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 0s ago: executing program 9 (id=10604): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): T4985] CPU: 1 UID: 0 PID: 4985 Comm: syz.3.9475 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1403.503993][ T4985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1403.504082][ T4985] Call Trace: [ 1403.504092][ T4985] [ 1403.504101][ T4985] __dump_stack+0x1d/0x30 [ 1403.504128][ T4985] dump_stack_lvl+0xe8/0x140 [ 1403.504151][ T4985] dump_stack+0x15/0x1b [ 1403.504169][ T4985] should_fail_ex+0x265/0x280 [ 1403.504197][ T4985] should_failslab+0x8c/0xb0 [ 1403.504233][ T4985] kmem_cache_alloc_noprof+0x50/0x310 [ 1403.504288][ T4985] ? getname_flags+0x80/0x3b0 [ 1403.504371][ T4985] getname_flags+0x80/0x3b0 [ 1403.504392][ T4985] do_sys_openat2+0x60/0x110 [ 1403.504423][ T4985] __x64_sys_openat+0xf2/0x120 [ 1403.504488][ T4985] x64_sys_call+0x1af/0x2fb0 [ 1403.504514][ T4985] do_syscall_64+0xd2/0x200 [ 1403.504532][ T4985] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1403.504560][ T4985] ? clear_bhb_loop+0x40/0x90 [ 1403.504612][ T4985] ? clear_bhb_loop+0x40/0x90 [ 1403.504699][ T4985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.504720][ T4985] RIP: 0033:0x7fc818d8e929 [ 1403.504736][ T4985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1403.504756][ T4985] RSP: 002b:00007fc8173f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1403.504779][ T4985] RAX: ffffffffffffffda RBX: 00007fc818fb5fa0 RCX: 00007fc818d8e929 [ 1403.504794][ T4985] RDX: 0000000000002040 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1403.504822][ T4985] RBP: 00007fc8173f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.504837][ T4985] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000001 [ 1403.504852][ T4985] R13: 0000000000000000 R14: 00007fc818fb5fa0 R15: 00007ffcbd244e28 [ 1403.504872][ T4985] [ 1404.862418][ T5040] bond1: entered promiscuous mode [ 1404.867554][ T5040] bond1: entered allmulticast mode [ 1404.935135][ T5040] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1404.959324][ T5040] bond1 (unregistering): Released all slaves [ 1404.980618][ T5042] vlan2: entered allmulticast mode [ 1405.142256][ T5055] 9pnet_fd: Insufficient options for proto=fd [ 1405.150226][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 1405.150252][ T29] audit: type=1326 audit(2000000705.030:8540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.0.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1405.177290][ T5055] SELinux: Context system_u:object is not valid (left unmapped). [ 1405.198414][ T29] audit: type=1326 audit(2000000705.030:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.0.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1405.221995][ T29] audit: type=1326 audit(2000000705.030:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.0.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1405.245430][ T29] audit: type=1326 audit(2000000705.030:8543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.0.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1405.268870][ T29] audit: type=1326 audit(2000000705.030:8544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.0.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1405.292360][ T29] audit: type=1326 audit(2000000705.030:8545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.0.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1405.315729][ T29] audit: type=1326 audit(2000000705.030:8546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.0.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1405.339218][ T29] audit: type=1326 audit(2000000705.030:8547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.0.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1405.362558][ T29] audit: type=1326 audit(2000000705.030:8548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.0.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1405.386146][ T29] audit: type=1326 audit(2000000705.030:8549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5054 comm="syz.0.9501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1405.540011][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9506'. [ 1405.592178][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9506'. [ 1405.603664][ T5065] bond1: entered promiscuous mode [ 1405.608886][ T5065] bond1: entered allmulticast mode [ 1405.631301][ T5065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1405.664733][ T5065] bond1 (unregistering): Released all slaves [ 1405.696621][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9506'. [ 1405.748564][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9506'. [ 1405.815323][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9506'. [ 1405.942509][ T5069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9506'. [ 1406.142069][ T5088] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1407.350176][ T5141] 9pnet_fd: Insufficient options for proto=fd [ 1408.440177][ T5174] bond1: entered promiscuous mode [ 1408.445311][ T5174] bond1: entered allmulticast mode [ 1408.493878][ T5174] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1408.526560][ T5174] bond1 (unregistering): Released all slaves [ 1408.542299][ T5180] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9547'. [ 1408.560813][ T5179] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1408.568061][ T5180] bridge_slave_0: left promiscuous mode [ 1408.573824][ T5180] bridge0: port 1(bridge_slave_0) entered disabled state [ 1408.650950][ T5186] 9pnet_fd: Insufficient options for proto=fd [ 1408.791195][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9556'. [ 1408.800836][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9556'. [ 1408.855170][ T5199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9556'. [ 1409.909666][ T5227] wireguard0: entered promiscuous mode [ 1409.915248][ T5227] wireguard0: entered allmulticast mode [ 1410.096780][ T5224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.107910][ T5224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.136499][ T5231] FAULT_INJECTION: forcing a failure. [ 1410.136499][ T5231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.149915][ T5231] CPU: 1 UID: 0 PID: 5231 Comm: syz.7.9568 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1410.149969][ T5231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1410.149984][ T5231] Call Trace: [ 1410.149992][ T5231] [ 1410.150001][ T5231] __dump_stack+0x1d/0x30 [ 1410.150054][ T5231] dump_stack_lvl+0xe8/0x140 [ 1410.150075][ T5231] dump_stack+0x15/0x1b [ 1410.150094][ T5231] should_fail_ex+0x265/0x280 [ 1410.150129][ T5231] should_fail+0xb/0x20 [ 1410.150183][ T5231] should_fail_usercopy+0x1a/0x20 [ 1410.150246][ T5231] _copy_from_user+0x1c/0xb0 [ 1410.150272][ T5231] ___sys_sendmsg+0xc1/0x1d0 [ 1410.150321][ T5231] __x64_sys_sendmsg+0xd4/0x160 [ 1410.150358][ T5231] x64_sys_call+0x2999/0x2fb0 [ 1410.150453][ T5231] do_syscall_64+0xd2/0x200 [ 1410.150471][ T5231] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1410.150496][ T5231] ? clear_bhb_loop+0x40/0x90 [ 1410.150548][ T5231] ? clear_bhb_loop+0x40/0x90 [ 1410.150567][ T5231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.150588][ T5231] RIP: 0033:0x7f80d39ce929 [ 1410.150604][ T5231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.150621][ T5231] RSP: 002b:00007f80d2037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1410.150714][ T5231] RAX: ffffffffffffffda RBX: 00007f80d3bf5fa0 RCX: 00007f80d39ce929 [ 1410.150730][ T5231] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1410.150742][ T5231] RBP: 00007f80d2037090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.150753][ T5231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.150826][ T5231] R13: 0000000000000000 R14: 00007f80d3bf5fa0 R15: 00007ffe72feb8d8 [ 1410.150847][ T5231] [ 1410.153057][ T5233] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1410.337114][ T5240] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1410.358023][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 1410.358047][ T29] audit: type=1400 audit(2000000710.230:8726): avc: denied { setopt } for pid=5232 comm="syz.9.9569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1410.384864][ T5233] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 1410.528111][ T29] audit: type=1326 audit(2000000710.400:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818d8e929 code=0x7ffc0000 [ 1410.551850][ T29] audit: type=1326 audit(2000000710.400:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818d8e929 code=0x7ffc0000 [ 1410.584933][ T29] audit: type=1326 audit(2000000710.440:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc818d8e929 code=0x7ffc0000 [ 1410.608536][ T29] audit: type=1326 audit(2000000710.440:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818d8e929 code=0x7ffc0000 [ 1410.632211][ T29] audit: type=1326 audit(2000000710.440:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818d8e929 code=0x7ffc0000 [ 1410.650042][ T5261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.655817][ T29] audit: type=1326 audit(2000000710.440:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc818d8e929 code=0x7ffc0000 [ 1410.666008][ T5261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1410.687819][ T29] audit: type=1326 audit(2000000710.440:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818d8e929 code=0x7ffc0000 [ 1410.719259][ T29] audit: type=1326 audit(2000000710.440:8734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc818d8e929 code=0x7ffc0000 [ 1410.742773][ T29] audit: type=1326 audit(2000000710.440:8735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5256 comm="syz.3.9578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc818d8e929 code=0x7ffc0000 [ 1410.821084][ T5265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1410.829960][ T5265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1411.812983][ T5276] 9pnet_fd: Insufficient options for proto=fd [ 1413.078959][ T5301] 9pnet_fd: Insufficient options for proto=fd [ 1413.114353][ T5303] 9pnet_fd: Insufficient options for proto=fd [ 1413.134655][ T5305] wireguard0: entered promiscuous mode [ 1413.140281][ T5305] wireguard0: entered allmulticast mode [ 1413.427282][ T5332] 9pnet_fd: Insufficient options for proto=fd [ 1413.537739][ T5341] FAULT_INJECTION: forcing a failure. [ 1413.537739][ T5341] name failslab, interval 1, probability 0, space 0, times 0 [ 1413.550506][ T5341] CPU: 0 UID: 0 PID: 5341 Comm: syz.9.9611 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1413.550602][ T5341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1413.550616][ T5341] Call Trace: [ 1413.550625][ T5341] [ 1413.550635][ T5341] __dump_stack+0x1d/0x30 [ 1413.550697][ T5341] dump_stack_lvl+0xe8/0x140 [ 1413.550778][ T5341] dump_stack+0x15/0x1b [ 1413.550798][ T5341] should_fail_ex+0x265/0x280 [ 1413.550834][ T5341] should_failslab+0x8c/0xb0 [ 1413.550941][ T5341] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 1413.550972][ T5341] ? sock_alloc_inode+0x34/0xa0 [ 1413.551054][ T5341] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1413.551103][ T5341] sock_alloc_inode+0x34/0xa0 [ 1413.551126][ T5341] alloc_inode+0x40/0x170 [ 1413.551249][ T5341] do_accept+0xa0/0x3a0 [ 1413.551273][ T5341] ? vfs_write+0x75e/0x8e0 [ 1413.551306][ T5341] __sys_accept4+0xbf/0x140 [ 1413.551396][ T5341] __x64_sys_accept+0x42/0x50 [ 1413.551423][ T5341] x64_sys_call+0x2f50/0x2fb0 [ 1413.551444][ T5341] do_syscall_64+0xd2/0x200 [ 1413.551462][ T5341] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1413.551496][ T5341] ? clear_bhb_loop+0x40/0x90 [ 1413.551591][ T5341] ? clear_bhb_loop+0x40/0x90 [ 1413.551664][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.551685][ T5341] RIP: 0033:0x7fa39ed1e929 [ 1413.551701][ T5341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1413.551782][ T5341] RSP: 002b:00007fa39d387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 1413.551806][ T5341] RAX: ffffffffffffffda RBX: 00007fa39ef45fa0 RCX: 00007fa39ed1e929 [ 1413.551822][ T5341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1413.551836][ T5341] RBP: 00007fa39d387090 R08: 0000000000000000 R09: 0000000000000000 [ 1413.551850][ T5341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1413.551864][ T5341] R13: 0000000000000000 R14: 00007fa39ef45fa0 R15: 00007fffddd0ee98 [ 1413.551886][ T5341] [ 1413.763984][ T5344] __nla_validate_parse: 11 callbacks suppressed [ 1413.764004][ T5344] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 1413.779281][ T5344] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 1413.787808][ T5344] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1414.047693][ T5368] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 1414.056407][ T5368] netlink: 52 bytes leftover after parsing attributes in process `+}[@'. [ 1414.065058][ T5368] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 1414.082520][ T5371] ieee802154 phy0 wpan0: encryption failed: -22 [ 1414.143580][ T5373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.152548][ T5373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.592496][ T5382] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1414.644447][ T5382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9631'. [ 1414.712270][ T5382] bridge_slave_1: left allmulticast mode [ 1414.718011][ T5382] bridge_slave_1: left promiscuous mode [ 1414.724031][ T5382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.819381][ T5382] bridge_slave_0: left promiscuous mode [ 1414.825216][ T5382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.041435][ T5399] FAULT_INJECTION: forcing a failure. [ 1415.041435][ T5399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.054859][ T5399] CPU: 1 UID: 0 PID: 5399 Comm: syz.7.9638 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1415.054920][ T5399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1415.054934][ T5399] Call Trace: [ 1415.054943][ T5399] [ 1415.055032][ T5399] __dump_stack+0x1d/0x30 [ 1415.055056][ T5399] dump_stack_lvl+0xe8/0x140 [ 1415.055151][ T5399] dump_stack+0x15/0x1b [ 1415.055169][ T5399] should_fail_ex+0x265/0x280 [ 1415.055200][ T5399] should_fail+0xb/0x20 [ 1415.055286][ T5399] should_fail_usercopy+0x1a/0x20 [ 1415.055387][ T5399] _copy_from_user+0x1c/0xb0 [ 1415.055407][ T5399] ___sys_sendmsg+0xc1/0x1d0 [ 1415.055450][ T5399] __x64_sys_sendmsg+0xd4/0x160 [ 1415.055518][ T5399] x64_sys_call+0x2999/0x2fb0 [ 1415.055540][ T5399] do_syscall_64+0xd2/0x200 [ 1415.055557][ T5399] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1415.055585][ T5399] ? clear_bhb_loop+0x40/0x90 [ 1415.055642][ T5399] ? clear_bhb_loop+0x40/0x90 [ 1415.055663][ T5399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.055684][ T5399] RIP: 0033:0x7f80d39ce929 [ 1415.055702][ T5399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.055768][ T5399] RSP: 002b:00007f80d2037038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1415.055788][ T5399] RAX: ffffffffffffffda RBX: 00007f80d3bf5fa0 RCX: 00007f80d39ce929 [ 1415.055879][ T5399] RDX: 0000000000000000 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 1415.055904][ T5399] RBP: 00007f80d2037090 R08: 0000000000000000 R09: 0000000000000000 [ 1415.055915][ T5399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1415.055927][ T5399] R13: 0000000000000000 R14: 00007f80d3bf5fa0 R15: 00007ffe72feb8d8 [ 1415.055989][ T5399] [ 1415.262054][ T5402] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1415.474272][ T5421] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1415.629949][ T5426] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1415.640077][ T5426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9645'. [ 1416.022955][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 1416.023002][ T29] audit: type=1326 audit(2000000715.900:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1416.058449][ T29] audit: type=1326 audit(2000000715.930:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1416.082096][ T29] audit: type=1326 audit(2000000715.930:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1416.105685][ T29] audit: type=1326 audit(2000000715.930:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5435 comm="syz.2.9651" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1416.182902][ T5440] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1416.305950][ T5450] netlink: 'syz.0.9657': attribute type 39 has an invalid length. [ 1416.519082][ T29] audit: type=1326 audit(2000000716.390:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1416.548319][ T29] audit: type=1326 audit(2000000716.420:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1416.572040][ T29] audit: type=1326 audit(2000000716.420:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1416.577023][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9661'. [ 1416.595935][ T29] audit: type=1326 audit(2000000716.420:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1416.628759][ T29] audit: type=1326 audit(2000000716.420:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1416.652714][ T29] audit: type=1326 audit(2000000716.420:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5454 comm="syz.9.9658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1416.652783][ T5461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9661'. [ 1416.760899][ T5470] FAULT_INJECTION: forcing a failure. [ 1416.760899][ T5470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1416.774280][ T5470] CPU: 0 UID: 0 PID: 5470 Comm: syz.0.9664 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1416.774311][ T5470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1416.774324][ T5470] Call Trace: [ 1416.774333][ T5470] [ 1416.774342][ T5470] __dump_stack+0x1d/0x30 [ 1416.774368][ T5470] dump_stack_lvl+0xe8/0x140 [ 1416.774382][ T5470] dump_stack+0x15/0x1b [ 1416.774393][ T5470] should_fail_ex+0x265/0x280 [ 1416.774427][ T5470] should_fail+0xb/0x20 [ 1416.774444][ T5470] should_fail_usercopy+0x1a/0x20 [ 1416.774498][ T5470] _copy_from_user+0x1c/0xb0 [ 1416.774513][ T5470] do_ipv6_setsockopt+0x220/0x22e0 [ 1416.774571][ T5470] ? kstrtoull+0x111/0x140 [ 1416.774598][ T5470] ? __rcu_read_unlock+0x4f/0x70 [ 1416.774635][ T5470] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1416.774660][ T5470] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 1416.774677][ T5470] ipv6_setsockopt+0x59/0x130 [ 1416.774692][ T5470] sctp_setsockopt+0x116/0xe30 [ 1416.774711][ T5470] sock_common_setsockopt+0x66/0x80 [ 1416.774798][ T5470] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1416.774818][ T5470] __sys_setsockopt+0x181/0x200 [ 1416.774888][ T5470] __x64_sys_setsockopt+0x64/0x80 [ 1416.774988][ T5470] x64_sys_call+0x2bd5/0x2fb0 [ 1416.775011][ T5470] do_syscall_64+0xd2/0x200 [ 1416.775108][ T5470] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1416.775126][ T5470] ? clear_bhb_loop+0x40/0x90 [ 1416.775140][ T5470] ? clear_bhb_loop+0x40/0x90 [ 1416.775164][ T5470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.775220][ T5470] RIP: 0033:0x7f6d5144e929 [ 1416.775233][ T5470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1416.775245][ T5470] RSP: 002b:00007f6d4fab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1416.775261][ T5470] RAX: ffffffffffffffda RBX: 00007f6d51675fa0 RCX: 00007f6d5144e929 [ 1416.775269][ T5470] RDX: 0000000000000039 RSI: 0000000000000029 RDI: 0000000000000006 [ 1416.775278][ T5470] RBP: 00007f6d4fab7090 R08: 0000000000000008 R09: 0000000000000000 [ 1416.775286][ T5470] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1416.775357][ T5470] R13: 0000000000000000 R14: 00007f6d51675fa0 R15: 00007ffe73a42048 [ 1416.775370][ T5470] [ 1417.112240][ T5474] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1417.120428][ T5482] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1417.128392][ T5482] bridge_slave_1: left allmulticast mode [ 1417.134266][ T5482] bridge_slave_1: left promiscuous mode [ 1417.140038][ T5482] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.156282][ T5482] bridge_slave_0: left promiscuous mode [ 1417.162253][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.023810][ T5512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1418.032422][ T5512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1418.505121][ T5522] 9pnet_fd: Insufficient options for proto=fd [ 1418.599226][ T5530] 9pnet_fd: Insufficient options for proto=fd [ 1419.112784][ T5551] 9pnet_fd: Insufficient options for proto=fd [ 1419.299738][ T5562] __nla_validate_parse: 5 callbacks suppressed [ 1419.299758][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9699'. [ 1419.317047][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9699'. [ 1419.353090][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9699'. [ 1419.364223][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9699'. [ 1419.572941][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9699'. [ 1419.592481][ T5562] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9699'. [ 1419.889544][ T5577] 9pnet_fd: Insufficient options for proto=fd [ 1419.959891][ T5582] 9pnet_fd: Insufficient options for proto=fd [ 1420.233904][ T5598] ALSA: seq fatal error: cannot create timer (-19) [ 1420.503087][ T5606] 9pnet_fd: Insufficient options for proto=fd [ 1420.760792][ T5626] loop0: detected capacity change from 0 to 164 [ 1420.771994][ T5626] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 1420.791869][ T5621] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1420.856779][ T5638] netlink: 'syz.2.9731': attribute type 27 has an invalid length. [ 1421.128765][ T5638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1421.140501][ T5638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1421.383779][ T5638] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.392967][ T5638] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.401950][ T5638] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.410918][ T5638] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.597554][ T5638] vlan2: left allmulticast mode [ 1421.602733][ T5638] bridge_slave_0: left allmulticast mode [ 1421.762287][ T5655] 9pnet_fd: Insufficient options for proto=fd [ 1421.763438][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.776581][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.798298][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 1421.798317][ T29] audit: type=1326 audit(2000000721.670:9250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.0.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1421.828210][ T29] audit: type=1326 audit(2000000721.670:9251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.0.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1421.851801][ T29] audit: type=1326 audit(2000000721.670:9252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.0.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1421.875405][ T29] audit: type=1326 audit(2000000721.670:9253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.0.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1421.875450][ T5641] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1421.899068][ T29] audit: type=1326 audit(2000000721.670:9254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.0.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1421.938125][ T29] audit: type=1326 audit(2000000721.670:9255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.0.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1421.961790][ T29] audit: type=1326 audit(2000000721.670:9256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.0.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1421.985343][ T29] audit: type=1326 audit(2000000721.670:9257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.0.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1422.008849][ T29] audit: type=1326 audit(2000000721.670:9258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.0.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1422.032337][ T29] audit: type=1326 audit(2000000721.670:9259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5654 comm="syz.0.9734" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1422.124382][ T5662] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 1422.186604][ T5667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1422.272395][ T5672] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1422.285145][ T5672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9741'. [ 1422.328767][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9744'. [ 1423.132308][ T5694] 9pnet_fd: Insufficient options for proto=fd [ 1423.459257][ T5714] FAULT_INJECTION: forcing a failure. [ 1423.459257][ T5714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1423.472469][ T5714] CPU: 0 UID: 0 PID: 5714 Comm: syz.0.9757 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1423.472497][ T5714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1423.472517][ T5714] Call Trace: [ 1423.472562][ T5714] [ 1423.472573][ T5714] __dump_stack+0x1d/0x30 [ 1423.472596][ T5714] dump_stack_lvl+0xe8/0x140 [ 1423.472619][ T5714] dump_stack+0x15/0x1b [ 1423.472638][ T5714] should_fail_ex+0x265/0x280 [ 1423.472675][ T5714] should_fail+0xb/0x20 [ 1423.472706][ T5714] should_fail_usercopy+0x1a/0x20 [ 1423.472788][ T5714] _copy_from_user+0x1c/0xb0 [ 1423.472808][ T5714] ___sys_sendmsg+0xc1/0x1d0 [ 1423.472857][ T5714] __x64_sys_sendmsg+0xd4/0x160 [ 1423.472895][ T5714] x64_sys_call+0x2999/0x2fb0 [ 1423.473030][ T5714] do_syscall_64+0xd2/0x200 [ 1423.473052][ T5714] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1423.473082][ T5714] ? clear_bhb_loop+0x40/0x90 [ 1423.473103][ T5714] ? clear_bhb_loop+0x40/0x90 [ 1423.473154][ T5714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.473176][ T5714] RIP: 0033:0x7f6d5144e929 [ 1423.473192][ T5714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1423.473213][ T5714] RSP: 002b:00007f6d4fab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1423.473236][ T5714] RAX: ffffffffffffffda RBX: 00007f6d51675fa0 RCX: 00007f6d5144e929 [ 1423.473252][ T5714] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 1423.473290][ T5714] RBP: 00007f6d4fab7090 R08: 0000000000000000 R09: 0000000000000000 [ 1423.473301][ T5714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1423.473313][ T5714] R13: 0000000000000000 R14: 00007f6d51675fa0 R15: 00007ffe73a42048 [ 1423.473330][ T5714] [ 1423.718598][ T5718] loop0: detected capacity change from 0 to 256 [ 1423.758676][ T5718] FAT-fs (loop0): codepage cp950 not found [ 1424.034713][ T5723] 9pnet_fd: Insufficient options for proto=fd [ 1424.362218][ T5732] 9pnet_fd: Insufficient options for proto=fd [ 1424.879149][ T5741] __nla_validate_parse: 7 callbacks suppressed [ 1424.879180][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9768'. [ 1424.914185][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9768'. [ 1424.946100][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9768'. [ 1424.959651][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9768'. [ 1425.000688][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9768'. [ 1425.005543][ T5744] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1425.019122][ T5741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9768'. [ 1425.121575][ T5744] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 1425.143165][ T5750] netlink: 'syz.2.9770': attribute type 4 has an invalid length. [ 1425.172397][ T5750] netlink: 'syz.2.9770': attribute type 4 has an invalid length. [ 1425.189755][ T5752] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 1425.209659][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9772'. [ 1425.238639][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9772'. [ 1425.270502][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9772'. [ 1425.400041][ T5766] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1425.715282][ T5772] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 1426.297172][ T5795] 9pnet_fd: Insufficient options for proto=fd [ 1426.516001][ T5800] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1426.563889][ T5805] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1427.075763][ T5833] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1427.567215][ T5847] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1427.578078][ T5853] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1427.758152][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 1427.758206][ T29] audit: type=1326 audit(2000000727.630:9386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.7.9808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1427.788191][ T29] audit: type=1326 audit(2000000727.630:9387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.7.9808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1427.900845][ T29] audit: type=1326 audit(2000000727.710:9388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.7.9808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1427.924482][ T29] audit: type=1326 audit(2000000727.710:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.7.9808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1427.947932][ T29] audit: type=1326 audit(2000000727.710:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.7.9808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1427.971355][ T29] audit: type=1326 audit(2000000727.710:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.7.9808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1427.995126][ T29] audit: type=1326 audit(2000000727.710:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.7.9808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1428.018543][ T29] audit: type=1326 audit(2000000727.710:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.7.9808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1428.042047][ T29] audit: type=1326 audit(2000000727.710:9394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.7.9808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1428.065511][ T29] audit: type=1326 audit(2000000727.710:9395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5865 comm="syz.7.9808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1428.101689][ T5868] 9pnet_fd: Insufficient options for proto=fd [ 1428.240320][ T5877] 9pnet_fd: Insufficient options for proto=fd [ 1428.806454][ T5894] ALSA: seq fatal error: cannot create timer (-19) [ 1429.013381][ T5897] ALSA: seq fatal error: cannot create timer (-19) [ 1429.360493][ T5909] 9pnet_fd: Insufficient options for proto=fd [ 1429.525838][ T5920] 9pnet_fd: Insufficient options for proto=fd [ 1430.001573][ T5928] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1430.113490][ T5932] __nla_validate_parse: 33 callbacks suppressed [ 1430.113509][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9828'. [ 1430.162115][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9828'. [ 1430.178533][ T5931] ALSA: seq fatal error: cannot create timer (-19) [ 1430.227174][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9828'. [ 1430.278520][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9828'. [ 1430.345873][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9828'. [ 1430.345960][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9828'. [ 1430.518517][ T5940] netlink: 'syz.2.9833': attribute type 3 has an invalid length. [ 1430.570130][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9836'. [ 1430.570189][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9836'. [ 1430.599883][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9836'. [ 1430.599942][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9836'. [ 1431.204644][ T5973] 9pnet_fd: Insufficient options for proto=fd [ 1431.263337][ T5979] 9pnet_fd: Insufficient options for proto=fd [ 1431.340093][ T5986] 9pnet_fd: Insufficient options for proto=fd [ 1431.349335][ T5988] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1431.356663][ T5988] bridge_slave_1: left allmulticast mode [ 1431.362454][ T5988] bridge_slave_1: left promiscuous mode [ 1431.368200][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 1431.377216][ T5989] 9pnet_fd: Insufficient options for proto=fd [ 1431.384622][ T5988] bridge_slave_0: left promiscuous mode [ 1431.390356][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 1431.567665][ T6008] loop0: detected capacity change from 0 to 256 [ 1431.577853][ T6008] FAULT_INJECTION: forcing a failure. [ 1431.577853][ T6008] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.590666][ T6008] CPU: 0 UID: 0 PID: 6008 Comm: syz.0.9856 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1431.590697][ T6008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1431.590722][ T6008] Call Trace: [ 1431.590729][ T6008] [ 1431.590737][ T6008] __dump_stack+0x1d/0x30 [ 1431.590760][ T6008] dump_stack_lvl+0xe8/0x140 [ 1431.590783][ T6008] dump_stack+0x15/0x1b [ 1431.590811][ T6008] should_fail_ex+0x265/0x280 [ 1431.590920][ T6008] should_failslab+0x8c/0xb0 [ 1431.590946][ T6008] kmem_cache_alloc_noprof+0x50/0x310 [ 1431.590969][ T6008] ? getname_flags+0x80/0x3b0 [ 1431.590991][ T6008] getname_flags+0x80/0x3b0 [ 1431.591041][ T6008] do_sys_openat2+0x60/0x110 [ 1431.591073][ T6008] __x64_sys_openat+0xf2/0x120 [ 1431.591101][ T6008] x64_sys_call+0x1af/0x2fb0 [ 1431.591120][ T6008] do_syscall_64+0xd2/0x200 [ 1431.591175][ T6008] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1431.591361][ T6008] ? clear_bhb_loop+0x40/0x90 [ 1431.591386][ T6008] ? clear_bhb_loop+0x40/0x90 [ 1431.591408][ T6008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.591433][ T6008] RIP: 0033:0x7f6d5144e929 [ 1431.591526][ T6008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1431.591544][ T6008] RSP: 002b:00007f6d4fab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1431.591586][ T6008] RAX: ffffffffffffffda RBX: 00007f6d51675fa0 RCX: 00007f6d5144e929 [ 1431.591599][ T6008] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1431.591613][ T6008] RBP: 00007f6d4fab7090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.591628][ T6008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.591643][ T6008] R13: 0000000000000000 R14: 00007f6d51675fa0 R15: 00007ffe73a42048 [ 1431.591662][ T6008] [ 1431.597925][ T6005] 9pnet_fd: Insufficient options for proto=fd [ 1432.095451][ T6033] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1432.142921][ T6035] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1432.325779][ T6037] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1432.548004][ T6060] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1432.574566][ T6068] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1432.634008][ T6073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.642779][ T6073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1432.974506][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 1432.974524][ T29] audit: type=1326 audit(2000000732.850:9657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.7.9880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1433.070970][ T29] audit: type=1326 audit(2000000732.900:9658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.7.9880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1433.094747][ T29] audit: type=1326 audit(2000000732.900:9659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6079 comm="syz.7.9880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80d39ce929 code=0x7ffc0000 [ 1433.122328][ T6088] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1433.228585][ T29] audit: type=1326 audit(2000000733.110:9660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.9887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1433.252241][ T29] audit: type=1326 audit(2000000733.110:9661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.9887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1433.288366][ T6102] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1433.321371][ T29] audit: type=1326 audit(2000000733.160:9662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.9887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1433.344948][ T29] audit: type=1326 audit(2000000733.160:9663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.9887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1433.368439][ T29] audit: type=1326 audit(2000000733.160:9664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.9887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1433.392223][ T29] audit: type=1326 audit(2000000733.160:9665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.9887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1433.415926][ T29] audit: type=1326 audit(2000000733.160:9666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6097 comm="syz.0.9887" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1433.505962][ T6113] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1433.780525][ T6135] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1434.506798][ T6161] loop0: detected capacity change from 0 to 256 [ 1434.549033][ T6163] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1434.703513][ T6161] FAT-fs (loop0): codepage cp950 not found [ 1434.947835][ T6176] 9pnet_fd: Insufficient options for proto=fd [ 1435.079989][ T6182] block device autoloading is deprecated and will be removed. [ 1435.124009][ T6186] 9pnet_fd: Insufficient options for proto=fd [ 1435.495618][ T6196] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.561615][ T6196] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.576355][ T6203] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 1435.576355][ T6203] program syz.0.9928 not setting count and/or reply_len properly [ 1435.615319][ T6196] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.631278][ T6207] loop0: detected capacity change from 0 to 512 [ 1435.651746][ T6207] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1435.664778][ T6207] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1435.680233][ T6196] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1435.703301][ T3620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.775916][ T6196] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.788751][ T6196] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.802936][ T6196] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.816058][ T6196] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1435.967336][ T6224] __nla_validate_parse: 12 callbacks suppressed [ 1435.967353][ T6224] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 1436.063840][ T6239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.072454][ T6239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1436.181895][ T6236] sctp: [Deprecated]: syz.3.9940 (pid 6236) Use of int in max_burst socket option. [ 1436.181895][ T6236] Use struct sctp_assoc_value instead [ 1436.300746][ T6247] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1436.362748][ T6236] netlink: 'syz.3.9940': attribute type 21 has an invalid length. [ 1436.370734][ T6236] netlink: 180 bytes leftover after parsing attributes in process `syz.3.9940'. [ 1436.406581][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9944'. [ 1436.832096][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1436.841046][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.594529][ T6269] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1437.659002][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1437.799332][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1437.839128][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1437.852267][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1437.951042][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1437.964203][ T6281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9956'. [ 1438.046432][ T29] kauditd_printk_skb: 161 callbacks suppressed [ 1438.046453][ T29] audit: type=1326 audit(2000000737.920:9828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1438.077493][ T29] audit: type=1326 audit(2000000737.920:9829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1438.102072][ T29] audit: type=1326 audit(2000000737.960:9830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1438.125842][ T29] audit: type=1326 audit(2000000737.960:9831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1438.149560][ T29] audit: type=1326 audit(2000000737.960:9832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1438.156821][ T6295] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1438.205393][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9960'. [ 1438.237998][ T6300] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1438.263311][ T29] audit: type=1326 audit(2000000737.980:9833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1438.286968][ T29] audit: type=1326 audit(2000000737.980:9834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1438.310685][ T29] audit: type=1326 audit(2000000737.980:9835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1438.334205][ T29] audit: type=1326 audit(2000000738.060:9836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1438.357867][ T29] audit: type=1326 audit(2000000738.060:9837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6288 comm="syz.0.9959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1438.383208][ T6308] IPVS: Error joining to the multicast group [ 1438.440566][ T6315] loop7: detected capacity change from 0 to 512 [ 1438.464022][ T6315] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1438.488490][ T6315] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.9970: invalid block [ 1438.500884][ T6315] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.9970: invalid indirect mapped block 4294967295 (level 1) [ 1438.515408][ T6315] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.9970: invalid indirect mapped block 4294967295 (level 1) [ 1438.530879][ T6315] EXT4-fs (loop7): 2 truncates cleaned up [ 1438.539746][ T6315] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1438.629176][T31292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1438.842549][ T6332] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1439.088675][ T6338] team0: Device gre1 is of different type [ 1439.114572][ T6341] loop0: detected capacity change from 0 to 1024 [ 1439.171990][ T6344] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1439.207894][ T6341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1439.313504][ T3620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.863073][ T6383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.871628][ T6383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.229250][ T6382] netlink: 'syz.9.9990': attribute type 10 has an invalid length. [ 1440.285161][ T6382] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 1440.308634][ T6382] team0: Failed to send options change via netlink (err -105) [ 1440.316212][ T6382] team0: Port device geneve1 added [ 1440.379597][ T6395] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1440.435742][ T6397] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1440.473427][ T6397] loop0: detected capacity change from 0 to 512 [ 1440.490185][ T6397] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1440.529239][ T6397] EXT4-fs error (device loop0): xattr_find_entry:333: inode #15: comm syz.0.9995: corrupted xattr entries [ 1440.549833][ T6397] EXT4-fs (loop0): Remounting filesystem read-only [ 1440.566704][ T6397] EXT4-fs (loop0): 1 truncate cleaned up [ 1440.572949][ T6397] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1440.616636][ T3620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1440.678581][ T6413] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1440.819455][ T6429] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1440.987721][ T6439] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1441.344299][ T6444] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1441.420119][ T6447] __nla_validate_parse: 8 callbacks suppressed [ 1441.420140][ T6447] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1441.472323][ T6452] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10014'. [ 1441.501660][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10016'. [ 1441.537822][ T6454] bond1: entered promiscuous mode [ 1441.542995][ T6454] bond1: entered allmulticast mode [ 1441.561638][ T6454] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1441.600996][ T6460] loop0: detected capacity change from 0 to 512 [ 1441.621584][ T6460] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1441.632559][ T6460] EXT4-fs (loop0): invalid journal inode [ 1441.650678][ T6460] EXT4-fs (loop0): can't get journal size [ 1441.652144][ T6462] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1441.664307][ T6460] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 1441.672228][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10019'. [ 1441.703064][ T6460] System zones: 1-12, 13-13 [ 1441.709766][ T6460] EXT4-fs (loop0): 1 truncate cleaned up [ 1441.721914][ T6460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1441.789347][ T6457] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1441.846689][ T6488] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1441.860387][ T3620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1441.946429][ T6496] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1441.955858][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10032'. [ 1441.967507][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10033'. [ 1442.037337][ T6505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10035'. [ 1442.089612][ T6516] loop0: detected capacity change from 0 to 1024 [ 1442.111355][ T6516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1442.138679][ T6513] ALSA: seq fatal error: cannot create timer (-19) [ 1442.142313][ T6516] SELinux: Context : is not valid (left unmapped). [ 1442.443231][ T3620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1442.935779][ T6545] tbf_change: 2 callbacks suppressed [ 1442.935801][ T6545] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1443.227834][ T6558] loop7: detected capacity change from 0 to 512 [ 1443.229461][ T6560] 9pnet_fd: Insufficient options for proto=fd [ 1443.241827][ T6558] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1443.250204][ T29] kauditd_printk_skb: 248 callbacks suppressed [ 1443.250220][ T29] audit: type=1326 audit(2000000743.120:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.2.10052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1443.280170][ T29] audit: type=1326 audit(2000000743.120:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.2.10052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1443.290569][ T6558] EXT4-fs (loop7): invalid journal inode [ 1443.303933][ T29] audit: type=1326 audit(2000000743.120:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.2.10052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1443.324452][ T6558] EXT4-fs (loop7): can't get journal size [ 1443.333345][ T29] audit: type=1326 audit(2000000743.120:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.2.10052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1443.342318][ T6558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 1443.363666][ T29] audit: type=1326 audit(2000000743.120:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.2.10052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1443.363712][ T29] audit: type=1326 audit(2000000743.120:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.2.10052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1443.363760][ T29] audit: type=1326 audit(2000000743.120:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.2.10052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1443.377480][ T6558] System zones: [ 1443.395302][ T29] audit: type=1326 audit(2000000743.120:10093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.2.10052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1443.419306][ T6558] 1-12 [ 1443.442595][ T29] audit: type=1326 audit(2000000743.120:10094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.2.10052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1443.446160][ T6558] , 13-13 [ 1443.469710][ T29] audit: type=1326 audit(2000000743.120:10095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6559 comm="syz.2.10052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1443.547446][ T6558] EXT4-fs (loop7): 1 truncate cleaned up [ 1443.560319][ T6558] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1443.577827][ T6571] 9pnet_fd: Insufficient options for proto=fd [ 1443.589655][ T6558] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1443.629204][T31292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.692195][ T6580] 9pnet_fd: Insufficient options for proto=fd [ 1443.701345][ T6584] 9pnet_fd: Insufficient options for proto=fd [ 1443.859271][ T6606] 9pnet_fd: Insufficient options for proto=fd [ 1443.901124][ T6614] 9pnet_fd: Insufficient options for proto=fd [ 1443.933367][ T6609] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1444.096064][ T6637] ALSA: seq fatal error: cannot create timer (-19) [ 1444.338344][ T6643] 9pnet_fd: Insufficient options for proto=fd [ 1444.470796][ T6653] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1444.781688][ T6689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1444.796604][ T6689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1444.835723][ T6693] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1445.064199][ T6719] ALSA: seq fatal error: cannot create timer (-19) [ 1445.293556][ T6725] FAULT_INJECTION: forcing a failure. [ 1445.293556][ T6725] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1445.306880][ T6725] CPU: 0 UID: 0 PID: 6725 Comm: syz.3.10118 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1445.306908][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1445.306994][ T6725] Call Trace: [ 1445.307001][ T6725] [ 1445.307009][ T6725] __dump_stack+0x1d/0x30 [ 1445.307030][ T6725] dump_stack_lvl+0xe8/0x140 [ 1445.307047][ T6725] dump_stack+0x15/0x1b [ 1445.307061][ T6725] should_fail_ex+0x265/0x280 [ 1445.307129][ T6725] should_fail+0xb/0x20 [ 1445.307152][ T6725] should_fail_usercopy+0x1a/0x20 [ 1445.307233][ T6725] _copy_from_user+0x1c/0xb0 [ 1445.307320][ T6725] vti6_siocdevprivate+0x132/0x8e0 [ 1445.307369][ T6725] dev_ifsioc+0x8f5/0xaa0 [ 1445.307468][ T6725] dev_ioctl+0x78d/0x960 [ 1445.307531][ T6725] sock_ioctl+0x593/0x610 [ 1445.307564][ T6725] ? __pfx_sock_ioctl+0x10/0x10 [ 1445.307583][ T6725] __se_sys_ioctl+0xce/0x140 [ 1445.307691][ T6725] __x64_sys_ioctl+0x43/0x50 [ 1445.307794][ T6725] x64_sys_call+0x19a8/0x2fb0 [ 1445.307814][ T6725] do_syscall_64+0xd2/0x200 [ 1445.307831][ T6725] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1445.307890][ T6725] ? clear_bhb_loop+0x40/0x90 [ 1445.307927][ T6725] ? clear_bhb_loop+0x40/0x90 [ 1445.307945][ T6725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.307964][ T6725] RIP: 0033:0x7fc818d8e929 [ 1445.307980][ T6725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1445.308069][ T6725] RSP: 002b:00007fc8173f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1445.308103][ T6725] RAX: ffffffffffffffda RBX: 00007fc818fb5fa0 RCX: 00007fc818d8e929 [ 1445.308114][ T6725] RDX: 00002000000003c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1445.308126][ T6725] RBP: 00007fc8173f7090 R08: 0000000000000000 R09: 0000000000000000 [ 1445.308137][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1445.308148][ T6725] R13: 0000000000000000 R14: 00007fc818fb5fa0 R15: 00007ffcbd244e28 [ 1445.308163][ T6725] [ 1445.546560][ T6727] ALSA: seq fatal error: cannot create timer (-19) [ 1445.624351][ T6730] __vm_enough_memory: pid: 6730, comm: syz.0.10119, bytes: 21200627351552 not enough memory for the allocation [ 1445.637741][ T6731] __vm_enough_memory: pid: 6731, comm: syz.0.10119, bytes: 21200627351552 not enough memory for the allocation [ 1445.717709][ T6740] 9pnet_fd: Insufficient options for proto=fd [ 1445.769265][ T6748] loop0: detected capacity change from 0 to 256 [ 1445.837284][ T6748] FAT-fs (loop0): codepage cp950 not found [ 1445.854175][ T6746] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1446.182812][ T6780] capability: warning: `syz.9.10137' uses 32-bit capabilities (legacy support in use) [ 1446.213561][ T6780] program syz.9.10137 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1446.593988][ T6776] __nla_validate_parse: 10 callbacks suppressed [ 1446.594011][ T6776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10132'. [ 1446.832910][ T6790] 9pnet_fd: Insufficient options for proto=fd [ 1447.185286][ T6804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1447.194038][ T6804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1447.605549][ T6824] 9pnet_fd: Insufficient options for proto=fd [ 1448.256116][ T6840] 9pnet_fd: Insufficient options for proto=fd [ 1448.263986][ T29] kauditd_printk_skb: 354 callbacks suppressed [ 1448.264004][ T29] audit: type=1326 audit(2000000748.140:10450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.9.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1448.341412][ T29] audit: type=1326 audit(2000000748.140:10451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.9.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1448.365196][ T29] audit: type=1326 audit(2000000748.140:10452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.9.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1448.388924][ T29] audit: type=1326 audit(2000000748.140:10453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.9.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1448.412515][ T29] audit: type=1326 audit(2000000748.140:10454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.9.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1448.436250][ T29] audit: type=1326 audit(2000000748.140:10455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.9.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1448.459858][ T29] audit: type=1326 audit(2000000748.140:10456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.9.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1448.483550][ T29] audit: type=1326 audit(2000000748.140:10457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.9.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1448.507150][ T29] audit: type=1326 audit(2000000748.140:10458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.9.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1448.530766][ T29] audit: type=1326 audit(2000000748.140:10459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6839 comm="syz.9.10158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa39ed1e929 code=0x7ffc0000 [ 1448.652262][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10162'. [ 1448.683542][ T6848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10163'. [ 1448.692776][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10163'. [ 1448.741788][ T6850] 9pnet_fd: Insufficient options for proto=fd [ 1448.812025][ T6854] 9pnet_fd: Insufficient options for proto=fd [ 1448.880096][ T6837] hub 6-0:1.0: USB hub found [ 1448.907934][ T6837] hub 6-0:1.0: 8 ports detected [ 1449.152028][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10174'. [ 1449.215073][ T6883] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10176'. [ 1449.224385][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10176'. [ 1449.372919][ T6892] ALSA: seq fatal error: cannot create timer (-19) [ 1449.768944][ T6907] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1449.794618][ T6904] loop0: detected capacity change from 0 to 512 [ 1449.809773][ T6904] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 1449.819827][ T6904] EXT4-fs (loop0): invalid journal inode [ 1449.825658][ T6904] EXT4-fs (loop0): can't get journal size [ 1449.832854][ T6904] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 1449.841251][ T6904] System zones: 1-12, 13-13 [ 1449.846555][ T6904] EXT4-fs (loop0): 1 truncate cleaned up [ 1449.869050][ T6904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1449.882300][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10186'. [ 1449.910790][ T3620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1449.965171][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10188'. [ 1449.974341][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10188'. [ 1450.047139][ T6923] ALSA: seq fatal error: cannot create timer (-19) [ 1450.827484][ T6962] 9pnet_fd: Insufficient options for proto=fd [ 1451.071829][ T6981] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1451.081398][ T6972] SELinux: Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped). [ 1452.112014][ T7009] 9pnet_fd: Insufficient options for proto=fd [ 1452.228349][ T7016] FAULT_INJECTION: forcing a failure. [ 1452.228349][ T7016] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.241178][ T7016] CPU: 0 UID: 0 PID: 7016 Comm: syz.0.10223 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1452.241238][ T7016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1452.241250][ T7016] Call Trace: [ 1452.241257][ T7016] [ 1452.241318][ T7016] __dump_stack+0x1d/0x30 [ 1452.241339][ T7016] dump_stack_lvl+0xe8/0x140 [ 1452.241357][ T7016] dump_stack+0x15/0x1b [ 1452.241374][ T7016] should_fail_ex+0x265/0x280 [ 1452.241405][ T7016] should_failslab+0x8c/0xb0 [ 1452.241489][ T7016] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 1452.241516][ T7016] ? sidtab_sid2str_get+0xa0/0x130 [ 1452.241546][ T7016] kmemdup_noprof+0x2b/0x70 [ 1452.241629][ T7016] sidtab_sid2str_get+0xa0/0x130 [ 1452.241655][ T7016] security_sid_to_context_core+0x1eb/0x2e0 [ 1452.241678][ T7016] security_sid_to_context+0x27/0x40 [ 1452.241697][ T7016] selinux_lsmprop_to_secctx+0x67/0xf0 [ 1452.241727][ T7016] security_lsmprop_to_secctx+0x43/0x80 [ 1452.241813][ T7016] audit_log_task_context+0x77/0x190 [ 1452.241850][ T7016] audit_log_task+0xf4/0x250 [ 1452.241879][ T7016] audit_seccomp+0x61/0x100 [ 1452.241921][ T7016] ? __seccomp_filter+0x68c/0x10d0 [ 1452.241943][ T7016] __seccomp_filter+0x69d/0x10d0 [ 1452.241964][ T7016] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1452.241985][ T7016] ? vfs_write+0x75e/0x8e0 [ 1452.242069][ T7016] __secure_computing+0x82/0x150 [ 1452.242169][ T7016] syscall_trace_enter+0xcf/0x1e0 [ 1452.242197][ T7016] do_syscall_64+0xac/0x200 [ 1452.242217][ T7016] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1452.242253][ T7016] ? clear_bhb_loop+0x40/0x90 [ 1452.242273][ T7016] ? clear_bhb_loop+0x40/0x90 [ 1452.242292][ T7016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.242312][ T7016] RIP: 0033:0x7f6d5144e929 [ 1452.242328][ T7016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.242390][ T7016] RSP: 002b:00007f6d4fab7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 1452.242412][ T7016] RAX: ffffffffffffffda RBX: 00007f6d51675fa0 RCX: 00007f6d5144e929 [ 1452.242426][ T7016] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000003 [ 1452.242439][ T7016] RBP: 00007f6d4fab7090 R08: 0000000000000000 R09: 0000000000000000 [ 1452.242452][ T7016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1452.242464][ T7016] R13: 0000000000000000 R14: 00007f6d51675fa0 R15: 00007ffe73a42048 [ 1452.242480][ T7016] [ 1452.506385][ T7018] __nla_validate_parse: 7 callbacks suppressed [ 1452.506470][ T7018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10225'. [ 1452.521854][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10225'. [ 1452.709463][ T7028] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1452.825100][ T7033] 9pnet_fd: Insufficient options for proto=fd [ 1453.299811][ T7046] chnl_net:caif_netlink_parms(): no params data found [ 1453.336308][ T7046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.343506][ T7046] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.350905][ T7046] bridge_slave_0: entered allmulticast mode [ 1453.357455][ T7046] bridge_slave_0: entered promiscuous mode [ 1453.364490][ T7046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.371633][ T7046] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.379141][ T7046] bridge_slave_1: entered allmulticast mode [ 1453.385589][ T7046] bridge_slave_1: entered promiscuous mode [ 1453.439982][ T7046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1453.453130][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10239'. [ 1453.458115][ T7046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1453.462213][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10239'. [ 1453.503271][ T7071] 9pnet_fd: Insufficient options for proto=fd [ 1453.510116][T22970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1453.511408][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 1453.511451][ T29] audit: type=1326 audit(2000000753.390:10900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1453.549577][T22970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1453.549718][ T29] audit: type=1326 audit(2000000753.400:10901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1453.581804][ T29] audit: type=1326 audit(2000000753.400:10902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1453.605450][ T29] audit: type=1326 audit(2000000753.400:10903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1453.629309][ T29] audit: type=1326 audit(2000000753.400:10904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1453.652923][ T29] audit: type=1326 audit(2000000753.400:10905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1453.676616][ T29] audit: type=1326 audit(2000000753.400:10906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1453.688059][ T7073] 9pnet_fd: Insufficient options for proto=fd [ 1453.700410][ T29] audit: type=1326 audit(2000000753.400:10907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1453.700501][ T29] audit: type=1326 audit(2000000753.400:10908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1453.753678][ T29] audit: type=1326 audit(2000000753.400:10909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7070 comm="syz.0.10240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1453.778970][T22970] bond0 (unregistering): Released all slaves [ 1453.787941][T22970] bond1 (unregistering): Released all slaves [ 1453.813148][ T7046] team0: Port device team_slave_0 added [ 1453.818925][ T7079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10244'. [ 1453.820927][ T7046] team0: Port device team_slave_1 added [ 1453.843054][T22970] tipc: Left network mode [ 1453.866167][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1453.873321][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1453.899580][ T7046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1453.937894][T22970] hsr_slave_0: left promiscuous mode [ 1453.945326][T22970] hsr_slave_1: left promiscuous mode [ 1453.953333][T22970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1453.968529][ T7089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10248'. [ 1453.978224][ T7089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10248'. [ 1453.988744][T22970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1454.037900][T22970] team0 (unregistering): Port device team_slave_1 removed [ 1454.055502][T22970] team0 (unregistering): Port device team_slave_0 removed [ 1454.144934][ T7046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.152102][ T7046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.178489][ T7046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.230357][ T7046] hsr_slave_0: entered promiscuous mode [ 1454.236740][ T7046] hsr_slave_1: entered promiscuous mode [ 1454.251520][ T7046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1454.268597][ T7046] Cannot create hsr debugfs directory [ 1454.460989][T22970] IPVS: stop unused estimator thread 0... [ 1454.625170][ T7046] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1454.637632][ T7046] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1454.710475][ T7046] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1454.722769][ T7046] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1454.829764][ T7046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1454.847790][ T7046] 8021q: adding VLAN 0 to HW filter on device team0 [ 1454.871542][T22970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1454.878710][T22970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1454.890048][T13235] bridge0: port 2(bridge_slave_1) entered blocking state [ 1454.897247][T13235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1454.927339][ T7046] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1454.937786][ T7046] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1454.998087][ T7124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1455.040087][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10260'. [ 1455.072522][ T7046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1455.079814][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10260'. [ 1455.114762][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10260'. [ 1455.218567][ T7147] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 1455.257200][ T7152] loop7: detected capacity change from 0 to 512 [ 1455.269418][ T7152] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 1455.290834][ T7152] EXT4-fs (loop7): invalid journal inode [ 1455.295640][ T7046] veth0_vlan: entered promiscuous mode [ 1455.308614][ T7152] EXT4-fs (loop7): can't get journal size [ 1455.316389][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.326951][ T7152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 1455.329948][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.345738][ T7046] veth1_vlan: entered promiscuous mode [ 1455.351413][ T7147] loop0: detected capacity change from 0 to 256 [ 1455.363127][ T7152] System zones: 1-12, 13-13 [ 1455.375413][ T7152] EXT4-fs (loop7): 1 truncate cleaned up [ 1455.384093][ T7046] veth0_macvtap: entered promiscuous mode [ 1455.390332][ T7152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1455.405008][ T7046] veth1_macvtap: entered promiscuous mode [ 1455.423880][T31292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1455.425736][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1455.442300][ T7046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1455.491640][ T7046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.500534][ T7046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.509410][ T7046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.518197][ T7046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1455.583206][ T7174] 9pnet_fd: Insufficient options for proto=fd [ 1455.640936][ T7179] 9pnet_fd: Insufficient options for proto=fd [ 1455.682891][ T7182] 9pnet_fd: Insufficient options for proto=fd [ 1455.690312][ T7183] 9pnet_fd: Insufficient options for proto=fd [ 1455.863350][ T7191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.871861][ T7191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1456.866971][ T7203] 9pnet_fd: Insufficient options for proto=fd [ 1456.876829][ T7200] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1457.038111][ T7212] 9pnet_fd: Insufficient options for proto=fd [ 1457.285420][ T7254] 9pnet_fd: Insufficient options for proto=fd [ 1457.334729][ T7262] 9pnet_fd: Insufficient options for proto=fd [ 1457.543701][ T7291] __nla_validate_parse: 20 callbacks suppressed [ 1457.543724][ T7291] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1457.676665][ T7321] 9pnet_fd: Insufficient options for proto=fd [ 1457.824376][ T7333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.833259][ T7333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1458.272560][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10312'. [ 1458.345469][ T7370] lo speed is unknown, defaulting to 1000 [ 1458.353903][ T7370] lo speed is unknown, defaulting to 1000 [ 1458.363098][ T7370] lo speed is unknown, defaulting to 1000 [ 1458.367835][ T7372] netlink: 12 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 1458.370154][ T7370] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1458.385519][ T7370] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1458.405514][ T7370] lo speed is unknown, defaulting to 1000 [ 1458.412673][ T7370] lo speed is unknown, defaulting to 1000 [ 1458.419012][ T7370] lo speed is unknown, defaulting to 1000 [ 1458.425261][ T7370] lo speed is unknown, defaulting to 1000 [ 1458.436392][ T7370] lo speed is unknown, defaulting to 1000 [ 1458.442613][ T7370] lo speed is unknown, defaulting to 1000 [ 1458.572598][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 1458.572678][ T29] audit: type=1400 audit(2000000758.440:11232): avc: denied { create } for pid=7388 comm="syz.2.10321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1458.661917][ T7395] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10324'. [ 1458.692777][ T29] audit: type=1400 audit(2000000758.570:11233): avc: denied { tracepoint } for pid=7398 comm="syz.3.10325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1458.724141][ T7401] netlink: 16 bytes leftover after parsing attributes in process `syz.9.10326'. [ 1458.733793][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10326'. [ 1458.748342][ T29] audit: type=1326 audit(2000000758.620:11234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.10325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14dee929 code=0x7ffc0000 [ 1458.774617][ T29] audit: type=1326 audit(2000000758.620:11235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.10325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14dee929 code=0x7ffc0000 [ 1458.776859][ T7404] 9pnet_fd: Insufficient options for proto=fd [ 1458.798434][ T29] audit: type=1326 audit(2000000758.650:11236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.10325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbf14dee929 code=0x7ffc0000 [ 1458.798744][ T29] audit: type=1326 audit(2000000758.650:11237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.10325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14dee929 code=0x7ffc0000 [ 1458.851801][ T29] audit: type=1326 audit(2000000758.650:11238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.10325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14dee929 code=0x7ffc0000 [ 1458.876264][ T29] audit: type=1326 audit(2000000758.680:11239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.10325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf14dee929 code=0x7ffc0000 [ 1458.900207][ T29] audit: type=1326 audit(2000000758.680:11240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.10325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14dee929 code=0x7ffc0000 [ 1458.923953][ T29] audit: type=1326 audit(2000000758.680:11241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7398 comm="syz.3.10325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf14dee929 code=0x7ffc0000 [ 1458.941640][ T7399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7399 comm=syz.3.10325 [ 1458.989942][ T7406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10328'. [ 1459.006146][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10328'. [ 1459.020787][ T7410] 9pnet_fd: Insufficient options for proto=fd [ 1459.341556][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.350362][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1459.885828][ T7444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1459.894617][ T7444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1460.578821][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10347'. [ 1460.588052][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10347'. [ 1461.001116][ T7496] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1461.719297][ T7518] loop7: detected capacity change from 0 to 256 [ 1461.745471][ T7518] FAT-fs (loop7): codepage cp950 not found [ 1462.618224][ T7556] loop7: detected capacity change from 0 to 1024 [ 1462.629219][ T7556] EXT4-fs: Ignoring removed orlov option [ 1462.641005][ T7556] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1462.719936][T31292] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1462.756002][T31292] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 1462.787287][ T7564] FAULT_INJECTION: forcing a failure. [ 1462.787287][ T7564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.800505][ T7564] CPU: 1 UID: 0 PID: 7564 Comm: syz.3.10378 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1462.800570][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1462.800582][ T7564] Call Trace: [ 1462.800591][ T7564] [ 1462.800600][ T7564] __dump_stack+0x1d/0x30 [ 1462.800622][ T7564] dump_stack_lvl+0xe8/0x140 [ 1462.800645][ T7564] dump_stack+0x15/0x1b [ 1462.800680][ T7564] should_fail_ex+0x265/0x280 [ 1462.800712][ T7564] should_fail+0xb/0x20 [ 1462.800743][ T7564] should_fail_usercopy+0x1a/0x20 [ 1462.800808][ T7564] _copy_from_user+0x1c/0xb0 [ 1462.800832][ T7564] get_user_ifreq+0x53/0x110 [ 1462.800857][ T7564] sock_ioctl+0x54e/0x610 [ 1462.800878][ T7564] ? __pfx_sock_ioctl+0x10/0x10 [ 1462.800914][ T7564] __se_sys_ioctl+0xce/0x140 [ 1462.800947][ T7564] __x64_sys_ioctl+0x43/0x50 [ 1462.800977][ T7564] x64_sys_call+0x19a8/0x2fb0 [ 1462.801059][ T7564] do_syscall_64+0xd2/0x200 [ 1462.801078][ T7564] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1462.801152][ T7564] ? clear_bhb_loop+0x40/0x90 [ 1462.801270][ T7564] ? clear_bhb_loop+0x40/0x90 [ 1462.801289][ T7564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.801313][ T7564] RIP: 0033:0x7fbf14dee929 [ 1462.801332][ T7564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.801353][ T7564] RSP: 002b:00007fbf13457038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1462.801376][ T7564] RAX: ffffffffffffffda RBX: 00007fbf15015fa0 RCX: 00007fbf14dee929 [ 1462.801453][ T7564] RDX: 0000200000001440 RSI: 00000000000089f0 RDI: 0000000000000003 [ 1462.801466][ T7564] RBP: 00007fbf13457090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.801480][ T7564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.801495][ T7564] R13: 0000000000000000 R14: 00007fbf15015fa0 R15: 00007ffe4d0247a8 [ 1462.801575][ T7564] [ 1463.058739][T31292] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.095576][ T7575] __nla_validate_parse: 13 callbacks suppressed [ 1463.095617][ T7575] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10383'. [ 1463.208843][ T7577] lo speed is unknown, defaulting to 1000 [ 1463.478117][ T7578] lo speed is unknown, defaulting to 1000 [ 1463.596758][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 1463.596779][ T29] audit: type=1326 audit(2000000763.470:11573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.0.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1463.626847][ T29] audit: type=1326 audit(2000000763.470:11574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7572 comm="syz.0.10382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1463.658136][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10388'. [ 1463.676891][T31212] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.717101][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10389'. [ 1463.724325][ T7578] chnl_net:caif_netlink_parms(): no params data found [ 1463.727911][ T29] audit: type=1326 audit(2000000763.600:11575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7592 comm="syz.3.10387" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf14dee929 code=0x0 [ 1463.750512][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10389'. [ 1463.774248][T31212] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.803627][ T7578] bridge0: port 1(bridge_slave_0) entered blocking state [ 1463.811075][ T7578] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.819327][ T7578] bridge_slave_0: entered allmulticast mode [ 1463.822621][ T7607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10391'. [ 1463.826070][ T7578] bridge_slave_0: entered promiscuous mode [ 1463.844344][ T7600] lo speed is unknown, defaulting to 1000 [ 1463.853097][T31212] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.865604][ T7578] bridge0: port 2(bridge_slave_1) entered blocking state [ 1463.867573][ T7610] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1463.872776][ T7578] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.888671][ T7578] bridge_slave_1: entered allmulticast mode [ 1463.895429][ T7578] bridge_slave_1: entered promiscuous mode [ 1463.913871][T31212] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.958139][ T7578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1463.967689][ T7616] 9pnet_fd: Insufficient options for proto=fd [ 1463.993399][ T29] audit: type=1326 audit(2000000763.850:11576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.0.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1464.017114][ T29] audit: type=1326 audit(2000000763.850:11577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.0.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1464.040793][ T29] audit: type=1326 audit(2000000763.850:11578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.0.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1464.064477][ T29] audit: type=1326 audit(2000000763.850:11579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.0.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1464.088214][ T29] audit: type=1326 audit(2000000763.850:11580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.0.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1464.092175][ T7578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1464.112023][ T29] audit: type=1326 audit(2000000763.850:11581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.0.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1464.144871][ T29] audit: type=1326 audit(2000000763.850:11582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7614 comm="syz.0.10395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1464.177046][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10397'. [ 1464.186654][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10397'. [ 1464.198340][ T7620] netlink: 36 bytes leftover after parsing attributes in process `syz.9.10396'. [ 1464.214949][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10397'. [ 1464.224101][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10397'. [ 1464.248686][ T7623] loop0: detected capacity change from 0 to 1024 [ 1464.255832][ T7623] EXT4-fs: Ignoring removed nobh option [ 1464.261470][ T7623] EXT4-fs: Ignoring removed bh option [ 1464.282942][ T7623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1464.296184][T31212] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1464.307302][T31212] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1464.323383][T31212] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1464.333695][T31212] bond0 (unregistering): Released all slaves [ 1464.343081][ T7578] team0: Port device team_slave_0 added [ 1464.361626][ T7578] team0: Port device team_slave_1 added [ 1464.385523][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.392684][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.418933][ T7578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.440142][ T7578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.447359][ T7578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1464.473431][ T7578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.572943][ T7639] lo speed is unknown, defaulting to 1000 [ 1464.665944][T31212] tipc: Left network mode [ 1464.722241][T31212] hsr_slave_0: left promiscuous mode [ 1464.782497][ T3620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1464.803287][T31212] hsr_slave_1: left promiscuous mode [ 1464.837064][T31212] batman_adv: batadv0: Removing interface: team0 [ 1464.888667][T31212] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1464.896245][T31212] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1464.923529][T31212] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1464.931124][T31212] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1464.947365][T31212] veth1_macvtap: left promiscuous mode [ 1464.953021][T31212] veth0_macvtap: left promiscuous mode [ 1464.958728][T31212] veth1_vlan: left promiscuous mode [ 1464.964223][T31212] veth0_vlan: left promiscuous mode [ 1465.001178][ T7654] 9pnet_fd: Insufficient options for proto=fd [ 1465.111778][T31212] team0 (unregistering): Port device team_slave_1 removed [ 1465.124128][T31212] team0 (unregistering): Port device team_slave_0 removed [ 1465.215074][ T7578] hsr_slave_0: entered promiscuous mode [ 1465.229136][ T7578] hsr_slave_1: entered promiscuous mode [ 1465.235126][ T7578] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1465.243214][ T7578] Cannot create hsr debugfs directory [ 1465.248868][ T9] lo speed is unknown, defaulting to 1000 [ 1465.248959][ T7658] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1465.254618][ T9] infiniband syz0: ib_query_port failed (-19) [ 1465.303414][ T7658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.322969][ T7658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.512505][ T7677] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1465.679018][ T7578] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1465.688030][ T7578] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1465.726324][ T7578] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1465.736206][ T7578] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1465.792315][ T7578] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.811399][ T7578] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.832076][T13222] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.839203][T13222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.860302][ T7578] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1465.870803][ T7578] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1465.886272][T13222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.893439][T13222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1465.972371][ T7578] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.039513][ T7712] ALSA: seq fatal error: cannot create timer (-19) [ 1466.125980][ T7730] bond0: (slave bond_slave_0): Releasing backup interface [ 1466.151348][ T7730] bond0: (slave bond_slave_1): Releasing backup interface [ 1466.163739][ T7730] team0: Port device team_slave_0 removed [ 1466.171025][ T7730] team0: Port device team_slave_1 removed [ 1466.177403][ T7730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1466.194456][ T7730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1466.221049][ T7578] veth0_vlan: entered promiscuous mode [ 1466.230916][ T7578] veth1_vlan: entered promiscuous mode [ 1466.252639][ T7578] veth0_macvtap: entered promiscuous mode [ 1466.265129][ T7578] veth1_macvtap: entered promiscuous mode [ 1466.276650][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1466.290517][ T7578] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1466.302668][ T7578] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.311485][ T7578] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.320348][ T7578] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.329162][ T7578] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1466.421643][ T7751] 9pnet_fd: Insufficient options for proto=fd [ 1467.341231][ T7777] ALSA: seq fatal error: cannot create timer (-19) [ 1467.456927][ T7784] 9pnet_fd: Insufficient options for proto=fd [ 1467.572101][ T7798] FAULT_INJECTION: forcing a failure. [ 1467.572101][ T7798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1467.585376][ T7798] CPU: 1 UID: 0 PID: 7798 Comm: syz.8.10447 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1467.585406][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1467.585551][ T7798] Call Trace: [ 1467.585558][ T7798] [ 1467.585596][ T7798] __dump_stack+0x1d/0x30 [ 1467.585618][ T7798] dump_stack_lvl+0xe8/0x140 [ 1467.585637][ T7798] dump_stack+0x15/0x1b [ 1467.585656][ T7798] should_fail_ex+0x265/0x280 [ 1467.585687][ T7798] should_fail+0xb/0x20 [ 1467.585773][ T7798] should_fail_usercopy+0x1a/0x20 [ 1467.585830][ T7798] _copy_from_user+0x1c/0xb0 [ 1467.585923][ T7798] do_sys_poll+0x149/0xbd0 [ 1467.585948][ T7798] ? selinux_file_open+0x2df/0x330 [ 1467.586035][ T7798] __se_sys_poll+0xdd/0x200 [ 1467.586055][ T7798] __x64_sys_poll+0x43/0x50 [ 1467.586095][ T7798] x64_sys_call+0x2dc4/0x2fb0 [ 1467.586118][ T7798] do_syscall_64+0xd2/0x200 [ 1467.586137][ T7798] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1467.586161][ T7798] ? clear_bhb_loop+0x40/0x90 [ 1467.586206][ T7798] ? clear_bhb_loop+0x40/0x90 [ 1467.586228][ T7798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1467.586250][ T7798] RIP: 0033:0x7f4f166de929 [ 1467.586266][ T7798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1467.586284][ T7798] RSP: 002b:00007f4f14d47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1467.586355][ T7798] RAX: ffffffffffffffda RBX: 00007f4f16905fa0 RCX: 00007f4f166de929 [ 1467.586370][ T7798] RDX: ffffffffffbffff8 RSI: 000000000000002c RDI: 0000200000b2c000 [ 1467.586398][ T7798] RBP: 00007f4f14d47090 R08: 0000000000000000 R09: 0000000000000000 [ 1467.586455][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1467.586479][ T7798] R13: 0000000000000000 R14: 00007f4f16905fa0 R15: 00007ffd533ae4c8 [ 1467.586497][ T7798] [ 1467.783257][ T7802] usb usb3: usbfs: process 7802 (syz.9.10449) did not claim interface 0 before use [ 1467.812062][ T7805] loop0: detected capacity change from 0 to 1024 [ 1467.833238][ T7805] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1468.016913][ T3620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1468.097182][ T7824] ALSA: seq fatal error: cannot create timer (-19) [ 1468.909072][ T7839] 9pnet_fd: Insufficient options for proto=fd [ 1468.952418][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 1468.952437][ T29] audit: type=1326 audit(2000000768.830:11738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.2.10459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1468.991639][ T29] audit: type=1326 audit(2000000768.860:11739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.2.10459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1469.015575][ T29] audit: type=1326 audit(2000000768.860:11740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.2.10459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1469.039233][ T29] audit: type=1326 audit(2000000768.860:11741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.2.10459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1469.062792][ T29] audit: type=1326 audit(2000000768.860:11742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.2.10459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1469.062821][ T29] audit: type=1326 audit(2000000768.860:11743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.2.10459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1469.110078][ T29] audit: type=1326 audit(2000000768.860:11744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.2.10459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1469.133888][ T29] audit: type=1326 audit(2000000768.860:11745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.2.10459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1469.157525][ T29] audit: type=1326 audit(2000000768.860:11746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.2.10459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1469.181160][ T29] audit: type=1326 audit(2000000768.860:11747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7838 comm="syz.2.10459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f119defe929 code=0x7ffc0000 [ 1469.479869][ T7870] __nla_validate_parse: 25 callbacks suppressed [ 1469.479888][ T7870] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10471'. [ 1469.506172][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10471'. [ 1469.717795][ T7885] SELinux: policydb magic number 0x1 does not match expected magic number 0xf97cff8c [ 1469.729048][ T7885] SELinux: failed to load policy [ 1470.377686][ T7919] ALSA: seq fatal error: cannot create timer (-19) [ 1470.403351][ T7925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10494'. [ 1470.414453][ T7925] team0: No ports can be present during mode change [ 1470.513073][ T7932] 9pnet_fd: Insufficient options for proto=fd [ 1471.707247][ T8014] FAULT_INJECTION: forcing a failure. [ 1471.707247][ T8014] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1471.720535][ T8014] CPU: 1 UID: 0 PID: 8014 Comm: syz.8.10528 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1471.720568][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1471.720581][ T8014] Call Trace: [ 1471.720588][ T8014] [ 1471.720598][ T8014] __dump_stack+0x1d/0x30 [ 1471.720624][ T8014] dump_stack_lvl+0xe8/0x140 [ 1471.720709][ T8014] dump_stack+0x15/0x1b [ 1471.720728][ T8014] should_fail_ex+0x265/0x280 [ 1471.720764][ T8014] should_fail+0xb/0x20 [ 1471.720790][ T8014] should_fail_usercopy+0x1a/0x20 [ 1471.720876][ T8014] _copy_to_user+0x20/0xa0 [ 1471.721027][ T8014] simple_read_from_buffer+0xb5/0x130 [ 1471.721062][ T8014] proc_fail_nth_read+0x100/0x140 [ 1471.721085][ T8014] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1471.721162][ T8014] vfs_read+0x1a0/0x6f0 [ 1471.721257][ T8014] ? __rcu_read_unlock+0x4f/0x70 [ 1471.721284][ T8014] ? __fget_files+0x184/0x1c0 [ 1471.721309][ T8014] ksys_read+0xda/0x1a0 [ 1471.721344][ T8014] __x64_sys_read+0x40/0x50 [ 1471.721420][ T8014] x64_sys_call+0x2d77/0x2fb0 [ 1471.721445][ T8014] do_syscall_64+0xd2/0x200 [ 1471.721467][ T8014] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 1471.721494][ T8014] ? clear_bhb_loop+0x40/0x90 [ 1471.721513][ T8014] ? clear_bhb_loop+0x40/0x90 [ 1471.721557][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.721581][ T8014] RIP: 0033:0x7f4f166dd33c [ 1471.721600][ T8014] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1471.721705][ T8014] RSP: 002b:00007f4f14d47030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1471.721729][ T8014] RAX: ffffffffffffffda RBX: 00007f4f16905fa0 RCX: 00007f4f166dd33c [ 1471.721745][ T8014] RDX: 000000000000000f RSI: 00007f4f14d470a0 RDI: 0000000000000003 [ 1471.721795][ T8014] RBP: 00007f4f14d47090 R08: 0000000000000000 R09: 0000000000000000 [ 1471.721809][ T8014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1471.721824][ T8014] R13: 0000000000000000 R14: 00007f4f16905fa0 R15: 00007ffd533ae4c8 [ 1471.721869][ T8014] [ 1471.987040][ T3402] hid (null): invalid report_size 30718 [ 1471.992888][ T3402] hid (null): unknown global tag 0xb7 [ 1472.002326][ T3402] hid (null): unknown global tag 0xc [ 1472.007695][ T3402] hid (null): unknown global tag 0xe [ 1472.013051][ T3402] hid (null): invalid report_size 1517436560 [ 1472.022219][ T3402] hid (null): invalid report_size 62278 [ 1472.028448][ T3402] hid (null): unknown global tag 0xd [ 1472.033847][ T3402] hid (null): unknown global tag 0xe6 [ 1472.039299][ T3402] hid (null): unknown global tag 0xe9 [ 1472.044837][ T3402] hid (null): unknown global tag 0xd [ 1472.050226][ T3402] hid (null): unknown global tag 0xc [ 1472.055527][ T3402] hid (null): unknown global tag 0xe [ 1472.061092][ T3402] hid (null): global environment stack underflow [ 1472.067601][ T3402] hid (null): global environment stack underflow [ 1472.074287][ T3402] hid (null): unknown global tag 0xd [ 1472.074321][ T3402] hid (null): unknown global tag 0x28 [ 1472.085140][ T3402] hid (null): unknown global tag 0xd [ 1472.090633][ T3402] hid (null): unknown global tag 0xd [ 1472.096130][ T3402] hid (null): unknown global tag 0xd [ 1472.101569][ T3402] hid (null): report_id 10805 is invalid [ 1472.107272][ T3402] hid (null): unknown global tag 0x94 [ 1472.112717][ T3402] hid (null): report_id 52402 is invalid [ 1472.118463][ T3402] hid (null): unknown global tag 0xd [ 1472.123772][ T3402] hid (null): bogus close delimiter [ 1472.129095][ T3402] hid (null): bogus close delimiter [ 1472.134320][ T3402] hid (null): unknown global tag 0xc [ 1472.139758][ T3402] hid (null): unknown global tag 0xd [ 1472.145086][ T3402] hid (null): unknown global tag 0xd [ 1472.150432][ T3402] hid (null): unknown global tag 0xc5 [ 1472.155909][ T3402] hid (null): invalid report_size 16895 [ 1472.161761][ T3402] hid (null): unknown global tag 0xe [ 1472.167087][ T3402] hid (null): global environment stack underflow [ 1472.173863][ T3402] hid (null): unknown global tag 0xc [ 1472.179272][ T3402] hid (null): unknown global tag 0xe [ 1472.184588][ T3402] hid (null): invalid report_size 1639632808 [ 1472.190684][ T3402] hid (null): unknown global tag 0xd [ 1472.196005][ T3402] hid (null): report_id 22457 is invalid [ 1472.201736][ T3402] hid (null): unknown global tag 0xeb [ 1472.207188][ T3402] hid (null): unknown global tag 0x6f [ 1472.212673][ T3402] hid (null): invalid report_count 56867 [ 1472.218442][ T3402] hid (null): unknown global tag 0xd [ 1472.223760][ T3402] hid (null): unknown global tag 0xe [ 1472.229104][ T3402] hid (null): unknown global tag 0xd [ 1472.234424][ T3402] hid (null): unknown global tag 0xc [ 1472.245547][ T3402] hid (null): report_id 39357 is invalid [ 1472.251262][ T3402] hid (null): unknown global tag 0xd [ 1472.290330][ T8029] netlink: 'syz.0.10532': attribute type 1 has an invalid length. [ 1472.348366][ T8029] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1472.376296][ T3402] hid-generic 000A:0003:0005.0003: reserved main item tag 0xe [ 1472.392199][ T3402] hid-generic 000A:0003:0005.0003: unknown main item tag 0x5 [ 1472.408799][ T3402] hid-generic 000A:0003:0005.0003: unknown main item tag 0x0 [ 1472.416314][ T3402] hid-generic 000A:0003:0005.0003: unknown main item tag 0x0 [ 1472.438148][ T8048] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 1472.451986][ T8050] 9pnet_fd: Insufficient options for proto=fd [ 1472.483886][ T3402] hid-generic 000A:0003:0005.0003: unexpected long global item [ 1472.491888][ T3402] hid-generic 000A:0003:0005.0003: probe with driver hid-generic failed with error -22 [ 1472.543628][T13191] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.588005][ T8023] chnl_net:caif_netlink_parms(): no params data found [ 1472.634661][T13191] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.756661][T13191] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.782138][ T8023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.789476][ T8023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.799340][ T8023] bridge_slave_0: entered allmulticast mode [ 1472.806320][ T8023] bridge_slave_0: entered promiscuous mode [ 1472.813354][ T8023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1472.820624][ T8023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.828083][ T8023] bridge_slave_1: entered allmulticast mode [ 1472.834996][ T8023] bridge_slave_1: entered promiscuous mode [ 1472.848280][T13191] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.876094][ T8082] ALSA: seq fatal error: cannot create timer (-19) [ 1472.887873][ T8023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1472.905104][ T8023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1472.957912][ T8090] 9pnet_fd: Insufficient options for proto=fd [ 1472.974683][ T8023] team0: Port device team_slave_0 added [ 1472.991953][ T8023] team0: Port device team_slave_1 added [ 1473.181575][T13191] team0: Port device geneve1 removed [ 1473.196880][T13191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1473.208102][T13191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1473.220342][T13191] bond0 (unregistering): Released all slaves [ 1473.230534][T13191] bond1 (unregistering): Released all slaves [ 1473.386634][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1473.393703][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.420009][ T8023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1473.899968][ T8023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1473.906982][ T8023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1473.933077][ T8023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1473.943910][T13191] tipc: Left network mode [ 1473.979552][ T8023] hsr_slave_0: entered promiscuous mode [ 1473.985660][ T8023] hsr_slave_1: entered promiscuous mode [ 1473.995008][ T8023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1474.003654][ T8023] Cannot create hsr debugfs directory [ 1474.018522][T13191] hsr_slave_0: left promiscuous mode [ 1474.025902][T13191] hsr_slave_1: left promiscuous mode [ 1474.031955][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.039629][T13191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.040082][ T8118] 9pnet_fd: Insufficient options for proto=fd [ 1474.055726][T13191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.063488][T13191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.070735][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 1474.070748][ T29] audit: type=1326 audit(2000000773.930:12097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1474.100654][ T29] audit: type=1326 audit(2000000773.930:12098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1474.124297][ T29] audit: type=1326 audit(2000000773.930:12099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1474.147945][ T29] audit: type=1326 audit(2000000773.930:12100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1474.171543][ T29] audit: type=1326 audit(2000000773.930:12101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1474.195233][ T29] audit: type=1326 audit(2000000773.930:12102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1474.219052][ T29] audit: type=1326 audit(2000000773.930:12103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1474.242837][ T29] audit: type=1326 audit(2000000773.930:12104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1474.266568][ T29] audit: type=1326 audit(2000000773.930:12105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1474.290171][ T29] audit: type=1326 audit(2000000773.930:12106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8117 comm="syz.0.10561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6d5144e929 code=0x7ffc0000 [ 1474.318054][T13191] veth0_macvtap: left promiscuous mode [ 1474.324533][T13191] veth1_vlan: left promiscuous mode [ 1474.331220][T13191] veth0_vlan: left promiscuous mode [ 1474.479072][T13191] team0 (unregistering): Port device team_slave_1 removed [ 1474.502737][T13191] team0 (unregistering): Port device team_slave_0 removed [ 1474.505159][ T8135] loop0: detected capacity change from 0 to 512 [ 1474.557181][ T8135] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1474.599740][ T8135] EXT4-fs (loop0): 1 truncate cleaned up [ 1474.614504][ T8135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1474.703120][ T8135] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #2: block 13: comm syz.0.10567: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 1474.890534][ T3620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.920664][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10568'. [ 1474.945527][T13191] IPVS: stop unused estimator thread 0... [ 1474.949143][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10568'. [ 1474.988721][ T8146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10569'. [ 1475.005666][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10568'. [ 1475.020629][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10568'. [ 1475.022579][ T8146] team0: Mode changed to "activebackup" [ 1475.070250][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10568'. [ 1475.085196][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10568'. [ 1475.130496][ T8023] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1475.153343][ T8023] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1475.180795][ T8023] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1475.191812][ T8154] ALSA: seq fatal error: cannot create timer (-19) [ 1475.202256][ T8023] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1475.265201][ T8159] SELinux: ebitmap: truncated map [ 1475.280721][ T8159] SELinux: failed to load policy [ 1475.346487][ T8023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1475.360191][ T8165] loop0: detected capacity change from 0 to 512 [ 1475.382247][ T8023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1475.434558][T13191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.441725][T13191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1475.451826][ T8165] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1475.475620][T13191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.482868][T13191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1475.500932][ T8186] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 1475.504804][ T8165] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1475.538922][ T8023] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1475.550172][ T8023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1475.622002][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10582'. [ 1475.667288][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10582'. [ 1475.682119][ T8023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1475.790919][ T8211] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1475.919199][ T8023] veth0_vlan: entered promiscuous mode [ 1475.933525][ T3620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1475.946871][ T8023] veth1_vlan: entered promiscuous mode [ 1475.995297][ T8023] veth0_macvtap: entered promiscuous mode [ 1476.007537][ T8023] veth1_macvtap: entered promiscuous mode [ 1476.023238][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1476.050751][ T8221] SELinux: ebitmap: truncated map [ 1476.069851][ T8023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1476.072898][ T8227] loop0: detected capacity change from 0 to 1024 [ 1476.094423][ T8221] SELinux: failed to load policy [ 1476.103645][ T8023] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.105952][ T8227] EXT4-fs: Ignoring removed orlov option [ 1476.112649][ T8023] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.127017][ T8023] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.135794][ T8023] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1476.169225][ T8227] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1476.546575][ T8252] team0: No ports can be present during mode change [ 1476.562947][ T8254] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1476.838722][ T8227] ================================================================== [ 1476.846967][ T8227] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 1476.855028][ T8227] [ 1476.857384][ T8227] write to 0xffff88811ad14a50 of 4 bytes by task 8237 on cpu 0: [ 1476.865063][ T8227] writeback_single_inode+0x14a/0x3e0 [ 1476.870479][ T8227] sync_inode_metadata+0x5b/0x90 [ 1476.875577][ T8227] generic_buffers_fsync_noflush+0xd9/0x120 [ 1476.881516][ T8227] ext4_sync_file+0x1ab/0x690 [ 1476.886249][ T8227] vfs_fsync_range+0x10d/0x130 [ 1476.891056][ T8227] ext4_buffered_write_iter+0x34f/0x3c0 [ 1476.896638][ T8227] ext4_file_write_iter+0x383/0xf00 [ 1476.901879][ T8227] iter_file_splice_write+0x5f2/0x970 [ 1476.907321][ T8227] direct_splice_actor+0x156/0x2a0 [ 1476.912591][ T8227] splice_direct_to_actor+0x312/0x680 [ 1476.918025][ T8227] do_splice_direct+0xda/0x150 [ 1476.922817][ T8227] do_sendfile+0x380/0x650 [ 1476.927267][ T8227] __x64_sys_sendfile64+0x105/0x150 [ 1476.932503][ T8227] x64_sys_call+0xb39/0x2fb0 [ 1476.937129][ T8227] do_syscall_64+0xd2/0x200 [ 1476.941869][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.947807][ T8227] [ 1476.950163][ T8227] read to 0xffff88811ad14a50 of 4 bytes by task 8227 on cpu 1: [ 1476.957824][ T8227] vfs_fsync_range+0x9b/0x130 [ 1476.962535][ T8227] ext4_buffered_write_iter+0x34f/0x3c0 [ 1476.968122][ T8227] ext4_file_write_iter+0x383/0xf00 [ 1476.973364][ T8227] iter_file_splice_write+0x5f2/0x970 [ 1476.978880][ T8227] direct_splice_actor+0x156/0x2a0 [ 1476.984032][ T8227] splice_direct_to_actor+0x312/0x680 [ 1476.989449][ T8227] do_splice_direct+0xda/0x150 [ 1476.994345][ T8227] do_sendfile+0x380/0x650 [ 1476.998845][ T8227] __x64_sys_sendfile64+0x105/0x150 [ 1477.004084][ T8227] x64_sys_call+0xb39/0x2fb0 [ 1477.008702][ T8227] do_syscall_64+0xd2/0x200 [ 1477.013256][ T8227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1477.019181][ T8227] [ 1477.021524][ T8227] value changed: 0x00000028 -> 0x00000022 [ 1477.027288][ T8227] [ 1477.029635][ T8227] Reported by Kernel Concurrency Sanitizer on: [ 1477.035821][ T8227] CPU: 1 UID: 0 PID: 8227 Comm: syz.0.10589 Not tainted 6.16.0-rc2-syzkaller-00045-g4663747812d1 #0 PREEMPT(voluntary) [ 1477.048363][ T8227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1477.058729][ T8227] ================================================================== [ 1477.293745][ T3620] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.